CVEs published in April 2026
6,215 vulnerabilities, 624 critical, 20 exploited.
- huawei harmonyosRace condition vulnerability in the notification service. Impact: Successful exploitation of this...1.9 Low
- totolink a7100ruTotolink A7100RU CGI cstecgi.cgi setIpQosRules os command injection9.3 Critical
- totolink a7100ruTotolink A7100RU CGI cstecgi.cgi setWanCfg os command injection9.3 Critical
- totolink a7100ruTotolink A7100RU CGI cstecgi.cgi setWizardCfg os command injection9.3 Critical
- code-projects vehicle showroom management systemcode-projects Vehicle Showroom Management System StaffDetailsFunction.php sql injection6.9 Medium
- code-projects vehicle showroom management systemcode-projects Vehicle Showroom Management System StaffAddingFunction.php sql injection6.9 Medium
- fpt software nightwolf penetration testing platformStored Cross Site Scripting in NightWolf Penetration Testing Platform6.3 Medium
- code-projects vehicle showroom management systemcode-projects Vehicle Showroom Management System PaymentStatusFunction.php sql injection6.9 Medium
- code-projects simple laundry systemcode-projects Simple Laundry System checkupdatestatus.php cross site scripting5.3 Medium
- code-projects vehicle showroom management systemcode-projects Vehicle Showroom Management System BookVehicleFunction.php sql injection6.9 Medium
- code-projects vehicle showroom management systemcode-projects Vehicle Showroom Management System MonthTotalReportUpdateFunction.php sql injection6.9 Medium
- farion1231 cc-switchfarion1231 cc-switch ProxyServer server.rs cross-domain policy5.3 Medium
- sourcecodester hotel management systemtushar-2223 Hotel Management System roomdelete.php sql injection6.9 Medium
- samsung escargotDeserialization of untrusted data vulnerability in Samsung Open Source Escargot Java Script...6.2 Medium
- danielmiessler personal ai infrastructuredanielmiessler Personal_AI_Infrastructure parse_url.ts os command injection5.3 Medium
- totolink a7100ruTotolink A7100RU CGI cstecgi.cgi UploadFirmwareFile os command injection9.3 Critical
- totolink a7100ruTotolink A7100RU CGI cstecgi.cgi UploadOpenVpnCert os command injection9.3 Critical
libultrahdrOSS-FuzzHeap-buffer-overflow in ultrahdr::IccHelper::readIccColorGamutNo score- totolink a7100ruTotolink A7100RU CGI cstecgi.cgi setAccessDeviceCfg os command injection9.3 Critical
- No product listedSourcecodester Online Thesis Archiving System v1.0 is vulnerable to SQL injection in the file ...2.7 Low
- No product listedSourcecodester Online Thesis Archiving System v1.0 is vulnerable to SQL injection in /otas...2.7 Low
- No product listedSourcecodester Online Thesis Archiving System v1.0 is vulnerale to SQL injection in the file ...7.3 High
- oretnom23 computer and mobile repair shop management systemSourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL...2.7 Low
- oretnom23 computer and mobile repair shop management systemSourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL...2.7 Low
- No product listedSourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL...2.7 Low
- No product listedSourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerale to SQL...2.7 Low
- No product listedSourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL...2.7 Low
- No product listedSourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in the file ...2.7 Low
- No product listedSourcecodester Online Resort Management System v1.0 is vulnerable to SQL Injection in the file ...2.7 Low
- No product listedSourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in /orms/admin...2.7 Low
- No product listedSourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in /orms/admin...2.7 Low
- oretnom23 cab management systemSourcecodester Cab Management System 1.0 is vulnerable to SQL Injection in the file /cms/admin...2.7 Low
- oretnom23 cab management systemSourcecodester Cab Management System v1.0 is vulnerable to SQL injection in the file /cms/admin...2.7 Low
- janobe online reviewer systemSourcecodester Online Reviewer System v1.0 is vulnerable to SQL Injection in the file /system...2.7 Low
- janobe online reviewer systemSourcecodester Online Reviewer System v1.0 is vulnerale to SQL Injection in the file /system...2.7 Low
- razormist basic library systemSourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem...2.7 Low
- razormist basic library systemSourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem...2.7 Low
- razormist basic library systemSourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem...2.7 Low
- haproxyAn issue was discovered in HAProxy before 3.3.6. The HTTP/3 parser does not check that the...4.0 Medium
- No product listedIn Totara LMS v19.1.5 and before, the forgot password API does not implement rate limiting for...9.8 Critical
- No product listedTotara LMS v19.1.5 and before is vulnerable to Incorrect Access Control. The login page code can...9.8 Critical
- No product listedTotara LMS v19.1.5 and before is vulnerable to HTLM Injection. An attacker can inject malicious...8.0 High
- No product listedAn issue in the Bluetooth RFCOMM service of Parani M10 Motorcycle Intercom v2.1.3 allows...6.5 Medium
pyroUbuntu,pyro4Ubuntu,pyro5Ubuntu +2 moreAn issue in the <code>pickle</code> protocol of Pyro v3.x allows attackers to execute arbitrary code via supplying a crafted pickled string message.9.8 Critical- ffmpegA heap buffer overflow in the av_bprint_finalize() function of FFmpeg v8.0.1 allows attackers to...7.5 High
- ffmpegAn improper resource deallocation and closure vulnerability in the tools/zmqsend.c component of...7.5 High
- ffmpegAn out-of-bounds read in the read_global_param() function (libavcodec/av1dec.c) of FFmpeg v8.0.1...7.5 High
- cloudark kubeplusThe `/registercrd` endpoint in KubePlus 4.14 in the kubeconfiggenerator component is vulnerable...8.8 High
tinyobjloaderUbuntuA stack overflow in the experimental/tinyobj_loader_opt.h file of tinyobjloader commit d56555b...6.2 Medium- No product listedA HTML Injection vulnerability exists in the Dashboard module of Vtiger CRM 8.4.0. The...6.1 Medium
- Show moreLoading…