Aggregator

A vulnerability categorized as problematic has been discovered in Microchip Libraries for Applications 2018-11-26. Affected by this issue is some unknown functionality of the component PKCS Handler. Such manipulation leads to information disclosure. This vulnerability is uniquely identified as CVE-2020-20950. The attack can be launched remotely. No exploit exists.

A vulnerability was found in Stockdio Historical Chart Plugin up to 2.8.0 on WordPress. It has been declared as problematic. This affects the function postMessage of the file wp-content/plugins/stockdio-historical-chart/assets/stockdio_chart_historical-wp.js. The manipulation results in cross site scripting. This vulnerability is reported as CVE-2020-28707. The attack can be launched remotely. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability described as problematic has been identified in STM32Cube 1.5. This impacts an unknown function of the component PKCS Padding. The manipulation results in information disclosure. This vulnerability is cataloged as CVE-2020-20949. The attack may be launched remotely. There is no exploit available.

A vulnerability classified as problematic was found in ProjectSend up to r1070. This impacts an unknown function of the file reset-password.php. The manipulation of the argument token results in weak password recovery. This vulnerability is reported as CVE-2020-28874. The attack can be launched remotely. No exploit exists. Upgrading the affected component is advised.

A vulnerability was found in Textpattern 4.8.4 and classified as problematic. Impacted is an unknown function. The manipulation of the argument Body results in cross site scripting. This vulnerability is known as CVE-2020-35854. It is possible to launch the attack remotely. No exploit is available.

A vulnerability was found in QDOCS Smart Hospital Management System 3.1. It has been classified as problematic. The affected element is an unknown function of the component Add Patient Form. This manipulation of the argument Name/Guardian Name/Email/Address/Remarks/Any Known Allergies causes cross site scripting. This vulnerability is handled as CVE-2020-36011. The attack can be initiated remotely. Additionally, an exploit exists.

A vulnerability, which was classified as problematic, has been found in BDTASK Multi-Store Inventory Management System 1.0. The impacted element is an unknown function. Performing a manipulation of the argument Customer Name results in cross site scripting. This vulnerability was named CVE-2020-36012. The attack may be initiated remotely. There is no available exploit.

Старый сценарий вернулся в новой упаковке и снова застал защиту врасплох.

A vulnerability was found in SourceCodester Onlne Examination & Learning Management System 1.0. It has been classified as critical. This affects an unknown part of the file /ajax_enroll.php of the component Enrollment Management. The manipulation of the argument student_id/schedule_id/action leads to improper authorization. This vulnerability is uniquely identified as CVE-2026-14778. The attack is possible to be carried out remotely. Moreover, an exploit is present. The name of the affected product appears to have a typo in it.

A vulnerability was found in SourceCodester Onlne Examination & Learning Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /announcements.php. Executing a manipulation can lead to unrestricted upload. This vulnerability is handled as CVE-2026-14777. The attack can be executed remotely. Additionally, an exploit exists. The name of the affected product appears to have a typo in it.

A vulnerability has been found in SourceCodester Onlne Examination & Learning Management System 1.0 and classified as critical. Affected by this vulnerability is the function pathinfo of the file /upload_files.php of the component Filename Extension. Performing a manipulation results in unrestricted upload. This vulnerability is known as CVE-2026-14776. Remote exploitation of the attack is possible. Furthermore, an exploit is available. The name of the affected product appears to have a typo in it.

A vulnerability, which was classified as critical, was found in SourceCodester Onlne Examination & Learning Management System 1.0. Affected is an unknown function of the file /process_lesson.php. Such manipulation of the argument user_id leads to unrestricted upload. This vulnerability is traded as CVE-2026-14775. The attack may be launched remotely. Furthermore, there is an exploit available. The name of the affected product appears to have a typo in it.

A vulnerability, which was classified as critical, has been found in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /paymentdischarge.php. This manipulation of the argument patientid causes sql injection. This vulnerability appears as CVE-2026-14774. The attack may be initiated remotely. In addition, an exploit is available.

A vulnerability classified as critical was found in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /payment.php. The manipulation of the argument patientid results in sql injection. This vulnerability is reported as CVE-2026-14773. The attack can be launched remotely. Moreover, an exploit is present.

Submit #850695 / VDB-376368

Submit #850679 / VDB-376367

Submit #850678 / VDB-376366

Submit #850677 / VDB-376365

A vulnerability classified as critical has been found in SourceCodester Class and Exam Timetabling System 1.0/1.php. The impacted element is an unknown function of the file /edit_course1.php. The manipulation of the argument ID leads to sql injection. This vulnerability is documented as CVE-2026-14772. The attack can be initiated remotely. Additionally, an exploit exists.

A vulnerability described as critical has been identified in SourceCodester Class and Exam Timetabling System 1.0/1.php. The affected element is an unknown function of the file /edit_exam1.php. Executing a manipulation of the argument ID can lead to sql injection. This vulnerability is registered as CVE-2026-14771. It is possible to launch the attack remotely. Furthermore, an exploit is available.