6.5
CVE-2026-37100 - Unauthenticated BLE Control Access on Yamaha SR-B30A Sound Bar
An issue in the Bluetooth Low Energy (BLE) control interface of the Yamaha SR-B30A sound bar firmware 2.40 (Mobile App: Sound Bar Remote / version: 2.40) allows remote attackers within BLE radio range to connect without authentication via the Sound Bar Remote protocol
9.8
CVE-2026-37345 - SQL Injection in Vehicle Parking Area Management System v1.0
SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/manage_park.php.
7.1
CVE-2026-30459 - Unauthenticated Retrieval of Password Reset Tokens via Forged Email Links in FuelCMS
An issue in the Forgot Password feature of Daylight Studio FuelCMS v1.5.2 allows unauthenticated attackers to obtain the password reset token of a victim user via a crafted link placed in a valid e-mail message.
7.2
CVE-2026-37342 -
SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/view_parked_details.php.
4.7
CVE-2026-37346 - SQL Injection in /payroll/view_account.php of SourceCodester Payroll Management System v1.0
SourceCodester Payroll Management and Information System v1.0 is vulnerable to SQL Injection in the file /payroll/view_account.php?emp_id=.
7.3
CVE-2026-37336 - SQL Injection in /music/view_music.php of Simple Music Cloud Community System
SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/view_music.php.
9.8
CVE-2026-37340 -
SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/edit_music.php.
9.4
CVE-2026-37338 - SQL Injection in SourceCodester Simple Music Cloud Community System
SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/view_user.php.
9.8
CVE-2026-37339 -
SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/view_genre.php.
7.2
CVE-2026-37341 - SQL Injection Vulnerability in Vehicle Parking Area Management System
SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/manage_category.php.