|
2811
|
6.3 |
MEDIUM
Network
|
-
|
-
|
A vulnerability was identified in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected is an unknown function of the file /product_expiry/edit-admin.php. Such manipulation of the…
|
CWE-74
CWE-89
Injection
SQL Injection
|
CVE-2026-7746
|
2026-05-5 00:17 |
2026-05-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2812
|
9.8 |
CRITICAL
Network
|
-
|
-
|
A security flaw has been discovered in Totolink N300RH 3.2.4-B20220812. Affected by this vulnerability is the function loginauth of the file /cgi-bin/cstecgi.cgi of the component Parameter Handler. P…
|
CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error')
Classic Buffer Overflow
|
CVE-2026-7747
|
2026-05-5 00:17 |
2026-05-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2813
|
8.8 |
HIGH
Network
|
-
|
-
|
A weakness has been identified in Totolink N300RH 3.2.4-B20220812. Affected by this issue is the function setUpgradeFW of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. Executin…
|
CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error')
Classic Buffer Overflow
|
CVE-2026-7748
|
2026-05-5 00:17 |
2026-05-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2814
|
8.8 |
HIGH
Network
|
-
|
-
|
A security vulnerability has been detected in Totolink N300RH 3.2.4-B20220812. This affects the function setWanConfig of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manip…
|
CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error')
Classic Buffer Overflow
|
CVE-2026-7749
|
2026-05-5 00:17 |
2026-05-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2815
|
8.8 |
HIGH
Network
|
-
|
-
|
A vulnerability was detected in Totolink N300RH 3.2.4-B20220812. This vulnerability affects the function setMacFilterRules of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The …
|
CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error')
Classic Buffer Overflow
|
CVE-2026-7750
|
2026-05-5 00:17 |
2026-05-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2816
|
6.5 |
MEDIUM
Network
|
vmware
|
spring_framework
|
A WebFlux server application that processes multipart requests creates temp files for parts larger than 10 K. Under some circumstances, temp files may remain not deleted after the request is fully pr…
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2026-22740
|
2026-05-4 23:51 |
2026-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2817
|
3.1 |
LOW
Network
|
vmware
|
spring_framework
|
Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources.
More precisely, an application can be vulnerable when all the following are true:
* the ap…
|
CWE-524
Use of Cache Containing Sensitive Information
|
CVE-2026-22741
|
2026-05-4 23:51 |
2026-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2818
|
5.3 |
MEDIUM
Network
|
vmware
|
spring_framework
|
Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources.
More precisely, an application can be vulnerable when all the following are true:
…
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2026-22745
|
2026-05-4 23:50 |
2026-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2819
|
9.8 |
CRITICAL
Network
|
nvidia
|
nvflare
|
NVIDIA NVFlare Dashboard contains a vulnerability in the user management and authentication system where an unauthenticated attacker may cause authorization bypass through user-controlled key. A succ…
|
CWE-639
Authorization Bypass Through User-Controlled Key
|
CVE-2026-24178
|
2026-05-4 23:34 |
2026-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2820
|
8.8 |
HIGH
Network
|
nvidia
|
nvflare
|
NVIDIA FLARE SDK contains a vulnerability in FOBS, where an attacker may cause deserialization of untrusted data by sending a malicious FOBS- encoded message. A successful exploit of this vulnerabil…
|
CWE-502
Deserialization of Untrusted Data
|
CVE-2026-24186
|
2026-05-4 23:33 |
2026-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
