Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
6.5 MEDIUM
CVE-2026-11508 — CodeAstro Leave Management System search_staff_to_assign_pc.php sql injection

A vulnerability was determined in CodeAstro Leave Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/search_staff_to_assign_pc.php. This manipulation…

leave_management_system | Remote | Injection
Jun 08, 2026 Jun 08, 2026
Jun 08, 2026
Jun 08, 2026
6.5 MEDIUM
CVE-2026-11507 — CodeAstro Leave Management System delete_leave_type.php sql injection

A vulnerability was found in CodeAstro Leave Management System 1.0. Affected is an unknown function of the file /admin/delete_leave_type.php. The manipulation of the argument leave_type results in sq…

leave_management_system | Remote | Injection
Jun 08, 2026 Jun 08, 2026
Jun 08, 2026
Jun 08, 2026
6.5 MEDIUM
CVE-2026-11506 — CodeAstro Leave Management System search_staff_for_deletion.php sql injection

A vulnerability has been found in CodeAstro Leave Management System 1.0. This impacts an unknown function of the file /admin/search_staff_for_deletion.php. The manipulation of the argument Name leads…

leave_management_system | Remote | Injection
Jun 08, 2026 Jun 08, 2026
Jun 08, 2026
Jun 08, 2026
5.0 MEDIUM
CVE-2026-11505 — GL.iNet XE3000 glnassys hard-coded key

A flaw has been found in GL.iNet A1300, AX1800, AXT1800, MT2500, MT3000, MT6000, X3000 and XE3000 4.8.x. This affects an unknown function of the component glnassys. Executing a manipulation can lead …

Remote | Cryptography
Jun 08, 2026 Jun 08, 2026
Jun 08, 2026
Jun 08, 2026
9.0 HIGH
CVE-2026-11504 — Tenda CX12L Wi-Fi Schedule Configuration Endpoint openSchedWifi setSchedWifi stack-based …

A vulnerability was detected in Tenda CX12L 16.03.53.12. The impacted element is the function setSchedWifi of the file /goform/openSchedWifi of the component Wi-Fi Schedule Configuration Endpoint. Pe…

cx12l | Remote | Memory Corruption
Jun 08, 2026 Jun 08, 2026
Jun 08, 2026
Jun 08, 2026
8.7 HIGH
CVE-2026-9506 — Path Traversal Vulnerability in Bagisto

This vulnerability exists in Bagisto due to improper validation of user-supplied input in the ImageCacheController component. An unauthenticated remote attacker could exploit this vulnerability by se…

bagisto | Remote | Path Traversal
Jun 08, 2026 Jun 08, 2026
Jun 08, 2026
Jun 08, 2026
9.0 HIGH
CVE-2026-11503 — Tenda CX12L Wi-Fi Configuration Endpoint fast_setting_wifi_set form_fast_setting_wifi_set…

A security vulnerability has been detected in Tenda CX12L 16.03.53.12. The affected element is the function form_fast_setting_wifi_set of the file /goform/fast_setting_wifi_set of the component Wi-Fi…

cx12l | Remote | Memory Corruption
Jun 08, 2026 Jun 08, 2026
Jun 08, 2026
Jun 08, 2026
3.1 LOW
CVE-2026-11502 — JeecgBoot Third-Party Login ThirdLoginController.java HttpServletResponse.sendRedirect re…

A weakness has been identified in JeecgBoot up to 3.9.2. Impacted is the function HttpServletResponse.sendRedirect of the file jeecg-module-system/jeecg-system-biz/src/main/java/org/jeecg/modules/sys…

Remote | Misconfiguration
Jun 08, 2026 Jun 08, 2026
Jun 08, 2026
Jun 08, 2026
7.5 HIGH
CVE-2026-11501 — SourceCodester Hospitals Patient Records Management System Master.php save_patient sql in…

A security flaw has been discovered in SourceCodester Hospitals Patient Records Management System 1.0. This issue affects some unknown processing of the file /classes/Master.php?f=save_patient. The m…

Jun 08, 2026 Jun 08, 2026
Jun 08, 2026
Jun 08, 2026
5.0 MEDIUM
CVE-2026-11500 — Weaviate Static API Key client.go validateConfig authorization

A vulnerability was identified in Weaviate up to 1.37.7. This vulnerability affects the function validateConfig of the file usecases/auth/authentication/apikey/client.go of the component Static API K…

Remote | Authorization
Jun 08, 2026 Jun 08, 2026
Jun 08, 2026
Jun 08, 2026
8.0 HIGH
CVE-2026-41724 — VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabiliti…

VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scri…

aria_operations telco_cloud_platform | Remote | Cross-Site Scripting
Jun 08, 2026 Jun 08, 2026
Jun 08, 2026
Jun 08, 2026
8.0 HIGH
CVE-2026-41723 — VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabiliti…

VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scri…

aria_operations telco_cloud_platform | Remote | Cross-Site Scripting
Jun 08, 2026 Jun 08, 2026
Jun 08, 2026
Jun 08, 2026
8.0 HIGH
CVE-2026-41722 — VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabiliti…

VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scri…

aria_operations telco_cloud_platform | Remote | Cross-Site Scripting
Jun 08, 2026 Jun 08, 2026
Jun 08, 2026
Jun 08, 2026
7.5 HIGH
CVE-2026-3238 — Samba: denial of service against ad dc wins server

A flaw was found in Samba’s WINS server component when running as an Active Directory Domain Controller. The WINS protocol handlers for certain request types did not properly validate incoming packet…

Jun 08, 2026 Jun 08, 2026
Jun 08, 2026
Jun 08, 2026
10.0 HIGH
CVE-2026-11499 — Tenda HG7HG9/HG10 formDOMAINBLK stack-based overflow

A vulnerability was determined in Tenda HG7HG9 and HG10 300001138_en_xpon. This affects the function formDOMAINBLK of the file /boaform/formDOMAINBLK. Executing a manipulation of the argument blkDoma…

hg10_firmware hg10 | Remote | Memory Corruption
Jun 08, 2026 Jun 08, 2026
Jun 08, 2026
Jun 08, 2026
9.0 HIGH
CVE-2026-11498 — Tenda HG7HG9/HG10 Web Management voip_other_set asp_voip_OtherSet stack-based overflow

A vulnerability was found in Tenda HG7HG9 and HG10 300001138_en_xpon. Affected by this issue is the function asp_voip_OtherSet of the file /boaform/voip_other_set of the component Web Management Inte…

hg10_firmware hg10 | Remote | Memory Corruption
Jun 08, 2026 Jun 08, 2026
Jun 08, 2026
Jun 08, 2026
5.5 MEDIUM
CVE-2026-11497 — D-Link DCS-5615 Boa Webserver boa.conf least privilege violation

A vulnerability has been found in D-Link DCS-5615 1.01.00. Affected by this vulnerability is an unknown functionality of the file /etc/conf.d/boa/boa.conf of the component Boa Webserver. Such manipul…

Remote | Path Traversal
Jun 08, 2026 Jun 08, 2026
Jun 08, 2026
Jun 08, 2026
6.5 MEDIUM
CVE-2026-11495 — CodeAstro Ingredients Stock Management System add_stock.php sql injection

A vulnerability was detected in CodeAstro Ingredients Stock Management System 1.0. This impacts an unknown function of the file /Ingredients-Stock/add_stock.php. The manipulation of the argument ID r…

Jun 08, 2026 Jun 08, 2026
Jun 08, 2026
Jun 08, 2026
4.3 MEDIUM
CVE-2026-11494 — TOTOLINK AC1200 T8 vsftpd vsftpd.conf least privilege violation

A security vulnerability has been detected in TOTOLINK AC1200 T8 4.1.5cu.8611. This affects an unknown function of the file /etc/vsftpd.conf of the component vsftpd. The manipulation leads to least p…

ac1200_t8 ac1200_t8 | Remote | Misconfiguration
Jun 08, 2026 Jun 08, 2026
Jun 08, 2026
Jun 08, 2026
5.0 MEDIUM
CVE-2026-11493 — Tenda AC15 Samba smb.conf weak password

A weakness has been identified in Tenda AC15 15.03.05.19. The impacted element is an unknown function of the file /etc_ro/smb.conf of the component Samba. Executing a manipulation can lead to weak pa…

ac15_firmware ac15 | Authentication
Jun 08, 2026 Jun 08, 2026
Jun 08, 2026
Jun 08, 2026
Showing 20 of 6838 Results