Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
7.5 HIGH
CVE-2026-105229 — kishor-23 food-waste-management-system User Registration Endpoint signup.php sql injection

A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This issue affects some unknown processing …

food-waste-management-system | Remote | Injection
Oct 05, 2026 Oct 06, 2026
Oct 05, 2026
Oct 06, 2026
5.8 MEDIUM
CVE-2026-105226 — osCommerce osCommerce2 Newsletter Management newsletters.php include code injection

A security flaw has been discovered in osCommerce osCommerce2 up to 2.3.4.1. This vulnerability affects the function include of the file admin/newsletters.php of the component Newsletter Management. …

oscommerce2 | Remote | Injection
Oct 05, 2026 Oct 07, 2026
Oct 05, 2026
Oct 07, 2026
5.8 MEDIUM
CVE-2026-105225 — osCommerce osCommerce2 Payment payment.php include code injection

A vulnerability was identified in osCommerce osCommerce2 up to 2.3.4.1. This affects the function include of the file includes/classes/payment.php of the component Payment Page. Such manipulation of …

oscommerce2 | Remote | Injection
Oct 05, 2026 Oct 06, 2026
Oct 05, 2026
Oct 06, 2026
4.0 MEDIUM
CVE-2026-105188 — code-projects Human Resource Management System Live Event History liveEventHistory.php cr…

A vulnerability was found in code-projects Human Resource Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /views/admin/liveEventHistory.php of the compon…

human_resource_management_system | Remote | Cross-Site Scripting
Oct 05, 2026 Oct 06, 2026
Oct 05, 2026
Oct 06, 2026
6.5 MEDIUM
CVE-2026-105187 — itsourcecode Online Admission System key.php sql injection

A vulnerability has been found in itsourcecode Online Admission System 1.0. Affected is an unknown function of the file /admin/key.php. The manipulation of the argument ID leads to sql injection. The…

online_admission_system | Remote | Injection
Oct 05, 2026 Oct 06, 2026
Oct 05, 2026
Oct 06, 2026
6.5 MEDIUM
CVE-2026-105186 — itsourcecode Online Admission System new.php sql injection

A flaw has been found in itsourcecode Online Admission System 1.0. This impacts an unknown function of the file /new.php. Executing a manipulation of the argument schedid can lead to sql injection. T…

online_admission_system | Remote | Injection
Oct 05, 2026 Oct 06, 2026
Oct 05, 2026
Oct 06, 2026
7.5 HIGH
CVE-2026-105185 — itsourcecode Online Admission System examinee.php sql injection

A vulnerability was detected in itsourcecode Online Admission System 1.0. This affects an unknown function of the file /admin/examinee.php. Performing a manipulation of the argument ID results in sql…

online_admission_system | Remote | Injection
Oct 05, 2026 Oct 06, 2026
Oct 05, 2026
Oct 06, 2026
7.5 HIGH
CVE-2026-105184 — itsourcecode Online Admission System creteria.php sql injection

A security vulnerability has been detected in itsourcecode Online Admission System 1.0. The impacted element is an unknown function of the file /admin/creteria.php. Such manipulation of the argument …

online_admission_system | Remote | Injection
Oct 05, 2026 Oct 06, 2026
Oct 05, 2026
Oct 06, 2026
7.5 HIGH
CVE-2026-105183 — itsourcecode Online Admission System confirm.php sql injection

A weakness has been identified in itsourcecode Online Admission System 1.0. The affected element is an unknown function of the file /admin/confirm.php. This manipulation of the argument schedid cause…

online_admission_system | Remote | Injection
Oct 05, 2026 Oct 06, 2026
Oct 05, 2026
Oct 06, 2026
7.5 HIGH
CVE-2026-105182 — SourceCodester Online Reviewer Management System btn_functions.php update sql injection

A security flaw has been discovered in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer_0/admins/assessments/activities/btn_functions.php?ac…

online_reviewer_management_system | Remote | Injection
Oct 05, 2026 Oct 06, 2026
Oct 05, 2026
Oct 06, 2026
6.5 MEDIUM
CVE-2026-105181 — itsourcecode Online Admission System register1.php sql injection

A vulnerability was identified in itsourcecode Online Admission System 1.0. This issue affects some unknown processing of the file register1.php. The manipulation of the argument fname leads to sql i…

online_admission_system | Remote | Injection
Oct 05, 2026 Oct 06, 2026
Oct 05, 2026
Oct 06, 2026
6.7 MEDIUM
CVE-2026-20589 — Venc Type Confusion Leading to Out-of-Bounds Write

In venc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interacti…

mt8696_firmware mt6789 mt6833 mt6855 mt6877 mt6768 +44 more | Memory Corruption
Oct 05, 2026 Oct 21, 2026
Oct 05, 2026
Oct 21, 2026
6.7 MEDIUM
CVE-2026-20588 — mtee Local Privilege Escalation

In mtee, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. Us…

mt8696_firmware mt6789 mt6833 mt6855 mt6877 mt6768 +44 more | Memory Corruption
Oct 05, 2026 Oct 21, 2026
Oct 05, 2026
Oct 21, 2026
6.7 MEDIUM
CVE-2026-20587 — Mtee Type Confusion Privilege Escalation

In mtee, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User inter…

mt8696_firmware mt6789 mt6833 mt6855 mt6877 mt6768 +44 more | Memory Corruption
Oct 05, 2026 Oct 21, 2026
Oct 05, 2026
Oct 21, 2026
8.8 HIGH
CVE-2026-20586 — MediaTek vdec Out-of-Bounds Write Vulnerability

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is n…

mt8696_firmware mt6789 mt6833 mt6855 mt6877 mt6768 +44 more | Remote | Memory Corruption
Oct 05, 2026 Oct 21, 2026
Oct 05, 2026
Oct 21, 2026
6.7 MEDIUM
CVE-2026-20579 — MediaTek VDEC Type Confusion Leading to Out-of-Bounds Write

In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interacti…

mt8696_firmware mt6789 mt6833 mt6855 mt6877 mt6768 +44 more | Memory Corruption
Oct 05, 2026 Oct 21, 2026
Oct 05, 2026
Oct 21, 2026
6.8 MEDIUM
CVE-2026-20544 — Meta Out-of-Bounds Write Vulnerability

In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional …

mt8788_firmware mt6781 mt6789 mt6835 mt6853 mt6855 +112 more | Memory Corruption
Oct 05, 2026 Oct 09, 2026
Oct 05, 2026
Oct 09, 2026
5.5 MEDIUM
CVE-2026-20543 — Modem Information Disclosure

In Modem, there is a possible information disclosure due to a logic error. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not need…

mt8788_firmware mt2735 mt6779 mt6781 mt6783 mt6785 +160 more | Information Disclosure
Oct 05, 2026 Oct 08, 2026
Oct 05, 2026
Oct 08, 2026
6.7 MEDIUM
CVE-2026-20542 — Apusys Use-After-Free Memory Corruption

In apusys, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interacti…

mt6878 mt6897 mt6989 mt8188 mt8390 mt8395 +32 more | Memory Corruption
Oct 05, 2026 Oct 09, 2026
Oct 05, 2026
Oct 09, 2026
5.3 MEDIUM
CVE-2026-20541 — Modem Out-of-Bounds Read Vulnerability

In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attack…

mt8788_firmware mt2735 mt6779 mt6781 mt6783 mt6785 +160 more | Denial of Service
Oct 05, 2026 Oct 09, 2026
Oct 05, 2026
Oct 09, 2026
Showing 20 of 16910 Results