CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 30, 07:05 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-2172 | OA Online Application System for Admission code-projects | 9.8 | Feb 8 | code-projects Online Application System for Admission Login Endpoint index.php sql injection |
| CVE-2026-2171 | OS Online Student Management System code-projects | 9.8 | Feb 8 | code-projects Online Student Management System Login accounts.php sql injection |
| CVE-2026-2166 | OR Online Reviewer System code-projects | 9.8 | Feb 8 | code-projects Online Reviewer System Login index.php sql injection |
| CVE-2026-2165 | EC E-commerce detronetdip | 9.8 | Feb 8 | detronetdip E-commerce Account Creation Endpoint add_seller.php missing authentication |
| CVE-2026-2164 | EC E-commerce detronetdip | 9.8 | Feb 8 | detronetdip E-commerce addadhar.php unrestricted upload |
| CVE-2026-2161 | DM Directory Management System itsourcecode | 9.8 | Feb 8 | itsourcecode Directory Management System forget-password.php sql injection |
| CVE-2026-2158 | SW Student Web Portal code-projects | 9.8 | Feb 8 | code-projects Student Web Portal check_user.php sql injection |
| CVE-2026-2136 | OF Online Food Ordering System projectworlds | 9.8 | Feb 8 | projectworlds Online Food Ordering System view-ticket.php sql injection |
| CVE-2026-2133 | OM Online Music Site code-projects | 9.8 | Feb 8 | code-projects Online Music Site AdminUpdateCategory.php unrestricted upload |
| CVE-2026-2132 | OM Online Music Site code-projects | 9.8 | Feb 8 | code-projects Online Music Site AdminUpdateCategory.php sql injection |
| CVE-2026-2130 | MC mcp-maigret BurtTheCoder | 9.8 | Feb 8 | BurtTheCoder mcp-maigret search_username index.ts command injection |
| CVE-2025-15027 | JL JAY Login & Register jayarsiech | 9.8 | Feb 8 | JAY Login & Register <= 2.6.03 - Unauthenticated Privilege Escalation via jay_login_register_ajax_create_final_user |
| CVE-2026-2122 | PA Panel Xiaopi | 9.8 | Feb 8 | Xiaopi Panel WAF Firewall demo.php sql injection |
| CVE-2026-2117 | SM Society Management System itsourcecode | 9.8 | Feb 7 | itsourcecode Society Management System edit_activity.php sql injection |
| CVE-2026-2116 | SM Society Management System itsourcecode | 9.8 | Feb 7 | itsourcecode Society Management System edit_expenses.php sql injection |
| CVE-2026-2115 | SM Society Management System itsourcecode | 9.8 | Feb 7 | itsourcecode Society Management System delete_expenses.php sql injection |
| CVE-2026-2114 | SM Society Management System itsourcecode | 9.8 | Feb 7 | itsourcecode Society Management System edit_admin.php sql injection |
| CVE-2026-25560 | WE WeKan WeKan | 9.8 | Feb 7 | WeKan < 8.19 LDAP Authentication Filter Injection |
| CVE-2026-25858 | MA mall macrozheng | 9.1 | Feb 7 | macrozheng mall <= 1.0.3 Unauthenticated Password Reset via OTP Disclosure |
| CVE-2026-2113 | TP tpadmin yuan1994 | 9.8 | Feb 7 | yuan1994 tpadmin WebUploader preview.php deserialization |
| CVE-2026-2090 | OC Online Class Record System SourceCodester | 9.8 | Feb 7 | SourceCodester Online Class Record System search.php sql injection |
| CVE-2026-2089 | OC Online Class Record System SourceCodester | 9.8 | Feb 7 | SourceCodester Online Class Record System controller.php sql injection |
| CVE-2026-2088 | BP Beauty Parlour Management System PHPGurukul | 9.8 | Feb 7 | PHPGurukul Beauty Parlour Management System accepted-appointment.php sql injection |
| CVE-2026-2087 | OC Online Class Record System SourceCodester | 9.8 | Feb 7 | SourceCodester Online Class Record System login.php sql injection |
| CVE-2026-2083 | SN Social Networking Site code-projects | 9.8 | Feb 7 | code-projects Social Networking Site delete_post.php sql injection |
| CVE-2026-2073 | SM School Management System itsourcecode | 9.8 | Feb 7 | itsourcecode School Management System index.php sql injection |
| CVE-2020-37162 | WS Wedding Slideshow Studio Wedding Slideshow Studio | 9.8 | Feb 6 | Wedding Slideshow Studio 1.36 - 'Key' Buffer Overflow |
| CVE-2020-37161 | WS Wedding Slideshow Studio Wedding Slideshow Studio | 9.8 | Feb 6 | Wedding Slideshow Studio 1.36 - 'Name' Buffer Overflow |
| CVE-2020-37159 | CC Cuckoo Clock Parallaxis | 9.8 | Feb 6 | Cuckoo Clock 5.0 - Buffer Overflow |
| CVE-2020-37095 | CA Cyberoam Authentication Client Cyberoam | 9.8 | Feb 6 | Cyberoam Authentication Client 2.1.2.7 - Buffer Overflow (SEH) |
| CVE-2026-25804 | AN antrea antrea-io | 9.1 | Feb 6 | Antrea has invalid enforcement order for network policy rules caused by integer overflow |
| CVE-2026-25803 | 3D 3dp-manager denpiligrim | 9.8 | Feb 6 | 3DP-MANAGER Uses Hard-coded Credentials |
| CVE-2026-25763 | OP openproject opf | 9.9 | Feb 6 | Command Injection on OpenProject repositories leads to Remote Code Execution |
| CVE-2026-1731 RansomwareIn wildKEV | RS Remote Support BeyondTrust | 9.8 | Feb 6 | Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) |
| CVE-2026-1727 | GE Gemini Enterprise (formerly Agentspace) Google Cloud | 9.1 | Feb 6 | Information Disclosure via Bucket Squatting in Google Cloud Agentspace. |
| CVE-2026-25544 | PA payload payloadcms | 9.8 | Feb 6 | Payload has an SQL Injection in JSON/RichText Queries on PostgreSQL/SQLite Adapters |
| CVE-2026-25592 | SE semantic-kernel microsoft | 9.9 | Feb 6 | Semantic Kernel has an Arbitrary File Write via AI Agent Function Calling in .NET SDK |
| CVE-2026-25632 | EP EPyT-Flow WaterFutures | 10.0 | Feb 6 | EPyT-Flow has unsafe JSON deserialization (__type__) |
| CVE-2026-25586 | SA SandboxJS nyariv | 10.0 | Feb 6 | SandboxJS has a Sandbox Escape via Prototype Whitelist Bypass and Host Prototype Pollution |
| CVE-2026-25520 | SA SandboxJS nyariv | 10.0 | Feb 6 | SandboxJS has a Sandbox Escape |
| CVE-2026-25587 | SA SandboxJS nyariv | 10.0 | Feb 6 | SandboxJS has a Sandbox Escape |
| CVE-2026-25641 | SA SandboxJS nyariv | 9.0 | Feb 6 | SandboxJS has a sandbox escape via TOCTOU bug on keys in property accesses |
| CVE-2026-25643 | FR frigate blakeblackshear | 9.1 | Feb 6 | Frigate Affected by Authenticated Remote Command Execution (RCE) and Container Escape |
| CVE-2026-1709 | RH Red Hat Enterprise Linux 10 Red Hat | 9.8 | Feb 6 | Keylime: keylime: authentication bypass allows unauthorized administrative operations due to missing client-side tls authentication |
| CVE-2026-25752 | FU FUXA frangoteam | 9.1 | Feb 6 | FUXA Unauthenticated Remote Arbitrary Device Tag Write |
| CVE-2026-25753 | AS assessment-placipy Praskla-Technology | 9.8 | Feb 6 | PlaciPy has a Hard-Coded Default Password for All Student Accounts (Account Takeover) |
| CVE-2026-25725 | CL claude-code anthropics | 10.0 | Feb 6 | Claude Code Has Sandbox Escape via Persistent Configuration Injection in settings.json |
| CVE-2026-25722 | CL claude-code anthropics | 9.1 | Feb 6 | Claude Code Vulnerable to Command Injection via Directory Change Bypasses Write Protection |
| CVE-2026-2060 | SB Simple Blood Donor Management System code-projects | 9.8 | Feb 6 | code-projects Simple Blood Donor Management System editcampaignform.php sql injection |
| CVE-2026-2059 | MC Medical Center Portal Management System SourceCodester | 9.8 | Feb 6 | SourceCodester Medical Center Portal Management System emp_edit1.php sql injection |