|
4201
|
7.3 |
HIGH
Network
|
-
|
-
|
Se detectó una vulnerabilidad en SourceCodester Online Library Management System 1.0. El elemento afectado es una función desconocida del archivo /home.php del componente Gestor de Parámetros. Realiz…
|
CWE-74 CWE-89
Injection SQL Injection
|
CVE-2026-4624
|
2026-04-25 01:32 |
2026-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4202
|
7.3 |
HIGH
Network
|
-
|
-
|
A flaw has been found in SourceCodester Online Admission System 1.0. This affects an unknown function of the file /programmes.php. Executing a manipulation of the argument program can lead to sql inj…
|
CWE-74 CWE-89
Injection SQL Injection
|
CVE-2026-4625
|
2026-04-25 01:32 |
2026-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4203
|
7.3 |
HIGH
Network
|
-
|
-
|
Se ha encontrado un fallo en SourceCodester Online Admission System 1.0. Esto afecta a una función desconocida del archivo /programmes.php. La ejecución de una manipulación del argumento program pued…
|
CWE-74 CWE-89
Injection SQL Injection
|
CVE-2026-4625
|
2026-04-25 01:32 |
2026-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4204
|
7.3 |
HIGH
Network
|
-
|
-
|
A security vulnerability has been detected in DefaultFuction Jeson-Customer-Relationship-Management-System up to 1b4679c4d06b90d31dd521c2b000bfdec5a36e00. This affects an unknown function of the file…
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2026-4623
|
2026-04-25 01:32 |
2026-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4205
|
7.3 |
HIGH
Network
|
-
|
-
|
Una vulnerabilidad de seguridad ha sido detectada en DefaultFuction Jeson-Customer-Relationship-Management-System hasta 1b4679c4d06b90d31dd521c2b000bfdec5a36e00. Esto afecta una función desconocida d…
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2026-4623
|
2026-04-25 01:32 |
2026-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4206
|
6.5 |
MEDIUM
Network
|
-
|
-
|
The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to unauthorized data loss due to a missing capability check in all versions up to, and including, 3.1.2. This is due to th…
|
CWE-862
Missing Authorization
|
CVE-2026-3138
|
2026-04-25 01:32 |
2026-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4207
|
6.5 |
MEDIUM
Network
|
-
|
-
|
El plugin Product Filter for WooCommerce by WBW para WordPress es vulnerable a la pérdida de datos no autorizada debido a una comprobación de capacidad faltante en todas las versiones hasta la 3.1.2,…
|
CWE-862
Missing Authorization
|
CVE-2026-3138
|
2026-04-25 01:32 |
2026-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4208
|
9.1 |
CRITICAL
Network
|
-
|
-
|
The WP DSGVO Tools (GDPR) plugin for WordPress is vulnerable to unauthorized account destruction in all versions up to, and including, 3.1.38. This is due to the `super-unsubscribe` AJAX action accep…
|
CWE-862
Missing Authorization
|
CVE-2026-4283
|
2026-04-25 01:32 |
2026-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4209
|
7.2 |
HIGH
Network
|
-
|
-
|
A vulnerability was found in D-Link DIR-825 and DIR-825R 1.0.5/4.5.1. Affected is the function handler_update_system_time of the file libdeuteron_modules.so of the component NTP Service. The manipula…
|
CWE-77 CWE-78
Command Injection OS Command
|
CVE-2026-4627
|
2026-04-25 01:32 |
2026-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4210
|
7.2 |
HIGH
Network
|
-
|
-
|
Se encontró una vulnerabilidad en D-Link DIR-825 y DIR-825R 1.0.5/4.5.1. Afecta a la función handler_update_system_time del archivo libdeuteron_modules.so del componente Servicio NTP. La manipulación…
|
CWE-77 CWE-78
Command Injection OS Command
|
CVE-2026-4627
|
2026-04-25 01:32 |
2026-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|