Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Results for "cwe:89"
1,087 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-5839 |
low | 2.0 | 0.0020 | 2026-04-09 | A vulnerability was identified in PHPGurukul News Portal Project 4.1. This issue affects some unknow | |
CVE-2026-5840 |
low | 2.0 | 0.0020 | 2026-04-09 | A security flaw has been discovered in PHPGurukul News Portal Project 4.1. Impacted is an unknown fu | |
CVE-2026-7028 |
low | 2.0 | 0.0031 | 2026-04-26 | A security flaw has been discovered in CodeAstro Online Job Portal 1.0. The affected element is an u | |
CVE-2026-7083 |
low | 2.0 | 0.0025 | 2026-04-27 | A vulnerability has been found in likeadmin-likeshop likeadmin_php up to 1.9.6. Affected by this iss | |
CVE-2026-7282 |
low | 2.0 | 0.0021 | 2026-04-28 | A vulnerability was identified in SourceCodester Pharmacy Sales and Inventory System 1.0. This affec | |
CVE-2026-7283 |
low | 2.0 | 0.0026 | 2026-04-28 | A security flaw has been discovered in SourceCodester Pharmacy Sales and Inventory System 1.0. This | |
CVE-2026-7293 |
low | 2.0 | 0.0021 | 2026-04-28 | A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. Affected is the functio | |
CVE-2026-7394 |
low | 2.0 | 0.0024 | 2026-04-29 | A vulnerability was determined in SourceCodester Pizzafy Ecommerce System 1.0. Affected by this vuln | |
CVE-2026-7407 |
low | 2.0 | 0.0025 | 2026-04-29 | A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0. Affected | |
CVE-2026-7408 |
low | 2.0 | 0.0025 | 2026-04-29 | A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. Affected by this issue | |
CVE-2026-7409 |
low | 2.0 | 0.0020 | 2026-04-29 | A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. This affects the function save | |
CVE-2026-7553 |
low | 2.0 | 0.0021 | 2026-05-01 | A vulnerability was found in code-projects Gym Management System 1.0. Affected by this vulnerability | |
CVE-2026-7612 |
low | 2.0 | 0.0021 | 2026-05-02 | A vulnerability was determined in itsourcecode Courier Management System 1.0. Affected is an unknown | |
CVE-2026-7697 |
low | 2.0 | 0.0021 | 2026-05-03 | A vulnerability was determined in AMTT Hotel Broadband Operation System 1.0. Affected is an unknown | |
CVE-2026-8772 |
low | 2.0 | 0.0021 | 2026-05-18 | A weakness has been identified in linlinjava litemall up to 1.8.0. Affected is an unknown function o | |
CVE-2026-12789 |
low | 2.0 | 0.0033 | 2026-06-21 | A vulnerability was identified in ILIAS Learning Management System 11.0. This issue affects the func | |
CVE-2026-13495 |
low | 2.0 | 0.0035 | 2026-06-28 | A vulnerability has been found in itsourcecode Hospital Management System 1.0. Impacted is an unknow | |
CVE-2026-13569 |
low | 2.0 | 0.0035 | 2026-06-29 | A security vulnerability has been detected in weng-xianhu EyouCMS up to 1.7.1. This issue affects so | |
CVE-2026-15494 |
low | 2.0 | 0.0033 | 2026-07-12 | A flaw has been found in AMTT Hotel Broadband Operation System 1.0. Impacted is an unknown function | |
CVE-2026-57588 |
low | 1.8 | 0.0033 | 2026-06-25 | A SQL injection vulnerability in Nessus allows an attacker to craft a malicious scan result file tha | |
CVE-2026-7688 |
low | 1.3 | 0.0022 | 2026-05-03 | A vulnerability was identified in Dolibarr ERP CRM up to 23.0.2. This affects the function _checkVal | |
CVE-2017-18362 |
— | — | — | — | KEV | ConnectWise ManagedITSync integration for Kaseya VSA is vulnerable to unauthenticated remote command |
CVE-2019-7481 |
— | — | — | — | KEV | SonicWall SMA100 contains a SQL injection vulnerability allowing an unauthenticated user to gain rea |
CVE-2020-29574 |
— | — | — | — | KEV | CyberoamOS (CROS) contains a SQL injection vulnerability in the WebAdmin that allows an unauthentica |
CVE-2021-20016 |
— | — | — | — | KEV | SonicWall SSLVPN SMA100 contains a SQL injection vulnerability that allows remote exploitation for c |
CVE-2024-9379 |
— | — | 0.4427 | — | KEV | Ivanti Cloud Services Appliance (CSA) contains a SQL injection vulnerability in the admin web consol |
CVE-2025-57819 |
— | — | 0.9521 | — | KEV | Sangoma FreePBX contains an authentication bypass vulnerability due to insufficiently sanitized user |
CVE-2026-9082 |
— | — | 0.8938 | — | KEV | Drupal Core contains a SQL injection vulnerability that could allow for privilege escalation and rem |
CVE-2026-60137 |
— | — | 0.0532 | — | KEV | WordPress Core contains a SQL injection vulnerability when a plugin or theme passes untrusted input |
CVE-2026-70369 |
— | — | 0.0057 | 2026-08-04 | Koha's reports/acquisitions_stats.pl builds its per-cell statistics query in sub calculate by interp | |
CVE-2026-70370 |
— | — | 0.0057 | 2026-08-04 | Koha's reports/catalogue_stats.pl builds dynamic SQL in sub calculate by interpolating the user-cont | |
CVE-2026-70371 |
— | — | 0.0057 | 2026-08-04 | Koha's reports/issues_avg_stats.pl builds dynamic SQL in sub calculate by concatenating several user | |
CVE-2026-70372 |
— | — | 0.0057 | 2026-08-04 | Koha's reports/bor_issues_top.pl builds dynamic SQL in sub calculate by concatenating several user-c | |
CVE-2026-70373 |
— | — | 0.0057 | 2026-08-04 | Koha's reports/issues_stats.pl (the circulation statistics report) builds its calculation query in s | |
CVE-2026-72898 |
— | — | 0.9855 | — | KEV | Metabase contains a SQL Injection vulnerability that allows an unauthenticated remote attacker to in |
CVE-2026-76461 |
— | — | 0.2954 | — | KEV | Cisco AsyncOS software for Cisco Secure Email Gateway (SEG) contains a SQL injection vulnerability t |
CVE-2026-87938 |
— | — | 0.0017 | 2026-10-22 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i |