CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 29, 02:33 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-2225 | NP News Portal Project itsourcecode | 9.8 | Feb 9 | itsourcecode News Portal Project Administrator Login index.php sql injection |
| CVE-2026-2223 | OR Online Reviewer System code-projects | 9.8 | Feb 9 | code-projects Online Reviewer System index.php sql injection |
| CVE-2026-22906 | 08 0852-1322 WAGO | 9.8 | Feb 9 | Hardcoded Key Allows Credential Disclosure |
| CVE-2026-22904 | 08 0852-1322 WAGO | 9.8 | Feb 9 | Stack Overflow via Oversized Cookie Fields in lighttpd |
| CVE-2026-22903 | 08 0852-1322 WAGO | 9.8 | Feb 9 | Stack Overflow via SESSIONID Cookie in lighttpd |
| CVE-2026-2234 | CP C&Cm@il package olln-base HGiga | 9.1 | Feb 9 | HGiga｜C&Cm@il - Missing Authentication |
| CVE-2026-2221 | OR Online Reviewer System code-projects | 9.8 | Feb 9 | code-projects Online Reviewer System Login index.php sql injection |
| CVE-2026-1868 | GA GitLab AI Gateway GitLab | 9.9 | Feb 9 | Improper Neutralization of Special Elements Used in a Template Engine in GitLab AI Gateway |
| CVE-2026-2220 | OR Online Reviewer System code-projects | 9.8 | Feb 9 | code-projects Online Reviewer System btn_functions.php sql injection |
| CVE-2026-2217 | EM Event Management System itsourcecode | 9.8 | Feb 9 | itsourcecode Event Management System manage_user.php sql injection |
| CVE-2026-1615 | JS jsonpath | 9.8 | Feb 9 | Versions of the package jsonpath before 1.3.0 are vulnerable to Arbitrary Code Injection via unsafe evaluation of user-supplied JSON Path expressions |
| CVE-2025-66602 | FA FAST/TOOLS Yokogawa Electric Corporation | 9.8 | Feb 9 | A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation |
| CVE-2025-66603 | FA FAST/TOOLS Yokogawa Electric Corporation | 9.8 | Feb 9 | A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation |
| CVE-2025-66606 | FA FAST/TOOLS Yokogawa Electric Corporation | 9.6 | Feb 9 | A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation |
| CVE-2026-2212 | OM Online Music Site code-projects | 9.8 | Feb 9 | code-projects Online Music Site AdminEditCategory.php sql injection |
| CVE-2026-2211 | OM Online Music Site code-projects | 9.8 | Feb 9 | code-projects Online Music Site AdminDeleteCategory.php sql injection |
| CVE-2026-2199 | OR Online Reviewer System code-projects | 9.8 | Feb 9 | code-projects Online Reviewer System user-delete.php sql injection |
| CVE-2026-2198 | OR Online Reviewer System code-projects | 9.8 | Feb 9 | code-projects Online Reviewer System loaddata.php sql injection |
| CVE-2026-2197 | OR Online Reviewer System code-projects | 9.8 | Feb 9 | code-projects Online Reviewer System exam-delete.php sql injection |
| CVE-2026-2196 | OR Online Reviewer System code-projects | 9.8 | Feb 9 | code-projects Online Reviewer System exam-update.php sql injection |
| CVE-2026-2195 | OR Online Reviewer System code-projects | 9.8 | Feb 8 | code-projects Online Reviewer System questions-view.php sql injection |
| CVE-2026-2190 | SM School Management System itsourcecode | 9.8 | Feb 8 | itsourcecode School Management System controller.php sql injection |
| CVE-2026-2189 | SM School Management System itsourcecode | 9.8 | Feb 8 | itsourcecode School Management System index.php sql injection |
| CVE-2026-2184 | CG Certificate Generation System Great Developers | 9.8 | Feb 8 | Great Developers Certificate Generation System csv.php os command injection |
| CVE-2026-2183 | CG Certificate Generation System Great Developers | 9.8 | Feb 8 | Great Developers Certificate Generation System csv.php unrestricted upload |
| CVE-2026-2174 | CM Contact Management System code-projects | 9.8 | Feb 8 | code-projects Contact Management System CRUD Endpoint improper authentication |
| CVE-2026-2173 | OE Online Examination System code-projects | 9.8 | Feb 8 | code-projects Online Examination System login.php sql injection |
| CVE-2026-2172 | OA Online Application System for Admission code-projects | 9.8 | Feb 8 | code-projects Online Application System for Admission Login Endpoint index.php sql injection |
| CVE-2026-2171 | OS Online Student Management System code-projects | 9.8 | Feb 8 | code-projects Online Student Management System Login accounts.php sql injection |
| CVE-2026-2166 | OR Online Reviewer System code-projects | 9.8 | Feb 8 | code-projects Online Reviewer System Login index.php sql injection |
| CVE-2026-2165 | EC E-commerce detronetdip | 9.8 | Feb 8 | detronetdip E-commerce Account Creation Endpoint add_seller.php missing authentication |
| CVE-2026-2164 | EC E-commerce detronetdip | 9.8 | Feb 8 | detronetdip E-commerce addadhar.php unrestricted upload |
| CVE-2026-2161 | DM Directory Management System itsourcecode | 9.8 | Feb 8 | itsourcecode Directory Management System forget-password.php sql injection |
| CVE-2026-2158 | SW Student Web Portal code-projects | 9.8 | Feb 8 | code-projects Student Web Portal check_user.php sql injection |
| CVE-2026-2136 | OF Online Food Ordering System projectworlds | 9.8 | Feb 8 | projectworlds Online Food Ordering System view-ticket.php sql injection |
| CVE-2026-2133 | OM Online Music Site code-projects | 9.8 | Feb 8 | code-projects Online Music Site AdminUpdateCategory.php unrestricted upload |
| CVE-2026-2132 | OM Online Music Site code-projects | 9.8 | Feb 8 | code-projects Online Music Site AdminUpdateCategory.php sql injection |
| CVE-2026-2130 | MC mcp-maigret BurtTheCoder | 9.8 | Feb 8 | BurtTheCoder mcp-maigret search_username index.ts command injection |
| CVE-2025-15027 | JL JAY Login & Register jayarsiech | 9.8 | Feb 8 | JAY Login & Register <= 2.6.03 - Unauthenticated Privilege Escalation via jay_login_register_ajax_create_final_user |
| CVE-2026-2122 | PA Panel Xiaopi | 9.8 | Feb 8 | Xiaopi Panel WAF Firewall demo.php sql injection |
| CVE-2026-2117 | SM Society Management System itsourcecode | 9.8 | Feb 7 | itsourcecode Society Management System edit_activity.php sql injection |
| CVE-2026-2116 | SM Society Management System itsourcecode | 9.8 | Feb 7 | itsourcecode Society Management System edit_expenses.php sql injection |
| CVE-2026-2115 | SM Society Management System itsourcecode | 9.8 | Feb 7 | itsourcecode Society Management System delete_expenses.php sql injection |
| CVE-2026-2114 | SM Society Management System itsourcecode | 9.8 | Feb 7 | itsourcecode Society Management System edit_admin.php sql injection |
| CVE-2026-25560 | WE WeKan WeKan | 9.8 | Feb 7 | WeKan < 8.19 LDAP Authentication Filter Injection |
| CVE-2026-25858 | MA mall macrozheng | 9.1 | Feb 7 | macrozheng mall <= 1.0.3 Unauthenticated Password Reset via OTP Disclosure |
| CVE-2026-2113 | TP tpadmin yuan1994 | 9.8 | Feb 7 | yuan1994 tpadmin WebUploader preview.php deserialization |
| CVE-2026-2090 | OC Online Class Record System SourceCodester | 9.8 | Feb 7 | SourceCodester Online Class Record System search.php sql injection |
| CVE-2026-2089 | OC Online Class Record System SourceCodester | 9.8 | Feb 7 | SourceCodester Online Class Record System controller.php sql injection |
| CVE-2026-2088 | BP Beauty Parlour Management System PHPGurukul | 9.8 | Feb 7 | PHPGurukul Beauty Parlour Management System accepted-appointment.php sql injection |