KEV + Critical EPSS ≥ 50% Critical + PoC No Auth + Critical XSS (CWE-79) SQLi (CWE-89) Code Injection KEV + Has PoC

Results for "cwe:89"

1,092 found Export CSV
CVE Severity CVSS EPSS Published Flags Description
CVE-2026-19351 medium 5.5 0.0053 2026-08-09 A vulnerability was found in dresende node-sql-query 0.1.25/0.1.26/0.1.27/0.1.28. Affected by this v
CVE-2026-19355 medium 5.5 0.0041 2026-08-09 A vulnerability was determined in MingSoft MCMS up to 3.0.6. This affects the function ModelDataImpl
CVE-2026-19384 medium 5.5 0.0032 2026-08-10 A weakness has been identified in SourceCodester Simple Doctors Appointment System 1.0. The affected
CVE-2026-75014 medium 5.5 0.0043 2026-08-17 A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. This vulnerability aff
CVE-2026-75079 medium 5.5 0.0043 2026-08-18 A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. This vulnera
CVE-2026-75080 medium 5.5 0.0043 2026-08-18 A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0.
CVE-2026-75089 medium 5.5 0.0043 2026-08-18 A weakness has been identified in PHPGurukul Complaint Management System 1.0. Affected by this issue
CVE-2026-75778 medium 5.5 0.0043 2026-08-18 A vulnerability was identified in code-projects Task Management System 1.0. This affects the functio
CVE-2026-75986 medium 5.5 0.0043 2026-08-19 A vulnerability has been found in code-projects Online Job Portal System 1.0. The impacted element i
CVE-2026-76048 medium 5.5 0.0043 2026-08-19 A flaw has been found in SourceCodester Simple Online Food Ordering System 1.0. The impacted element
CVE-2026-76049 medium 5.5 0.0043 2026-08-19 A vulnerability has been found in SourceCodester Simple Online Food Ordering System 1.0. This affect
CVE-2026-76050 medium 5.5 0.0043 2026-08-19 A vulnerability was found in SourceCodester Simple Online Food Ordering System 1.0. This impacts an
CVE-2026-78171 medium 5.5 0.0043 2026-08-24 A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vuln
CVE-2026-78201 medium 5.5 0.0043 2026-08-24 A vulnerability has been found in itsourcecode Payroll System 1.0. The impacted element is the funct
CVE-2026-111873 medium 5.5 0.0026 2026-10-18 A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbf
CVE-2026-112141 medium 5.5 0.0026 2026-10-19 A vulnerability was determined in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f4
CVE-2026-112150 medium 5.5 0.0026 2026-10-19 A security flaw has been discovered in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519
CVE-2026-114254 medium 5.5 0.0042 2026-10-21 A vulnerability was identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f
CVE-2026-114257 medium 5.5 0.0040 2026-10-21 A security vulnerability has been detected in oretnom23 file-management-system-php up to 2e3c1ebe60f
CVE-2026-114263 medium 5.5 0.0033 2026-10-21 A vulnerability was identified in ProjectWorlds Advanced Library Management System 1.0. The affected
CVE-2026-114441 medium 5.5 0.0042 2026-10-21 A weakness has been identified in oretnom23 php-travel-agency-system. This issue affects some unknow
CVE-2026-46531 medium 5.5 0.0020 2026-10-23 Cacti is an open source performance and fault management framework. From version 1.2.27 to before ve
CVE-2026-116048 medium 5.5 0.0025 2026-10-25 A vulnerability was detected in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d7
CVE-2026-116050 medium 5.5 0.0025 2026-10-25 A vulnerability has been found in krupalshah Employee Recruitment System up to 922ff6d208278282e7c8e
CVE-2026-116061 medium 5.5 0.0026 2026-10-25 A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This vulnerabilit
CVE-2026-116062 medium 5.5 0.0027 2026-10-25 A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. This issue a
CVE-2026-116112 medium 5.5 0.0025 2026-10-26 A vulnerability was identified in HashenUdara edoc-doctor-appointment-system up to cc258425b915d1af9
CVE-2026-13746 medium 5.4 0.0022 2026-06-29 Improper neutralization of local CLI parameters in Snowflake CLI versions prior to 3.19 allowed unin
CVE-2026-110733 medium 5.4 0.0032 2026-10-26 Vulnerability in the SQL storage module of Apache SIS. When sorting a stream of features, the clause
CVE-2026-114250 medium 5.3 0.0021 2026-10-21 A flaw has been found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82
CVE-2026-114265 medium 5.3 0.0025 2026-10-21 A weakness has been identified in ProjectWorlds Advanced Library Management System 1.0. This affects
CVE-2026-114380 medium 5.3 0.0021 2026-10-21 A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. Impacted is an unknown fu
CVE-2026-6982 medium 5.3 0.0024 2026-04-25 A vulnerability was determined in star7th ShowDoc up to 2.10.10/3.6.2/3.8.0. Affected by this vulner
CVE-2026-42229 medium 5.3 0.0034 2026-05-04 n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1,
CVE-2026-12050 medium 5.3 0.0043 2026-06-19 SQL injection in pgAdmin 4's named restore point endpoint (POST /browser/server/restore_point/{gid}/
CVE-2026-59257 medium 5.3 0.0057 2026-07-08 n8n before 1.123.61, 2.x before 2.27.4, and 2.28.x before 2.28.1 contains a SQL injection vulnerabil
CVE-2026-15502 medium 5.3 0.0032 2026-07-12 A vulnerability was detected in AojiaoZero Antaris 1.0. This affects the function _rewardPurchase of
CVE-2026-19354 medium 5.3 0.0032 2026-08-09 A vulnerability was found in lock-upme OPMS up to 831440f37a92c1568f2e071d5233bc873a9d8b09. The impa
CVE-2026-72750 medium 5.3 0.0047 2026-08-11 n8n before 1.123.67, 2.31.5, and 2.32.1 contains a SQL injection vulnerability in the Snowflake node
CVE-2026-49392 medium 5.3 0.0030 2026-08-19 Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4
CVE-2026-55444 medium 5.3 0.0025 2026-10-23 The Goobi viewer is a web application that allows digitised material to be displayed in a web browse
CVE-2026-55465 medium 5.3 0.0026 2026-10-23 The Goobi viewer is a web application that allows digitised material to be displayed in a web browse
CVE-2023-7331 medium 5.1 0.0024 2025-12-31 A vulnerability was detected in PKrystian Full-Stack-Bank up to bf73a0179e3ff07c0d7dc35297cea0be0e5b
CVE-2026-114264 medium 5.1 0.0021 2026-10-21 A security flaw has been discovered in ProjectWorlds Advanced Library Management System 1.0. The imp
CVE-2026-40529 medium 5.1 0.0016 2026-04-23 CMS ALAYA provided by KANATA Limited contains an SQL injection vulnerability. Information stored in
CVE-2026-33385 medium 5.1 0.0041 2026-07-29 A Blind SQL injection vulnerability has been identified in Quick.CMS. Improper neutralization of inp
CVE-2026-62362 medium 4.9 0.0034 2026-10-16 PeerBanHelper automatically blocks unwanted, leeching, and abnormal BitTorrent peers using customiza
CVE-2026-16094 medium 4.9 0.0058 2026-08-15 The Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms plugin for WordPress is vuln
CVE-2026-62845 medium 4.7 0.0032 2026-07-30 Kamaji is the Hosted Control Plane Manager for Kubernetes. Prior to 26.7.4-edge, the PostgreSQL and
CVE-2026-86386 medium 4.3 0.0021 2026-10-28 Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS20