The archive.

Tiandy1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-3818 · Tiandy Easy7 CMS Windows

Tiandy Easy7 CMS Windows GetDBData.jsp sql injection

EPSS 0.5%public exploit CVSS 9.8

code-projects7 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-3708 · code-projects Simple Flight Ticket Booking System

code-projects Simple Flight Ticket Booking System login.php sql injection

CVE-2026-3723 · code-projects Simple Flight Ticket Booking System

code-projects Simple Flight Ticket Booking System Admindelete.php sql injection

CVE-2026-3744 · code-projects Student Web Portal

code-projects Student Web Portal signup.php valreg_passwdation sql injection

CVE-2026-3705 · code-projects Simple Flight Ticket Booking System

code-projects Simple Flight Ticket Booking System Adminsearch.php sql injection

CVE-2026-3709 · code-projects Simple Flight Ticket Booking System

code-projects Simple Flight Ticket Booking System register.php sql injection

CVE-2026-3735 · code-projects Simple Flight Ticket Booking System

code-projects Simple Flight Ticket Booking System SearchResultOneway.php sql injection

CVE-2026-3736 · code-projects Simple Flight Ticket Booking System

code-projects Simple Flight Ticket Booking System SearchResultRoundtrip.php sql injection

itsourcecode5 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-3760 · itsourcecode University Management System

itsourcecode University Management System view_result.php sql injection

CVE-2026-3730 · itsourcecode Free Hotel Reservation System

itsourcecode Free Hotel Reservation System index.php sql injection

CVE-2026-3740 · itsourcecode University Management System

itsourcecode University Management System admin_search_student.php sql injection

CVE-2026-3747 · itsourcecode University Management System

itsourcecode University Management System add_result.php sql injection

CVE-2026-3765 · itsourcecode University Management System

itsourcecode University Management System att_single_view.php sql injection

nicolargo1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-30930 · nicolargo glances

Glances has SQL Injection via Process Names in TimescaleDB Export

opencc1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-3813 · opencc JFlow

opencc JFlow WF_CCForm.java Calculate injection

Janitza1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2025-41709 · Janitza UMG 96RM-E 24V(5222063)

Command injection in power analyzer via Modbus-TCP and Modbus-RTU

EPSS 2%CVSS 9.8

projectworlds3 vulnerabilities on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2026-3757 · projectworlds Online Art Gallery Shop

projectworlds Online Art Gallery Shop pass sql injection

CVE-2026-3758 · projectworlds Online Art Gallery Shop

projectworlds Online Art Gallery Shop adminHome.php sql injection

CVE-2026-3759 · projectworlds Online Art Gallery Shop

projectworlds Online Art Gallery Shop adminHome.php sql injection

appsmithorg1 vulnerability on this pageMax CVSS 9.1Priority 43KEV 0

CVE-2026-30862 · appsmithorg appsmith

Critical Stored XSS & Privilege Escalation in Appsmith

EPSS 0.4%public exploit CVSS 9.1

DeltaWW1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2026-3630 · DeltaWW COMMGR2

Stack-based Buffer Overflow Vulnerability in COMMGR2

EPSS 1.0%CVSS 9.8

mitre6 vulnerabilities on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2025-56422 · mitre

A deserialization vulnerability in LimeSurvey before v6.15.0+250623 allows a remote attacker to execute arbitrary code on the server.

EPSS 1.0%CVSS 9.8

CVE-2025-70039 · mitre

An issue pertaining to CWE-78: Improper Neutralization of Special Elements used in an OS Command was discovered in linagora Twake v2023.Q…

CVE-2025-70046 · mitre

An issue pertaining to CWE-829: Inclusion of Functionality from Untrusted Control Sphere was discovered in Miazzy oa-front-service master.

CVE-2025-69614 · mitre

Incorrect Access Control via activation token reuse on the password-reset endpoint allowing unauthorized password resets and full account…

EPSS 0.4%CVSS 9.4

CVE-2025-69615 · mitre

Incorrect Access Control via missing 2FA rate-limiting allowing unlimited brute-force retries and full MFA bypass with no user interactio…

EPSS 0.5%CVSS 9.1

CVE-2025-70042 · mitre

An issue pertaining to CWE-918: Server-Side Request Forgery was discovered in oslabs-beta ThermaKube master.

Atop Technologies1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-3823 · Atop Technologies EHG2408

Atop Technologies｜EHG2408 series switch - Stack-based Buffer Overflow

EPSS 0.8%CVSS 9.8

Nefteprodukttekhnika LLC1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-3843 · Nefteprodukttekhnika LLC BUK TS-G Gas Station Automation System

SQL Injection in Nefteprodukttekhnika BUK TS-G Allows Remote Code Execution

EPSS 0.8%CVSS 9.8

Apache Software Foundation2 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-24015 · Apache Software Foundation Apache IoTDB

Apache IoTDB: Insecure Default Configuration Vulnerability

EPSS 0.6%CVSS 9.8

CVE-2026-24713 · Apache Software Foundation Apache IoTDB

Apache IoTDB: JEXL Expression Injection Vulnerability

doramart2 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-3794 · doramart DoraCMS

doramart DoraCMS Email API send improper authentication

CVE-2026-3795 · doramart DoraCMS

doramart DoraCMS v1.js createFileBypath path traversal

themeum1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-0953 · themeum Tutor LMS Pro

Tutor LMS Pro <= 3.9.5 - Authentication Bypass via Social Login

vllm-project1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-25960 · vllm-project vllm

SSRF Protection Bypass in vLLM

EPSS 0.6%CVSS 9.8

Siemens1 vulnerability on this pageMax CVSS 9.6Priority 38KEV 0

CVE-2025-40943 · Siemens SIMATIC Drive Controller CPU 1504D TF

Affected devices do not properly sanitize contents of trace files.

EPSS 0.5%CVSS 9.6

SAP_SE1 vulnerability on this pageMax CVSS 9.1Priority 37KEV 0

CVE-2026-27685 · SAP_SE SAP NetWeaver Enterprise Portal Administration

Insecure Deserialization in SAP NetWeaver Enterprise Portal Administration

EPSS 0.6%CVSS 9.1

EVENTOBOT1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2025-40639 · EVENTOBOT Eventobot

SQL injection in Eventobot