Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
0.0 NA
CVE-2026-4576 — code-projects Exam Form Submission update_s5.php cross site scripting

A vulnerability has been found in code-projects Exam Form Submission 1.0. Impacted is an unknown function of the file /admin/update_s5.php. Such manipulation of the argument sname leads to cross site…

| Cross-Site Scripting
Mar 23, 2026 Mar 23, 2026
Mar 23, 2026
Mar 23, 2026
0.0 NA
CVE-2026-4575 — code-projects Exam Form Submission update_s2.php cross site scripting

A flaw has been found in code-projects Exam Form Submission 1.0. This issue affects some unknown processing of the file /admin/update_s2.php. This manipulation of the argument sname causes cross site…

| Cross-Site Scripting
Mar 23, 2026 Mar 23, 2026
Mar 23, 2026
Mar 23, 2026
0.0 NA
CVE-2025-10734 — ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Review…

The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up t…

| Information Disclosure
Mar 23, 2026 Mar 23, 2026
Mar 23, 2026
Mar 23, 2026
0.0 NA
CVE-2025-10679 — ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Review…

The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for WordPress is vulnerable to arbitrary method calls in all versions up to, and i…

| Authentication
Mar 23, 2026 Mar 23, 2026
Mar 23, 2026
Mar 23, 2026
0.0 NA
CVE-2025-10731 — ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Review…

The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up t…

| Information Disclosure
Mar 23, 2026 Mar 23, 2026
Mar 23, 2026
Mar 23, 2026
6.5 MEDIUM
CVE-2026-4572 — SourceCodester Sales and Inventory System HTTP POST Request view_product.php sql injection

A weakness has been identified in SourceCodester Sales and Inventory System 1.0. Affected by this issue is some unknown functionality of the file /view_product.php of the component HTTP POST Request …

Remote | Injection
Mar 23, 2026 Mar 23, 2026
Mar 23, 2026
Mar 23, 2026
6.5 MEDIUM
CVE-2026-4571 — SourceCodester Sales and Inventory System HTTP POST Request view_payments.php sql injecti…

A security flaw has been discovered in SourceCodester Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /view_payments.php of the component HTTP P…

Remote | Injection
Mar 23, 2026 Mar 23, 2026
Mar 23, 2026
Mar 23, 2026
6.5 MEDIUM
CVE-2026-4570 — SourceCodester Sales and Inventory System HTTP POST Request view_customers.php sql inject…

A vulnerability was identified in SourceCodester Sales and Inventory System 1.0. Affected is an unknown function of the file /view_customers.php of the component HTTP POST Request Handler. Such manip…

Remote | Injection
Mar 23, 2026 Mar 23, 2026
Mar 23, 2026
Mar 23, 2026
6.5 MEDIUM
CVE-2025-10736 — ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Review…

The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for WordPress is vulnerable to unauthorized access of data due to improper authori…

Remote | Authorization
Mar 23, 2026 Mar 23, 2026
Mar 23, 2026
Mar 23, 2026
0.0 NA
CVE-2026-4574 — SourceCodester Simple E-learning System User Profile Update sql injection

A vulnerability was detected in SourceCodester Simple E-learning System 1.0. This vulnerability affects unknown code of the component User Profile Update Handler. The manipulation of the argument fir…

| Injection
Mar 23, 2026 Mar 23, 2026
Mar 23, 2026
Mar 23, 2026
0.0 NA
CVE-2026-4573 — SourceCodester Simple E-learning System HTTP GET Parameter delete_post.php sql injection

A security vulnerability has been detected in SourceCodester Simple E-learning System 1.0. This affects an unknown part of the file /includes/form_handlers/delete_post.php of the component HTTP GET P…

| Injection
Mar 23, 2026 Mar 23, 2026
Mar 23, 2026
Mar 23, 2026
0.0 NA
CVE-2026-4603 — Jsrsasign RSA Public-Key Division by Zero Vulnerability

Versions of the package jsrsasign before 11.1.1 are vulnerable to Division by zero due to the RSASetPublic/KEYUTIL parsing path in ext/rsa.js and the BigInteger.modPowInt reduction logic in ext/jsbn.…

| Denial of Service
Mar 23, 2026 Mar 23, 2026
Mar 23, 2026
Mar 23, 2026
0.0 NA
CVE-2026-4601 — Adobe jsrsasign Missing Cryptographic Step Vulnerability

Versions of the package jsrsasign before 11.1.1 are vulnerable to Missing Cryptographic Step via the KJUR.crypto.DSA.signWithMessageHash process in the DSA signing implementation. An attacker can rec…

| Cryptography
Mar 23, 2026 Mar 23, 2026
Mar 23, 2026
Mar 23, 2026
0.0 NA
CVE-2026-4599 — Apache jsrsasign Incomplete Comparison Vulnerability

Versions of the package jsrsasign from 7.0.0 and before 11.1.1 are vulnerable to Incomplete Comparison with Missing Factors via the getRandomBigIntegerZeroToMax and getRandomBigIntegerMinToMax functi…

| Cryptography
Mar 23, 2026 Mar 23, 2026
Mar 23, 2026
Mar 23, 2026
0.0 NA
CVE-2026-4598 — Apache jsrsasign Infinite Loop Denial of Service

Versions of the package jsrsasign before 11.1.1 are vulnerable to Infinite loop via the bnModInverse function in ext/jsbn2.js when the BigInteger.modInverse implementation receives zero or negative i…

| Denial of Service
Mar 23, 2026 Mar 23, 2026
Mar 23, 2026
Mar 23, 2026
0.0 NA
CVE-2026-4602 — Apache jsrsasign Integer Overflow

Versions of the package jsrsasign before 11.1.1 are vulnerable to Incorrect Conversion between Numeric Types due to handling negative exponents in ext/jsbn2.js. An attacker can force the computation …

| Cryptography
Mar 23, 2026 Mar 23, 2026
Mar 23, 2026
Mar 23, 2026
0.0 NA
CVE-2026-4600 — Apache Commons Crypto DSA Signature Forgery

Versions of the package jsrsasign before 11.1.1 are vulnerable to Improper Verification of Cryptographic Signature via the DSA domain-parameter validation in KJUR.crypto.DSA.setPublic (and the relate…

| Cryptography
Mar 23, 2026 Mar 23, 2026
Mar 23, 2026
Mar 23, 2026
6.5 MEDIUM
CVE-2026-4569 — SourceCodester Sales and Inventory System HTTP POST Request view_category.php sql injecti…

A vulnerability was determined in SourceCodester Sales and Inventory System 1.0. This impacts an unknown function of the file /view_category.php of the component HTTP POST Request Handler. This manip…

Remote | Injection
Mar 23, 2026 Mar 23, 2026
Mar 23, 2026
Mar 23, 2026
6.5 MEDIUM
CVE-2026-4568 — SourceCodester Sales and Inventory System HTTP GET Request update_supplier.php sql inject…

A vulnerability was found in SourceCodester Sales and Inventory System 1.0. This affects an unknown function of the file /update_supplier.php of the component HTTP GET Request Handler. The manipulati…

Remote | Injection
Mar 23, 2026 Mar 23, 2026
Mar 23, 2026
Mar 23, 2026
10.0 HIGH
CVE-2026-4567 — Tenda A15 UploadCfg stack-based overflow

A vulnerability has been found in Tenda A15 15.13.07.13. The impacted element is the function UploadCfg of the file /cgi-bin/UploadCfg. The manipulation of the argument File leads to stack-based buff…

Remote | Memory Corruption
Mar 23, 2026 Mar 23, 2026
Mar 23, 2026
Mar 23, 2026
Showing 20 of 5193 Results