Total CVEs

142,265

Critical Severity

3,947

High Severity

14,217

Last 7 Days

1,900
Quick preset (or use dates below)
Clear Filters
Showing 12,081 - 12,100 of 14,217 CVEs
CVE-2026-2171 HIGH - 7.3

A vulnerability was found in code-projects Online Student Management System 1.0. Affected is an unknown function of the file accounts.php of the component Login. Performing a manipulation of the argument username/password results in sql injection. The attack can be initiated remotely. The exploit ha...

Vendor: fabian
Product: online_student_management_system
Published: Feb 08, 2026
Source: NVD
CVE-2026-2166 HIGH - 7.3

A security vulnerability has been detected in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /login/index.php of the component Login. The manipulation of the argument username/password leads to sql injection. The attack is possible to be carried out...

Vendor: fabian
Product: online_reviewer_system
Published: Feb 08, 2026
Source: NVD
CVE-2026-2165 HIGH - 7.3

A weakness has been identified in detronetdip E-commerce 1.0.0. Impacted is an unknown function of the file /Admin/assets/backend/seller/add_seller.php of the component Account Creation Endpoint. Executing a manipulation of the argument email can lead to missing authentication. The attack can be exe...

Published: Feb 08, 2026
Source: NVD
CVE-2026-2164 HIGH - 7.3

A security flaw has been discovered in detronetdip E-commerce 1.0.0. This issue affects some unknown processing of the file /seller/assets/backend/profile/addadhar.php. Performing a manipulation of the argument File results in unrestricted upload. Remote exploitation of the attack is possible. The e...

Published: Feb 08, 2026
Source: NVD
CVE-2026-2161 HIGH - 7.3

A vulnerability was found in itsourcecode Directory Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/forget-password.php. The manipulation of the argument email results in sql injection. The attack can be launched remotely. The exploit has been made publ...

Vendor: clive_21
Product: directory_management_system
Published: Feb 08, 2026
Source: NVD
CVE-2026-2158 HIGH - 7.3

A vulnerability was detected in code-projects Student Web Portal 1.0. This impacts an unknown function of the file /check_user.php. Performing a manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely.

Vendor: carmelo
Product: student_web_portal
Published: Feb 08, 2026
Source: NVD
CVE-2026-2157 HIGH - 7.2

A security vulnerability has been detected in D-Link DIR-823X 250416. This affects the function sub_4175CC of the file /goform/set_static_route_table. Such manipulation of the argument interface/destip/netmask/gateway/metric leads to os command injection. The attack may be performed from remote. The...

Vendor: dlink
Product: dir-823x_firmware
Published: Feb 08, 2026
Source: NVD
CVE-2026-2155 HIGH - 7.2

A security flaw has been discovered in D-Link DIR-823X 250416. The affected element is the function sub_4208A0 of the file /goform/set_dmz of the component Configuration Handler. The manipulation of the argument dmz_host/dmz_enable results in os command injection. The attack can be executed remotely...

Vendor: dlink
Product: dir-823x_firmware
Published: Feb 08, 2026
Source: NVD
CVE-2026-2152 HIGH - 7.2

A vulnerability was found in D-Link DIR-615 4.10. This vulnerability affects unknown code of the file adv_routing.php of the component Web Configuration Interface. Performing a manipulation of the argument dest_ip/ submask/ gw results in os command injection. The attack may be initiated remotely. Th...

Vendor: dlink
Product: dir-615_firmware
Published: Feb 08, 2026
Source: NVD
CVE-2026-2151 HIGH - 7.2

A vulnerability has been found in D-Link DIR-615 4.10. This affects an unknown part of the file adv_firewall.php of the component DMZ Host Feature. Such manipulation of the argument dmz_ipaddr  leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the ...

Vendor: dlink
Product: dir-615_firmware
Published: Feb 08, 2026
Source: NVD
CVE-2026-2143 HIGH - 7.2

A security vulnerability has been detected in D-Link DIR-823X 250416. This issue affects some unknown processing of the file /goform/set_ddns of the component DDNS Service. The manipulation of the argument ddnsType/ddnsDomainName/ddnsUserName/ddnsPwd leads to os command injection. The attack is poss...

Vendor: dlink
Product: dir-823x_firmware
Published: Feb 08, 2026
Source: NVD
CVE-2026-2142 HIGH - 7.2

A weakness has been identified in D-Link DIR-823X 250416. This vulnerability affects the function sub_420688 of the file /goform/set_qos. Executing a manipulation can lead to os command injection. The attack can be executed remotely. The exploit has been made available to the public and could be use...

Vendor: dlink
Product: dir-823x_firmware
Published: Feb 08, 2026
Source: NVD
CVE-2026-2140 HIGH - 8.8

A vulnerability was identified in Tenda TX9 up to 22.03.02.10_multi. Affected by this issue is the function sub_4223E0 of the file /goform/setMacFilterCfg. Such manipulation of the argument deviceList leads to buffer overflow. The attack may be launched remotely. The exploit is publicly available an...

Vendor: tenda
Product: tx9_firmware
Published: Feb 08, 2026
Source: NVD
CVE-2026-2139 HIGH - 8.8

A vulnerability was determined in Tenda TX9 up to 22.03.02.10_multi. Affected by this vulnerability is the function sub_432580 of the file /goform/fast_setting_wifi_set. This manipulation of the argument ssid causes buffer overflow. The attack may be initiated remotely. The exploit has been publicly...

Vendor: tenda
Product: tx9_firmware
Published: Feb 08, 2026
Source: NVD
CVE-2026-2138 HIGH - 8.8

A vulnerability was found in Tenda TX9 up to 22.03.02.10_multi. Affected is the function sub_42D03C of the file /goform/SetStaticRouteCfg. The manipulation of the argument list results in buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used.

Vendor: tenda
Product: tx9_firmware
Published: Feb 08, 2026
Source: NVD
CVE-2026-2137 HIGH - 8.8

A vulnerability has been found in Tenda TX3 up to 16.03.13.11_multi. This impacts an unknown function of the file /goform/SetIpMacBind. The manipulation of the argument list leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Vendor: tenda
Product: tx3_firmware
Published: Feb 08, 2026
Source: NVD
CVE-2026-2136 HIGH - 7.3

A flaw has been found in projectworlds Online Food Ordering System 1.0. This affects an unknown function of the file /view-ticket.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used.

Vendor: projectworlds
Product: online_food_ordering_system
Published: Feb 08, 2026
Source: NVD
CVE-2026-2133 HIGH - 7.3

A weakness has been identified in code-projects Online Music Site 1.0. Impacted is an unknown function of the file /Administrator/PHP/AdminUpdateCategory.php. This manipulation of the argument txtimage causes unrestricted upload. The attack is possible to be carried out remotely. The exploit has bee...

Vendor: fabian
Product: online_music_site
Published: Feb 08, 2026
Source: NVD
CVE-2026-2132 HIGH - 7.3

A security flaw has been discovered in code-projects Online Music Site 1.0. This issue affects some unknown processing of the file /Administrator/PHP/AdminUpdateCategory.php. The manipulation of the argument txtcat results in sql injection. The attack can be executed remotely. The exploit has been r...

Vendor: fabian
Product: online_music_site
Published: Feb 08, 2026
Source: NVD
CVE-2026-2129 HIGH - 7.2

A vulnerability was found in D-Link DIR-823X 250416. Affected by this issue is some unknown functionality of the file /goform/set_ac_status. Performing a manipulation of the argument ac_ipaddr/ac_ipstatus/ap_randtime results in os command injection. The attack may be initiated remotely. The exploit ...

Vendor: dlink
Product: dir-823x_firmware
Published: Feb 08, 2026
Source: NVD