The archive.

CVE-2026-23531 · FreeRDP FreeRDP

FreeRDP has heap-buffer-overflow in clear_decompress

CVE-2026-23532 · FreeRDP FreeRDP

FreeRDP has heap-buffer-overflow in gdi_SurfaceToSurface

CVE-2026-23533 · FreeRDP FreeRDP

FreeRDP has heap-buffer-overflow in clear_decompress_residual_data

CVE-2026-23534 · FreeRDP FreeRDP

FreeRDP has heap-buffer-overflow in clear_decompress_bands_data

CVE-2026-23883 · FreeRDP FreeRDP

Heap-use-after-free in update_pointer_new

CVE-2026-23884 · FreeRDP FreeRDP

Heap-use-after-free in gdi_set_bounds

Yonyou10 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2026-1129 · Yonyou KSOA

Yonyou KSOA HTTP GET Parameter worksadd.jsp sql injection

CVE-2026-1130 · Yonyou KSOA

Yonyou KSOA HTTP GET Parameter worksadd_plan.jsp sql injection

CVE-2026-1131 · Yonyou KSOA

Yonyou KSOA HTTP GET Parameter save_catalog.jsp sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2026-1132 · Yonyou KSOA

Yonyou KSOA HTTP GET Parameter edit_folder.jsp sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2026-1133 · Yonyou KSOA

Yonyou KSOA HTTP GET Parameter folder.jsp sql injection

CVE-2026-1120 · Yonyou KSOA

Yonyou KSOA HTTP GET Parameter del_work.jsp sql injection

CVE-2026-1121 · Yonyou KSOA

Yonyou KSOA HTTP GET Parameter del_workplan.jsp sql injection

CVE-2026-1122 · Yonyou KSOA

Yonyou KSOA HTTP GET Parameter work_info.jsp sql injection

CVE-2026-1123 · Yonyou KSOA

Yonyou KSOA HTTP GET Parameter work_mod.jsp sql injection

CVE-2026-1124 · Yonyou KSOA

Yonyou KSOA HTTP GET Parameter work_report.jsp sql injection

VulDB2 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-1105 · VulDB

EasyCMS UserAction.class.php sql injection

CVE-2026-1107 · VulDB

EyouCMS Member Avatar Diyajax.php check_userinfo unrestricted upload

FeMiner1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-1059 · FeMiner wms

FeMiner wms chkuser.php sql injection

itsourcecode3 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-1119 · itsourcecode Society Management System

itsourcecode Society Management System delete_activity.php sql injection

CVE-2026-1159 · itsourcecode Online Frozen Foods Ordering System

itsourcecode Online Frozen Foods Ordering System order_online.php sql injection

CVE-2026-1118 · itsourcecode Society Management System

itsourcecode Society Management System add_activity.php sql injection

PHPGurukul1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2026-1160 · PHPGurukul Directory Management System

PHPGurukul Directory Management System Search index.php sql injection

xiweicheng2 vulnerabilities on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2026-1061 · xiweicheng TMS

xiweicheng TMS FileController.java upload unrestricted upload

CVE-2026-1062 · xiweicheng TMS

xiweicheng TMS HtmlUtil.java summary server-side request forgery

metagauss1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2025-15403 · metagauss RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login

RegistrationMagic <= 6.0.7.1 - Unauthenticated Privilege Escalation via admin_order

EPSS 2%CVSS 9.8

technical-laohu1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2026-1152 · technical-laohu mpay

technical-laohu mpay QR Code Image unrestricted upload

leepeuker2 vulnerabilities on this pageMax CVSS 9.3Priority 43KEV 0

CVE-2026-23839 · leepeuker movary

Movary vulnerable to Cross-site Scripting with `?categoryUpdated=` param

EPSS 0.3%public exploit CVSS 9.3

CVE-2026-23840 · leepeuker movary

Movary vulnerable to Cross-site Scripting with `?categoryDeleted=` param

EPSS 0.3%public exploit CVSS 9.3

LabRedesCefetRJ1 vulnerability on this pageMax CVSS 9.1Priority 41KEV 0

CVE-2026-23722 · LabRedesCefetRJ WeGIA

WeGIA has a Reflected Cross-Site Scripting (XSS) vulnerability allowing arbitrary code execution and UI redressing.

EPSS 0.3%public exploit CVSS 9.1

OpenStack1 vulnerability on this pageMax CVSS 9.9Priority 40KEV 0

CVE-2026-22797 · OpenStack keystonemiddleware

An issue was discovered in OpenStack keystonemiddleware 10.5 through 10.7 before 10.7.2, 10.8 and 10.9 before 10.9.1, and 10.10 through 1…

EPSS 0.7%CVSS 9.9

bee interactive1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-14894 · bee interactive Livewire Filemanager

CVE-2025-14894

EPSS 0.6%CVSS 9.8

Patchstack1 vulnerability on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2026-23800 · Patchstack

WordPress Modular DS plugin <= 2.5.2 - Privilege Escalation vulnerability

EPSS 0.5%CVSS 10.0

kohler1 vulnerability on this pageMax CVSS 10.0Priority 38KEV 0

CVE-2026-23836 · kohler hotcrp

HotCRP vulnerable to remote code execution through formulas

EPSS 0.5%CVSS 10.0

FmeAddons1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-10484 · FmeAddons Registration & Login with Mobile Phone Number for WooCommerce

Registration & Login with Mobile Phone Number for WooCommerce <= 1.3.1 - Authentication Bypass