Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
20560
Total
1471
Critical
6231
High
6522
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-13520 | MEDIUM | 6.3 | A vulnerability was determined in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /appointmentapproval.php of the component Appointment Handler. This … | Jun 29, 2026 |
| CVE-2026-13519 | HIGH | 8.8 | A vulnerability was found in Tenda JD12L 16.03.53.23. This impacts the function fromNatStaticSetting of the file /goform/NatStaticSetting. The manipulation of the argument page results in … | Jun 29, 2026 |
| CVE-2026-13518 | HIGH | 8.8 | A vulnerability has been found in Tenda JD12L 16.03.53.23. This affects the function fromAddressNat of the file /goform/addressNat. The manipulation of the argument page leads … | Jun 29, 2026 |
| CVE-2026-13517 | HIGH | 8.8 | A flaw has been found in Tenda JD12L 16.03.53.23. The impacted element is the function formWifiBasicSet of the file /goform/WifiBasicSet. Executing a manipulation of the … | Jun 29, 2026 |
| CVE-2026-13516 | HIGH | 8.8 | A vulnerability was detected in Tenda JD12L 16.03.53.23. The affected element is the function fromSetWifiGusetBasic of the file /goform/WifiGuestSet. Performing a manipulation of the argument … | Jun 29, 2026 |
| CVE-2026-13515 | HIGH | 8.8 | A security vulnerability has been detected in Tenda JD12L 16.03.53.23. Impacted is the function formSetPPTPServer of the file /goform/SetPptpServerCfg. Such manipulation of the argument startIp … | Jun 29, 2026 |
| CVE-2026-13514 | LOW | 2.4 | A weakness has been identified in Chess Play and Learn App up to 4.9.42 on Android. This issue affects some unknown processing of the file … | Jun 29, 2026 |
| CVE-2026-13513 | MEDIUM | 5.0 | A security flaw has been discovered in MyScale MyScaleDB up to 1.8.0. This vulnerability affects the function SegmentId::getCacheKey in the library src/VectorIndex/Common/SegmentId.h. The manipulation results … | Jun 29, 2026 |
| CVE-2026-13512 | MEDIUM | 6.3 | A vulnerability was identified in Databend up to 1.2.881 on HTTP. This affects the function ClientSessionManager::state_key of the file src/query/service/src/servers/http/v1/session/client_session_manager.rs of the component Tenant Handler. … | Jun 28, 2026 |
| CVE-2026-13511 | LOW | 3.1 | A vulnerability was determined in VoltAgent up to 2.1.17. Affected by this issue is the function handleGetMemoryConversation of the file packages/server-core/src/handlers/memory.handlers.ts of the component Memory … | Jun 28, 2026 |
| CVE-2026-13510 | LOW | 3.7 | A vulnerability was found in SimStudioAI sim up to 0.6.92. Affected by this vulnerability is an unknown functionality in the library apps/sim/lib/core/security/deployment.ts of the component … | Jun 28, 2026 |
| CVE-2026-13509 | MEDIUM | 6.3 | A vulnerability has been found in RAGapp up to 0.1.5. Affected is the function FileHandler.upload_file/FileHandler.remove_file of the file src/ragapp/backend/controllers/files.py of the component Knowledge File Handler. … | Jun 28, 2026 |
| CVE-2026-13508 | MEDIUM | 5.5 | A flaw has been found in khoj-ai khoj up to 2.0.0-beta.28. This impacts an unknown function of the file src/khoj/routers/api_chat.py of the component Conversation Sharing … | Jun 28, 2026 |
| CVE-2026-13507 | MEDIUM | 5.0 | A vulnerability was detected in volcengine OpenViking up to 0.3.21. This affects the function str_to_uint64 of the file openviking/storage/vectordb/utils/str_to_uint64.py of the component Local VectorDB Primary-key … | Jun 28, 2026 |
| CVE-2026-49048 | CRITICAL | 9.8 | The Joomla extension JoomCCK exposes a front-end controller task, that builds two SQL statements by directly concatenating a user-supplied request parameter into the query string … | Jun 28, 2026 |
| CVE-2026-13504 | LOW | 3.5 | A vulnerability has been found in code-projects Project Management System 1.0. This vulnerability affects unknown code of the file /mail.php of the component Mail Compose … | Jun 28, 2026 |
| CVE-2026-13503 | MEDIUM | 5.3 | A vulnerability was detected in antlr ANTLR4 up to 4.13.2. Affected by this issue is the function getImportedVocabFile of the file tool/src/org/antlr/v4/parse/TokenVocabParser.java of the component … | Jun 28, 2026 |
| CVE-2026-13502 | MEDIUM | 4.5 | A flaw has been found in antlr ANTLR4 up to 4.13.2. This affects the function ObjectInputStream.readObject of the file antlr4-maven-plugin/src/main/java/org/antlr/mojo/antlr4/GrammarDependencies.java of the component Maven Plugin. … | Jun 28, 2026 |
| CVE-2026-13501 | MEDIUM | 5.3 | A security vulnerability has been detected in antlr ANTLR4 up to 4.13.2. Affected by this vulnerability is the function GoTarget of the file tool/src/org/antlr/v4/codegen/target/GoTarget.java of … | Jun 28, 2026 |
| CVE-2026-13500 | HIGH | 7.3 | A weakness has been identified in antlr ANTLR4 up to 4.13.2. Affected is an unknown function of the file tool/src/org/antlr/v4/codegen/model/OutputFile.java of the component Grammar Action … | Jun 28, 2026 |
| CVE-2026-13499 | MEDIUM | 4.3 | A security flaw has been discovered in yashpokharna2555 restaurent-management-system. This impacts an unknown function of the file login_register.php of the component Registration Handler. Performing a … | Jun 28, 2026 |
| CVE-2026-13498 | HIGH | 7.3 | A vulnerability was identified in yashpokharna2555 restaurent-management-system. This affects an unknown function of the file /forgotpassword.php of the component POST Parameter Handler. Such manipulation of … | Jun 28, 2026 |
| CVE-2026-13497 | MEDIUM | 6.3 | A vulnerability was determined in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /appointment.php. This manipulation of the … | Jun 28, 2026 |
| CVE-2026-13496 | MEDIUM | 6.3 | A vulnerability was found in itsourcecode Hospital Management System 1.0. The affected element is an unknown function of the file /ajaxmedicine.php. The manipulation of the … | Jun 28, 2026 |
| CVE-2026-13495 | MEDIUM | 4.7 | A vulnerability has been found in itsourcecode Hospital Management System 1.0. Impacted is an unknown function of the file /adminprofile.php. The manipulation of the argument … | Jun 28, 2026 |