Web Application

🛡 Related vulnerabilities 283

	ID	Title	Severity	Detected
	CVE-2026-11489	A vulnerability was found in code-projects Online Music Site 1.0. This vulnerability affects...	High	2 months ago
	CVE-2026-11483	A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This...	High	2 months ago
	CVE-2026-11484	A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. This...	High	2 months ago
	CVE-2026-11485	A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1...	High	2 months ago
	CVE-2026-11486	A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. Affected by...	High	2 months ago
	CVE-2026-11462	A vulnerability was found in Chengdu Everbrite Network Technology BeikeShop up to 1.6.0.22. This...	High	2 months ago
	CVE-2026-11463	A vulnerability was determined in USCiLab Cereal up to 1.3.2. Affected is an unknown function of...	High	2 months ago
	CVE-2026-5415	The WP Captcha PRO (the premium version of the Advanced Google reCAPTCHA plugin, both have the...	High	2 months ago
	CVE-2026-5411	The WP Captcha PRO (the premium version of the Advanced Google reCAPTCHA plugin, both have the...	High	2 months ago
	CVE-2026-46392	HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0 of HAX CMS PHP, the `saveFile` endpoint validates upload extensions case-insensitively and writes the filen...	High	2 months ago
	CVE-2026-10777	A vulnerability was identified in ealpha072 Student-Management-System up to...	High	2 months ago
	CVE-2026-10771	A vulnerability was found in crmeb crmeb_java 1.4. Affected is the function RestTemplate...	High	2 months ago
	CVE-2026-49120	Medplum before 5.1.14 contains a server-side request forgery vulnerability in the subscription...	High	2 months ago
	CVE-2026-42211	React Router's vendored turbo-stream v2 allows arbitrary constructor invocation via TYPE_ERROR deserialization leading to Unauth RCE	High	2 months ago
	CVE-2026-33245	React Router vulnerable to XSS in unstable RSC redirect handling via javascript: redirect targets	High	2 months ago
	CVE-2026-1829	The Content Visibility for Divi Builder plugin for WordPress is vulnerable to Remote Code...	High	2 months ago
	CVE-2026-28299	SolarWinds Web Help Desk is found to be affected by a denial-of-service vulnerability, which when...	High	2 months ago
	CVE-2026-7195	CWE-20: Improper Input Validation in web services in Progress Sitefinity 14.1.x through 14.3.x,...	High	2 months ago
	CVE-2026-7201	CWE-639: Authorization Bypass Through User-Controlled Key in web services in Progress Sitefinity...	High	2 months ago
	CVE-2026-7313	CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity version from...	High	2 months ago
	CVE-2026-39552	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File...	High	2 months ago
	CVE-2026-39555	Deserialization of Untrusted Data vulnerability in Elated-Themes Askka allows Object Injection. ...	High	2 months ago
	CVE-2025-68886	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File...	High	2 months ago
	CVE-2025-69369	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File...	High	2 months ago
	CVE-2024-21182 KEV	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)...	High	2 months ago
	CVE-2026-48557	Spatie Laravel Media Library contains a file upload restriction bypass	High	3 months ago
	CVE-2026-49368	In JetBrains YouTrack before 2026.1.13162 stored XSS in project notification templates was possible	High	3 months ago
	CVE-2026-45555	Code Injection in csharp (CVE-2026-45555)	High	3 months ago
	CVE-2026-45615	Vulnerability in c (CVE-2026-45615)	High	3 months ago
	CVE-2026-44698	Code Injection in CVE-2026-44698 (CVE-2026-44698)	High	3 months ago