Total CVEs

143,746

Critical Severity

4,091

High Severity

14,758

Last 7 Days

1,549
Quick preset (or use dates below)
Clear Filters
📅 Showing Year: 2026 (January 1 - December 31, 2026) View All Years →
Showing 861 - 880 of 1,590 CVEs
CVE-2026-36952 LOW - 2.7

Sourcecodester Online Thesis Archiving System v1.0 is vulnerable to SQL injection in the file /otas/admin/curriculum/manage_curriculum.php.

Published: Apr 13, 2026
Source: NVD
CVE-2026-36950 LOW - 2.7

Sourcecodester Online Thesis Archiving System v1.0 is vulnerable to SQL injection in /otas/projects_per_department.php.

Published: Apr 13, 2026
Source: NVD
CVE-2026-6184 LOW - 2.4

A weakness has been identified in code-projects Simple Content Management System 1.0. This affects an unknown part of the file /web/admin/welcome.php. Executing a manipulation of the argument News Title can lead to cross site scripting. The attack can be executed remotely. The exploit has been made ...

Published: Apr 13, 2026
Source: NVD
CVE-2026-36938 LOW - 2.7

Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in /orms/admin/rooms/view_room.php.

Published: Apr 13, 2026
Source: NVD
CVE-2026-36937 LOW - 2.7

Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in /orms/admin/reservations/view_details.php.

Published: Apr 13, 2026
Source: NVD
CVE-2026-36945 LOW - 2.7

Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL injection in the file /rsms/admin/clients/manage_client.php

Published: Apr 13, 2026
Source: NVD
CVE-2026-36944 LOW - 2.7

Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerale to SQL injection in the file/rsms/admin/repairs/view_details.php.

Published: Apr 13, 2026
Source: NVD
CVE-2026-36943 LOW - 2.7

Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL injection in the file /rsms/admin/repairs/manage_repair.php.

Published: Apr 13, 2026
Source: NVD
CVE-2026-36942 LOW - 2.7

Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in the file /orms/admin/activities/manage_activity.php.

Published: Apr 13, 2026
Source: NVD
CVE-2026-36941 LOW - 2.7

Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL Injection in the file /orms/admin/rooms/manage_room.php.

Published: Apr 13, 2026
Source: NVD
CVE-2026-36947 LOW - 2.7

Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL Injection in the file /rsms/admin/services/view_service.php.

Vendor: oretnom23
Product: computer_and_mobile_repair_shop_management_system
Published: Apr 13, 2026
Source: NVD
CVE-2026-36946 LOW - 2.7

Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL injection in the file /rsms/admin/inquiries/view_details.php.

Vendor: oretnom23
Product: computer_and_mobile_repair_shop_management_system
Published: Apr 13, 2026
Source: NVD
CVE-2026-36923 LOW - 2.7

Sourcecodester Cab Management System 1.0 is vulnerable to SQL Injection in the file /cms/admin/bookings/view_booking.php.

Vendor: oretnom23
Product: cab_management_system
Published: Apr 13, 2026
Source: NVD
CVE-2026-36922 LOW - 2.7

Sourcecodester Cab Management System v1.0 is vulnerable to SQL injection in the file /cms/admin/categories/view_category.php.

Vendor: oretnom23
Product: cab_management_system
Published: Apr 13, 2026
Source: NVD
CVE-2026-36920 LOW - 2.7

Sourcecodester Online Reviewer System v1.0 is vulnerable to SQL Injection in the file /system/system/admins/assessments/examproper/questions-view.php.

Vendor: janobe
Product: online_reviewer_system
Published: Apr 13, 2026
Source: NVD
CVE-2026-36919 LOW - 2.7

Sourcecodester Online Reviewer System v1.0 is vulnerale to SQL Injection in the file /system/system/admins/assessments/examproper/exam-update.php.

Vendor: janobe
Product: online_reviewer_system
Published: Apr 13, 2026
Source: NVD
CVE-2026-36874 LOW - 2.7

Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/load_student.php.

Vendor: razormist
Product: basic_library_system
Published: Apr 13, 2026
Source: NVD
CVE-2026-36873 LOW - 2.7

Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/load_admin.php.

Vendor: razormist
Product: basic_library_system
Published: Apr 13, 2026
Source: NVD
CVE-2026-36872 LOW - 2.7

Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/load_book.php.

Vendor: razormist
Product: basic_library_system
Published: Apr 13, 2026
Source: NVD
CVE-2025-15632 LOW - 3.5

A vulnerability has been found in 1Panel-dev MaxKB up to 2.4.2. Impacted is an unknown function of the file ui/src/chat.ts of the component MdPreview. Such manipulation leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. U...

Vendor: 1Panel-dev
Product: MaxKB
Published: Apr 13, 2026
Source: NVD