Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
0.0 NA
CVE-2026-112041 — diem-project diem dmString.php random weak prng

A vulnerability was identified in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. This vulnerability affects the function dmString::random of the file dmCorePlugin/lib/basic/dmStrin…

diem | Cryptography
Oct 19, 2026 Oct 19, 2026
Oct 19, 2026
Oct 19, 2026
0.0 NA
CVE-2026-112040 — diem-project diem Sign-In BasedmUserActions.class.php redirect

A vulnerability was determined in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. This affects an unknown part of the file dmCorePlugin/plugins/dmUserPlugin/modules/dmUser/lib/Based…

diem | Server-Side Request Forgery
Oct 19, 2026 Oct 19, 2026
Oct 19, 2026
Oct 19, 2026
0.0 NA
CVE-2026-112039 — diem-project diem Administrative Console actions.class.php append cross site scripting

A vulnerability was found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. Affected by this issue is the function append of the file dmAdminPlugin/modules/dmConsole/actions/action…

diem | Cross-Site Scripting
Oct 19, 2026 Oct 19, 2026
Oct 19, 2026
Oct 19, 2026
5.0 MEDIUM
CVE-2026-112036 — Artifex MuPDF Signature Locking pdf-xref.c free_char_list double free

A vulnerability was detected in Artifex MuPDF up to 1.28.5. This impacts the function free_char_list of the file source/pdf/pdf-xref.c of the component Signature Locking. Performing a manipulation re…

mupdf | Remote | Memory Corruption
Oct 19, 2026 Oct 19, 2026
Oct 19, 2026
Oct 19, 2026
6.5 MEDIUM
CVE-2026-112035 — aircheng-org iWebShop-5 simple.php send_message_mobile password recovery

A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.16. This affects the function send_message_mobile of the file controllers/simple.php. Such manipulation of the argument u…

iwebshop-5 | Remote | Authentication
Oct 19, 2026 Oct 19, 2026
Oct 19, 2026
Oct 19, 2026
5.0 MEDIUM
CVE-2026-112034 — aircheng-org iWebShop-5 Login Redirect _userInfo.php redirect

A weakness has been identified in aircheng-org iWebShop-5 up to 5.16. The impacted element is the function IController::redirect of the file plugins/_userInfo/_userInfo.php of the component Login Red…

iwebshop-5 | Remote | Misconfiguration
Oct 19, 2026 Oct 19, 2026
Oct 19, 2026
Oct 19, 2026
5.0 MEDIUM
CVE-2026-112033 — aircheng-org iWebShop-5 Password Change system.php admin_repwd_act cross-site request for…

A security flaw has been discovered in aircheng-org iWebShop-5 up to 5.16. The affected element is the function admin_repwd/admin_repwd_act of the file controllers/system.php of the component Passwor…

iwebshop-5 | Remote | Cross-Site Request Forgery
Oct 19, 2026 Oct 19, 2026
Oct 19, 2026
Oct 19, 2026
0.0 NA
CVE-2026-112038 — diem-project diem Version Check Service dmAdminCtrl.js html cross site scripting

A vulnerability has been found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. Affected by this vulnerability is the function html of the file dmAdminPlugin/web/js/dmAdminCtrl.js…

diem | Cross-Site Scripting
Oct 19, 2026 Oct 19, 2026
Oct 19, 2026
Oct 19, 2026
0.0 NA
CVE-2026-112037 — diem-project diem Google Analytics Client gapi.class.php certificate validation

A flaw has been found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. Affected is an unknown function of the file dmCorePlugin/lib/vendor/gapi/gapi.class.php of the component Goo…

diem | Cryptography
Oct 19, 2026 Oct 19, 2026
Oct 19, 2026
Oct 19, 2026
7.5 HIGH
CVE-2026-108984 — GV-ASManager Web Server Buffer Overflow Vulnerability

A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe .

gv-asmanager gv-asmanager | Remote | Misconfiguration
Oct 19, 2026 Oct 19, 2026
Oct 19, 2026
Oct 19, 2026
9.8 CRITICAL
CVE-2026-108983 — GV-ASManager Web Server Command Injection Vulnerability

A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe .

gv-asmanager gv-asmanager | Remote | Misconfiguration
Oct 19, 2026 Oct 19, 2026
Oct 19, 2026
Oct 19, 2026
5.8 MEDIUM
CVE-2026-112032 — aircheng-org iWebShop-5 util.php search sql injection

A vulnerability was identified in aircheng-org iWebShop-5 up to 5.16. Impacted is the function Util::search of the file classes/util.php. The manipulation leads to sql injection. It is possible to in…

iwebshop-5 | Remote | Injection
Oct 19, 2026 Oct 19, 2026
Oct 19, 2026
Oct 19, 2026
4.0 MEDIUM
CVE-2026-112031 — Chamilo LMS Ticket TicketManager.php addProject cross site scripting

A vulnerability was determined in Chamilo LMS up to 1.11.40/2.0.3/3.0.1. This issue affects the function TicketManager::addProject of the file main/inc/lib/TicketManager.php of the component Ticket M…

lms | Remote | Cross-Site Scripting
Oct 19, 2026 Oct 19, 2026
Oct 19, 2026
Oct 19, 2026
6.5 MEDIUM
CVE-2026-112030 — diem-project diem dmDataLoad.php default password

A vulnerability was found in diem-project diem up to 5.1.3. This vulnerability affects unknown code of the file dmCorePlugin/lib/data/dmDataLoad.php. Performing a manipulation results in use of defau…

diem | Remote | Authentication
Oct 19, 2026 Oct 19, 2026
Oct 19, 2026
Oct 19, 2026
2.3 LOW
CVE-2026-112112 — CZ.NIC BIRD IPv6 FlowSpec Validation Bypass

An IPv6 FlowSpec validation bypass in the CZ.NIC BIRD Internet Routing Daemon allows an established BGP peer to inject FlowSpec rules matching destinations outside the address space authorized by the…

bird | Remote | Misconfiguration
Oct 18, 2026 Oct 18, 2026
Oct 18, 2026
Oct 18, 2026
5.1 MEDIUM
CVE-2026-112111 — Bootstrap Shortcodes WordPress Plugin Stored Cross-Site Scripting

The Bootstrap Shortcodes plugin for WordPress before 3.4.6 is vulnerable to stored XSS via the id attribute of the [bs_tcontent] shortcode. The bs_tcontent() shortcode handler in inc/bs_tabs.php emit…

bootstrap_shortcodes | Remote | Cross-Site Scripting
Oct 18, 2026 Oct 18, 2026
Oct 18, 2026
Oct 18, 2026
2.5 LOW
CVE-2026-112029 — diem-project diem SHA1 PluginDmUser.class.php weak password hash

A vulnerability has been found in diem-project diem up to 5.1.3. This affects an unknown part of the file lib/model/doctrine/PluginDmUser.class.php of the component SHA1 Handler. Such manipulation of…

diem | Cryptography
Oct 18, 2026 Oct 18, 2026
Oct 18, 2026
Oct 18, 2026
6.5 MEDIUM
CVE-2026-112028 — light0011 cms Vote VoteController.class.php logic error

A flaw has been found in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected by this issue is some unknown functionality of the file App/Home/Con…

cms | Remote | Misconfiguration
Oct 18, 2026 Oct 18, 2026
Oct 18, 2026
Oct 18, 2026
5.5 MEDIUM
CVE-2026-112027 — light0011 cms Uploadify check-exists.php file_exists file information disclosure

A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected by this vulnerability is the function file_exists of the file…

cms | Remote | Information Disclosure
Oct 18, 2026 Oct 18, 2026
Oct 18, 2026
Oct 18, 2026
3.7 LOW
CVE-2026-112026 — light0011 cms UserModel.class.php sha1 weak password hash

A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected is the function sha1 of the file App/Home/Model…

cms | Remote | Cryptography
Oct 18, 2026 Oct 18, 2026
Oct 18, 2026
Oct 18, 2026
Showing 20 of 14279 Results