| CVE-2019-25533 | 8.2 | — | — | — | — | Netartmedia PHP Business Directory 4.2 contains an SQL injection vulnerability that allows unauthenticated attacke | 230d ago |
| CVE-2019-25532 | 8.2 | — | — | — | — | Netartmedia Jobs Portal 6.1 contains an SQL injection vulnerability that allows unauthenticated attackers to manip | 230d ago |
| CVE-2019-25531 | 8.2 | — | — | — | — | Netartmedia Deals Portal contains an SQL injection vulnerability in the Email parameter of loginaction.php that al | 230d ago |
| CVE-2019-25530 | 8.2 | — | — | — | — | uHotelBooking System contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate d | 230d ago |
| CVE-2019-25528 | 8.2 | — | — | — | inoutscripts / inout homestay | Inout EasyRooms Ultimate Edition v1.0 contains an SQL injection vulnerability that allows unauthenticated attacker | 230d ago |
| CVE-2019-25527 | 8.2 | — | — | — | inoutscripts / inout homestay | Inout EasyRooms Ultimate Edition v1.0 contains an SQL injection vulnerability that allows unauthenticated attacker | 230d ago |
| CVE-2019-25526 | 8.2 | — | — | — | inoutscripts / inout homestay | Inout EasyRooms Ultimate Edition v1.0 contains an SQL injection vulnerability that allows unauthenticated attacker | 230d ago |
| CVE-2019-25525 | 8.2 | — | — | — | inoutscripts / inout homestay | Inout EasyRooms Ultimate Edition v1.0 contains an SQL injection vulnerability that allows unauthenticated attacker | 230d ago |
| CVE-2019-25524 | 8.2 | — | — | — | xooscripts / xoogallery | XooGallery Latest contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate data | 230d ago |
| CVE-2019-25523 | 8.2 | — | — | — | xooscripts / xoogallery | XooGallery Latest contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate data | 230d ago |
| CVE-2019-25522 | 8.2 | — | — | — | xooscripts / xoogallery | XooGallery Latest contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipula | 230d ago |
| CVE-2019-25521 | 8.2 | — | — | — | xooscripts / xoogallery | XooGallery Latest contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate data | 230d ago |
| CVE-2019-25520 | 8.2 | — | — | — | jettweb / php stock news site script | Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an authentication bypass vulnerability in the administration pa | 230d ago |
| CVE-2019-25519 | 8.2 | — | — | — | jettweb / php stock news site script | Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows attackers to manipul | 230d ago |
| CVE-2019-25518 | 8.2 | — | — | — | jettweb / php stock news site script | Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows unauthenticated atta | 230d ago |
| CVE-2019-25517 | 8.2 | — | — | — | jettweb / php stock news site script | Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows unauthenticated atta | 230d ago |
| CVE-2019-25516 | 8.2 | — | — | — | jettweb / php stock news site script | Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows unauthenticated atta | 230d ago |
| CVE-2019-25514 | 8.2 | — | — | — | jettweb / php stock news site script | Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows attackers to inject | 230d ago |
| CVE-2019-25513 | 8.2 | — | — | — | jettweb / php stock news site script | Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows unauthenticated atta | 230d ago |
| CVE-2019-25512 | 8.2 | — | — | — | jettweb / php stock news site script | Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows attackers to inject | 230d ago |
| CVE-2019-25511 | 8.2 | — | — | — | jettweb / php stock news site script | Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows unauthenticated atta | 230d ago |
| CVE-2019-25510 | 8.2 | — | — | — | jettweb / php stock news site script | Jettweb PHP Hazir Haber Sitesi Scripti V2 contains an authentication bypass vulnerability in the administration pa | 230d ago |
| CVE-2019-25509 | 8.2 | — | — | — | — | XooDigital Latest contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate data | 230d ago |
| CVE-2019-25508 | 8.2 | — | — | — | jettweb / php ready advertisement site script | Jettweb Php Hazir Ilan Sitesi Scripti V2 contains an SQL injection vulnerability that allows unauthenticated attac | 230d ago |
| CVE-2019-25488 | 8.2 | — | — | — | jettweb / php ready rent a car site script | Jettweb Hazir Rent A Car Scripti V4 contains multiple SQL injection vulnerabilities in the admin panel that allow | 230d ago |
| CVE-2019-25482 | 8.2 | — | — | — | jettweb / php ready rent a car site script | Jettweb PHP Hazir Rent A Car Sitesi Scripti V2 contains an SQL injection vulnerability that allows unauthenticated | 230d ago |
| CVE-2019-25481 | 8.2 | — | — | — | — | iScripts ReserveLogic contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate | 230d ago |
| CVE-2019-25479 | 8.2 | — | — | — | — | Inout RealEstate contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate datab | 230d ago |
| CVE-2019-25486 | 8.2 | — | — | — | — | Varient 1.6.1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database | 231d ago |
| CVE-2026-31839 | 8.2 | — | — | — | striae / striae | Striae is a firearms examiner's comparison companion. | 231d ago |
| CVE-2026-86117 | 8.1 | — | — | — | — | Coolify through 4.3.17 contains an authentication bypass vulnerability in the OAuth callback handler that signs us | 53d ago |
| CVE-2026-82684 | 8.1 | — | — | — | — | Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a Missing Authorization vulnerability. | 54d ago |
| CVE-2026-61699 | 8.1 | — | — | — | — | nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. | 54d ago |
| CVE-2026-9317 | 8.1 | — | — | — | — | Nango before 0.71.6 contains a missing authentication vulnerability in the runner tRPC server that allows unauthent | 54d ago |
| CVE-2026-18221 | 8.1 | — | — | — | — | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to gain unauthorized access due to improper validation | 54d ago |
| CVE-2026-18175 | 8.1 | — | — | — | — | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to manipulate database transactions due to improper aut | 54d ago |
| CVE-2026-19303 | 8.1 | — | — | — | — | IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to delete arbitrary local files | 54d ago |
| CVE-2026-85694 | 8.1 | — | — | — | — | LaVague 0.2.35 contains a remote code execution vulnerability in PythonFromMarkdownExtractor.extract_as_object tha | 54d ago |
| CVE-2026-85660 | 8.1 | — | — | — | — | cli-mcp-server 0.2.5 contains a command allowlist bypass vulnerability in the _validate_command_with_operators fun | 54d ago |
| CVE-2026-85625 | 8.1 | — | — | — | — | sift (sift.js) 17.1.3 enumerates query keys with for...in, which walks the object prototype chain, and dispatches | 54d ago |
| CVE-2026-84504 | 8.1 | — | — | — | — | fastify versions before 5.12.2 treat the object resolved by a successful Ajv async validator as the value result p | 54d ago |
| CVE-2026-85427 | 8.1 | — | — | — | — | MOOS essential-moos pAntler through 10.0.1 contains a remote code execution vulnerability that allows unauthentica | 54d ago |
| CVE-2026-85388 | 8.1 | — | — | — | — | Worklenz through 3.0.0 fails to properly validate the sort-field query parameter in pagination helper functions, a | 55d ago |
| CVE-2026-82302 | 8.1 | — | — | — | — | Incorrect Authorization (CWE-863) in Kibana can lead to unauthorized configuration modification via Exploiting Inc | 55d ago |
| CVE-2026-78583 | 8.1 | — | — | — | — | Incorrect Authorization (CWE-863) in Kibana can lead to privilege escalation via Input Data Manipulation (CAPEC-15 | 55d ago |
| CVE-2026-84779 | 8.1 | — | — | — | — | Subscriber Broken Access Control in Agentimus – AI SEO, llms.txt & MCP for AI Agents <= 1.51.0 versions. | 55d ago |
| CVE-2026-85214 | 8.1 | — | — | — | — | vhr fails to validate user authorization in the PUT /hr/info endpoint, allowing authenticated users to modify arbi | 55d ago |
| CVE-2026-85160 | 8.1 | — | — | — | — | AVideo through commit c91b5975d contains a cross-site request forgery and path traversal vulnerability in stopLive | 55d ago |
| CVE-2026-84381 | 8.1 | — | — | — | — | HTTPX2 is a next generation HTTP client for Python. | 56d ago |
| CVE-2026-78689 | 8.1 | — | — | — | — | Description NGINX JavaScript (njs) has a vulnerability in the XML module's namespace prefix list parser, reachable | 56d ago |
| CVE-2026-66362 | 8.1 | — | — | — | — | Description: When NGINX Plus is configured as the data plane for NGINX Gateway Fabric, an injection vulnerability | 56d ago |
| CVE-2026-19219 | 8.1 | — | — | — | — | In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient integrity protection of dialog request parame | 56d ago |
| CVE-2026-82183 | 8.1 | — | — | — | — | The OAuth Single Sign On WordPress plugin before 7.0.1 does not verify the identity assertion returned by its Stea | 56d ago |
| CVE-2026-80467 | 8.1 | — | — | — | — | The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.7 does not restrict the role submitted through | 56d ago |
| CVE-2026-12526 | 8.1 | — | — | — | — | The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.7 does not verify that the requester is authori | 56d ago |
| CVE-2026-14982 | 8.1 | — | — | — | — | The WP File Download plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path v | 56d ago |
| CVE-2026-84334 | 8.1 | — | — | — | google / chrome | Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.75 allowed a local attack | 56d ago |
| CVE-2026-73778 | 8.1 | — | — | — | — | A vulnerability exists in the Credential Manager component that may allow for unauthorized administrative access. | 57d ago |
| CVE-2026-73777 | 8.1 | — | — | — | hpe / arubaos-cx | Vulnerabilities have been identified in the API endpoint of AOS-CX switches that could potentially allow an unauth | 57d ago |
| CVE-2026-73712 | 8.1 | — | — | — | arubanetworks / fabric composer | A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to run | 57d ago |
