CVE ID :CVE-2026-19188 Published : Aug. 14, 2026, 6:20 p.m. | 14 minutes ago Description :A critical OS command injection vulnerability has been identified in the Haiwell IoT Cloud HMI Gateway product. The vulnerability exists in the Net Check feature accessible…
CVE ID :CVE-2026-73850 Published : Aug. 14, 2026, 6:19 p.m. | 16 minutes ago Description :Emlog is an open source website building system. In 2.6.20 and earlier, there is a SQL injection vulnerability in the queryDatabase function in ai.php. Severity: 8.6…
CVE ID :CVE-2026-72970 Published : Aug. 14, 2026, 6:19 p.m. | 16 minutes ago Description :Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. Severity: 8.3 | HIGH Visit the link for more…
CVE ID :CVE-2026-73849 Published : Aug. 14, 2026, 6:19 p.m. | 16 minutes ago Description :Emlog is an open source website building system. In 2.6.26 and earlier, install.php accepts action=reinstall without authentication and deliberately skips the already-installed check because the guard…
CVE ID :CVE-2026-63361 Published : Aug. 14, 2026, 6:18 p.m. | 16 minutes ago Description :LimeSurvey Community Edition 7.0.5 contains an authenticated reflected cross-site scripting vulnerability in the HTML editor popup endpoint. The text and name query parameters are passed through…
CVE ID :CVE-2026-72777 Published : Aug. 13, 2026, 6:23 p.m. | 6 minutes ago Description :Next AI Draw.io through 0.4.16 contains a server-side request forgery vulnerability in the POST /api/parse-url endpoint due to hostname validation that only checks string patterns without…
CVE ID :CVE-2026-72741 Published : Aug. 13, 2026, 5:59 p.m. | 30 minutes ago Description :Rainbond through 6.9.7 contains a broken access control vulnerability in the CheckToken function that allows authenticated attackers to access unauthorized enterprise resources by substituting another enterprise’s…
CVE ID :CVE-2026-18428 Published : Aug. 13, 2026, 5:32 p.m. | 57 minutes ago Description :A SQL query validation bypass in the Flint extension query handler in the OpenSearch SQL plugin allows a remote authenticated actor with async query access to…
CVE ID :CVE-2019-25765 Published : Aug. 13, 2026, 5:21 p.m. | 1 hour, 8 minutes ago Description :ASP-CMS contains a SQL injection vulnerability in the commentList.asp endpoint that allows unauthenticated remote attackers to inject arbitrary SQL by manipulating the id parameter in…
CVE ID :CVE-2024-58374 Published : Aug. 13, 2026, 5:21 p.m. | 1 hour, 8 minutes ago Description :Hongjing e-HR contains an unauthenticated SQL injection vulnerability in the getSdutyTree servlet endpoint that allows remote unauthenticated attackers to access protected resources by supplying a…