by Kastro CVE-2025-50187 · chamilo chamilo-lms
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
38,974 matching vulnerabilities · Page 212 of 780
chamilo
CVE-2025-50190 · chamilo chamilo-lms
Chamilo: Error-based SQL Injection via GET openid.assoc_handle with the /index.php script
CVE-2025-50192 · chamilo chamilo-lms
Chamilo: Time-based SQL Injection in /main/webservices/registration.soap.php
CVE-2025-52998 · chamilo chamilo-lms
Chamilo: PHAR deserialization bypass
CVE-2025-50199 · chamilo chamilo-lms
Chamilo: Blind Server-Side Request Forgery (Unauth Blind SSRF)
mitre
CVE-2026-26720 · mitre
An issue in Twenty CRM v1.15.0 and before allows a remote attacker to execute arbitrary code via the local.driver.ts module.
CVE-2025-70234 · mitre
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetQoS.
CVE-2025-70237 · mitre
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetPortTr.
CVE-2025-70240 · mitre
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWAN_Wizard51.
CVE-2025-70239 · mitre
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWAN_Wizard55.
CVE-2025-70241 · mitre
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWANType_Wizard5.
CVE-2026-24103 · mitre
A buffer overflow vulnerability was discovered in goform/formSetMacFilterCfg in Tenda AC15V1.0 V15.03.05.18_multi.
CVE-2025-66945 · mitre
A path traversal vulnerability exists in the ZIP extraction API of Zdir Pro 4.x.
CVE-2025-70821 · mitre
renren-secuity before v5.5.0 is vulnerable to SQL Injection in the BaseServiceImpl.java component
CVE-2024-55026 · mitre
An issue in the reset_pj.cgi endpoint of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to execute arbit…
CVE-2026-26709 · mitre
code-projects Simple Gym Management System v1.0 is vulnerable to SQL Injection in /gym/trainer_search.php.
CVE-2024-55020 · mitre
A command injection vulnerability in the DHCP activation feature of Weintek cMT-3072XH2 easyweb Web Version v2.1.53, OS v20231011 allows…
CVE-2025-70236 · mitre
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetDomainFilter.
CVE-2025-57622 · mitre
An issue in Step-Video-T2V allows a remote attacker to execute arbitrary code via the /vae-api , /caption-api , feature = pickle.loads(re…
CVE-2024-55024 · mitre
An authentication bypass vulnerability in the authorization mechanism of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unautho…
CVE-2026-26708 · mitre
sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manage_user.php.
CVE-2026-26710 · mitre
code-projects Simple Food Order System v1.0 is vulnerable to SQL Injection in /food/routers/edit-orders.php.
CVE-2026-26711 · mitre
code-projects Simple Food Order System v1.0 is vulnerable to SQL Injection in /food/view-ticket.php.
CVE-2026-26712 · mitre
code-projects Simple Food Order System v1.0 is vulnerable to SQL Injection in /food/view-ticket-admin.php.
CVE-2026-26713 · mitre
code-projects Simple Food Order System v1.0 is vulnerable to SQL Injection in /food/routers/cancel-order.php.
wpeverest
CVE-2026-1492 · wpeverest User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
User Registration & Membership <= 5.1.2 - Unauthenticated Privilege Escalation via Membership Registration
itsourcecode
CVE-2026-3413 · itsourcecode University Management System
itsourcecode University Management System admin_single_student.php sql injection
CVE-2026-3410 · itsourcecode Society Management System
itsourcecode Society Management System check_studid.php sql injection
CVE-2026-3411 · itsourcecode University Management System
itsourcecode University Management System admin_single_student_update.php sql injection
projectworlds
CVE-2026-3406 · projectworlds Online Art Gallery Shop
projectworlds Online Art Gallery Shop Registration registration.php sql injection
Apache Software Foundation
CVE-2025-59059 · Apache Software Foundation Apache Ranger
Apache Ranger: Remote Code Execution Vulnerability in NashornScriptEngineCreator
Hewlett Packard Enterprise (HPE)
CVE-2026-23600 · Hewlett Packard Enterprise (HPE) HPE AutoPass License Server (APLS)
A remote authentication bypass vulnerability exists in HPE AutoPass License Server (APLS).
cyberlord92
CVE-2026-2628 · cyberlord92 All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login
All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login <= 2.2.5 - Authentication Bypass
e-Excellence
CVE-2026-3422 · e-Excellence U-Office Force
e-Excellence｜U-Office Force - Insecure Deserialization
CVE-2026-0006 · Google Android
In multiple locations, there is a possible out of bounds read and write due to a heap buffer overflow.
CVE-2025-48645 · Google Android
In loadDescription of DeviceAdminInfo.java, there is a possible persistent package due to improper input validation.
CVE-2025-48609 · Google Android
In multiple functions of MmsProvider.java, there is a possible way to arbitrarily delete files which affect telephony, SMS, and MMS funct…
The Biosig Project
Changing
CVE-2026-2999 · Changing IDExpert Windows Logon Agent
Changing｜IDExpert Windows Logon Agent - Remote Code Execution
CVE-2026-3000 · Changing IDExpert Windows Logon Agent
Changing｜IDExpert Windows Logon Agent - Remote Code Execution
Studio Fabryka
CVE-2025-14532 · Studio Fabryka DobryCMS
Remote Code Execution via Unrestricted File Upload in DobryCMS
CVE-2025-12462 · Studio Fabryka DobryCMS
Blind SQL Injection in DobryCMS
CGM
CVE-2025-30044 · CGM CGM CLININET
RCE on uhcapache user permissions
CVE-2025-30035 · CGM CGM CLININET
Lack of API authentication allowing session generation for any user
CVE-2025-30042 · CGM CGM CLININET
Session generation possible with certificate number only
IceWhaleTech
Ciser System SL
CVE-2026-2584 · Ciser System SL CSIP firmware
SQL Injection in Ciser System SL firmware
Eclipse Foundation
CVE-2026-22886 · Eclipse Foundation Eclipse OpenMQ