9.8
CVE-2026-26695 - SQL Injection Vulnerability in Simple Student Alumni System v1.0
code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/recordstudent_edit.php.
9.8
CVE-2026-26700 - SQL Injection in Personnel Property Equipment System Edit Employee Module
sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/edit_employee.php.
9.8
CVE-2026-26702 - SQL Injection in Personnel Property Equipment System allowing unauthorized database access
sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/myitem_reuse.php.
9.8
CVE-2026-26708 - SQL Injection in Pharmacy Point of Sale System v1.0
sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manage_user.php.
9.8
CVE-2026-26694 - SQL Injection in Simple Student Alumni System 1.0 via modal_view.php
code-projects Simple Student Alumni System v1.0 is vulnerale to SQL Injection in /TracerStudy/modal_view.php.
7.5
CVE-2025-58107 -
In Microsoft Exchange through 2019, Exchange ActiveSync (EAS) configurations on on-premises servers may transmit sensitive data from Samsung mobile devices in cleartext, including the user's name, e-mail address, device ID, bearer token, and base64-encoded password.
9.8
CVE-2026-26713 - SQL Injection in Cancel Order Endpoint
code-projects Simple Food Order System v1.0 is vulnerable to SQL Injection in /food/routers/cancel-order.php.
9.8
CVE-2026-26703 - SQL Injection in Personnel Property Equipment System 1.0
sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/advance_search.php.
9.8
CVE-2026-26705 - Uncontrolled SQL Injection in Pharmacy Point of Sale System Allows Unauthorized Database Access
sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/view_product.php.
9.8
CVE-2026-24109 - Buffer Overflow in Tenda W20E W20E Router via picName Parameter
An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability by controlling the value of `picName`. When this value is used in `sprintf` without validating variable sizes, it could lead to a buffer overflow vulnerability.