Archive
7 September 2026
Vulnerabilities first published on this day (UTC), newest first.
254 results · Feed
-
Medium 5.9
An incorrect buffer size calculation in the Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.7.6 allows loca…
-
Medium 5.6
The Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.7.6 allows local authenticated users to bypass the trus…
-
Medium 5.3
SourceCodester Syllabus-Aligned Learning Management & Examination System cict_portal.sql cleartext storage
A vulnerability was identified in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This affects an unknown function of the file cict_portal.sql. Such manipulation leads to cleartext storage of sensitive information. It is possible…
-
Medium 6.3
SourceCodester Syllabus-Aligned Learning Management & Examination System Login auth_process.php session fixiation
A vulnerability was determined in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. The impacted element is an unknown function of the file auth_process.php of the component Login. This manipulation causes session fixiation. It is …
-
Medium 4.3
SourceCodester Syllabus-Aligned Learning Management & Examination System manage_subjects.php cross site scripting
A vulnerability was found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. The affected element is an unknown function of the file manage_subjects.php. The manipulation of the argument msg/title/content results in cross site sc…
-
Critical 9.9
Advantech WISE-6610-NB Node-RED nodered_lib_apply command injection
A vulnerability was identified in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WISE-6610P-DTA 1.2.1_2025…
-
Critical 9.9
Advantech WISE-6610-NB Basic Station Certificate-Deletion basicstation_apply command injection
A vulnerability was determined in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WISE-6610P-DTA 1.2.1_2025…
-
High 7.3
SourceCodester Syllabus-Aligned Learning Management & Examination System delete_exam.php authorization
A vulnerability has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. Impacted is an unknown function of the file delete_exam.php. The manipulation of the argument ID leads to authorization bypass. The attack is possi…
-
High 7.3
SourceCodester Syllabus-Aligned Learning Management & Examination System db.php hard-coded credentials
A flaw has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This issue affects some unknown processing of the file db.php. Executing a manipulation can lead to hard-coded credentials. The attack can be executed remot…
-
Medium 5.3
SourceCodester Syllabus-Aligned Learning Management & Examination System auth.php register privileges management
A vulnerability was detected in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This vulnerability affects the function register of the file auth.php. Performing a manipulation of the argument role results in improper privilege m…
-
Medium 5.3
projeto-siga Authentication Flow ExAutenticacaoController.java ExAutenticacaoController.autenticar authorization
A security vulnerability has been detected in projeto-siga siga up to 11.0.2.10/11.0.2.13/11.1.1. This affects the function ExAutenticacaoController.autenticar of the file sigaex/src/main/java/br/gov/jfrj/siga/vraptor/ExAutenticacaoController.java of the comp…
-
High 7.3
projeto-siga HTML-to-PDF Endpoint ExUtilController.java DownloadExterno.getUrl server-side request forgery
A weakness has been identified in projeto-siga siga up to 11.1.1. Affected by this issue is the function DownloadExterno.getUrl of the file sigaex/src/main/java/br/gov/jfrj/siga/vraptor/ExUtilController.java of the component HTML-to-PDF Endpoint. This manipul…
-
High 7.3
Beijing Meite Software Technology U+Smart Enjoyment WebSite UploadFormImg.ashx unrestricted upload
A vulnerability was determined in Beijing Meite Software Technology U+Smart Enjoyment WebSite 18.6001.1096.1000. This impacts an unknown function of the file /Report/Upload/UploadFormImg.ashx. Executing a manipulation of the argument File can lead to unrestri…
-
Medium 4.7
FluentCMS PermissionManager.cs GetAccessible authorization
A vulnerability was found in FluentCMS up to 0.0.5. This affects the function GetAccessible of the file src/Backend/FluentCMS.Services/Permissions/PermissionManager.cs. Performing a manipulation results in missing authorization. It is possible to initiate the…
-
Medium 6.3
itsourcecode Sales and Inventory System settings_edit.php sql injection
A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. The impacted element is an unknown function of the file /pages/settings_edit.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remo…
-
Medium 6.2
An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 allows an attacker who…
-
Medium 6.3
itsourcecode Sales and Inventory System emp_edit1.php sql injection
A flaw has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/emp_edit1.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. T…
-
High 7.3
itsourcecode School Management System User_Login.php sql injection
A vulnerability was detected in itsourcecode School Management System 1.0. Impacted is an unknown function of the file User_Login.php. The manipulation of the argument email results in sql injection. The attack can be executed remotely. The exploit is now pub…
-
Medium 6.3
itsourcecode Information System Society Membership System check_student.php sql injection
A security vulnerability has been detected in itsourcecode Information System Society Membership System 1.0. This issue affects some unknown processing of the file /society/check_student.php. The manipulation of the argument student_id leads to sql injection.…
-
Medium 6.3
itsourcecode Sales and Inventory System us_transac.php sql injection
A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/us_transac.php. Such manipulation of the argument Username leads to sql injection. It is possible to l…
-
Medium 4.3
sfturing ssm_pro Order Endpoint OrderController.java cross site scripting
A flaw has been found in sfturing ssm_pro up to 627f426331da8086ce8fff2017d65b1ddef384f8. Affected is an unknown function of the file ssm_pro/src/main/java/cn/sfturing/web/OrderController.java of the component Order Endpoint. This manipulation of the argument…
-
High 7.3
sfturing hosp_order Order Cancellation OrderController.java orderRecordsService.cancelOrder authorization
A vulnerability was detected in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. This impacts the function orderRecordsService.cancelOrder of the file ssm_pro/src/main/java/cn/sfturing/web/OrderController.java of the component Order Cancell…
-
High 7.3
sfturing hosp_order Order OrderController.java updateOrderdiseaseInfo authorization
A security vulnerability has been detected in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. This affects the function updateOrderSta1/updateOrderdiseaseInfo of the file ssm_pro/src/main/java/cn/sfturing/web/OrderController.java of the co…
-
Medium 6.2
Integer overflow in the source-bounds check in Memory::init() (src/runtime/Memory.cpp) in Samsung walrus on all platfor…
-
High 7.3
sfturing hosp_order Order Controller OrderController.java authorization
A weakness has been identified in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. The impacted element is an unknown function of the file ssm_pro/src/main/java/cn/sfturing/web/OrderController.java of the component Order Controller. Executi…
-
High 7.8
Out-of-bounds write vulnerability in Samsung Opensource Walrus allows Overflow Buffers. This issue affects Walrus: af80…
-
Medium 6.5
sfturing hosp_order Password Recovery CommonUserController.java modifyPassWord unverified password change
A security flaw has been discovered in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. The affected element is the function modifyPassWord of the file ssm_pro/src/main/java/cn/sfturing/web/CommonUserController.java of the component Passwor…
-
Medium 4.2
In geniezone, there is a possible information disclosure due to a missing bounds check. This could lead to local inform…
-
Medium 6.7
In geniezone, there is a possible escalation of privilege due to use after free. This could lead to local escalation of…
-
Medium 5.0
In gpu, there is a possible system crash due to use after free. This could lead to local information disclosure with Us…
-
Medium 4.4
In Audio HAL, there is a possible information disclosure due to a missing permission check. This could lead to local in…
-
Medium 4.4
In Audio HAL, there is a possible information disclosure due to improper input validation. This could lead to local inf…
-
Medium 6.7
In Audio HAL, there is a possible escalation of privilege due to improper input validation. This could lead to local es…
-
Medium 6.7
In SurfaceFlinger, there is a possible memory corruption due to use after free. This could lead to local escalation of …
-
Medium 6.7
In camera middleware, there is a possible escalation of privilege due to double free. This could lead to local escalati…
-
Medium 6.7
In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio…
-
Medium 6.7
In Power HAL, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of…
-
Medium 6.7
In Audio HAL, there is a possible escalation of privilege due to use after free. This could lead to local escalation of…
-
Medium 6.7
In Audio HAL, there is a possible escalation of privilege due to use after free. This could lead to local escalation of…
-
Medium 5.5CVE-2026-20516 Public exploit
In MiracastService, there is a possible escalation of privilege due to a confused deputy. This could lead to local deni…