Real-Time Zero-Day Stream • Direct NIST NVD Disclosures (2025-2026)

Fresh 2026 Zero-Days & Newly Disclosed CVEs

Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.

Reset All
Found 65,059 fresh security advisories
Page 206 of 2,711
CVE-2026-14658 MEDIUM 6.3
CWE-74 Remote (AV:N)

A vulnerability was detected in code-projects Assessment Management 1.0. This vulnerability affects unknown code of the file /lecturer/marking-scheme.php. The manipulation of the argument smarksrange[...

📅 2026-07-04 Inspect Dossier →
CVE-2026-14657 MEDIUM 6.3
CWE-74 Remote (AV:N)

A flaw has been found in code-projects Assessment Management 1.0. This issue affects some unknown processing of the file /lecturer/marking-scheme.php of the component Database Query Handler. This mani...

📅 2026-07-04 Inspect Dossier →
CVE-2026-14656 MEDIUM 4.3
CWE-79 Remote (AV:N)

A security vulnerability has been detected in code-projects Assessment Management 1.0. This affects an unknown part of the file /admin/remove-user.php. The manipulation of the argument ID leads to cro...

📅 2026-07-04 Inspect Dossier →
CWE-79 Remote (AV:N)

A weakness has been identified in code-projects Assessment Management 1.0. Affected by this issue is some unknown functionality of the file admin/view-users.php. Executing a manipulation of the argume...

📅 2026-07-04 Inspect Dossier →
CWE-74 Remote (AV:N)

A vulnerability was identified in SourceCodester Simple and Nice Shopping Cart Script 1.0. Affected is an unknown function of the file /admin/girlsproductdeletequery.php. Such manipulation of the argu...

📅 2026-07-04 Inspect Dossier →
CWE-74 Remote (AV:N)

A vulnerability was determined in SourceCodester Simple and Nice Shopping Cart Script 1.0. This impacts an unknown function of the file /admin/mensproductdeletequery.php. This manipulation of the argu...

📅 2026-07-04 Inspect Dossier →
CWE-74 Remote (AV:N)

A vulnerability was found in SourceCodester Simple and Nice Shopping Cart Script 1.0. This affects an unknown function of the file /admin/login.php of the component Admin Login. The manipulation of th...

📅 2026-07-04 Inspect Dossier →
CVE-2024-1248 MEDIUM 4.8
wso2/api_manager CWE-298 Remote (AV:N)

The silent Just-In-Time (JIT) provisioning feature in federated authentication implementations fails to properly segregate user roles during account creation when a federated user shares a username wi...

📅 2026-07-04 Inspect Dossier →
CWE-74 Remote (AV:N)

A vulnerability was detected in code-projects Online Voting System 1.0. Impacted is the function test_input of the file /saveVote.php. Performing a manipulation of the argument voterName/voterEmail/vo...

📅 2026-07-04 Inspect Dossier →
CWE-74 Remote (AV:N)

A security vulnerability has been detected in code-projects Online Voting System up to 0.x/1.0. This issue affects the function test_input of the file /authentication.php of the component Login. Such ...

📅 2026-07-04 Inspect Dossier →
CVE-2026-14647 MEDIUM 4.3
CWE-119 Remote (AV:N)

A weakness has been identified in onnx up to 1.21.x. This vulnerability affects the function convPoolShapeInference_opset19 of the file onnx/defs/nn/old.cc of the component onnxruntime. This manipulat...

📅 2026-07-04 Inspect Dossier →
CWE-74 Remote (AV:N)

A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some unknown functionality of the file /edit_class2.php. The manipulation of the argum...

📅 2026-07-04 Inspect Dossier →
CWE-74 Remote (AV:N)

A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /edit_course.php. Executing a manipulatio...

📅 2026-07-04 Inspect Dossier →
CWE-74 Remote (AV:N)

A vulnerability was found in CodeAstro Apartment Visitor Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipulation of the argument...

📅 2026-07-04 Inspect Dossier →
CVE-2026-14639 MEDIUM 6.3
CWE-74 Remote (AV:N)

A vulnerability has been found in CodeAstro Ecommerce Website 1.0. This impacts an unknown function of the file /ecommerce-website-php/customer/my_account.php?edit_account. Such manipulation of the ar...

📅 2026-07-04 Inspect Dossier →
CVE-2026-14638 MEDIUM 6.3
CWE-74 Remote (AV:N)

A flaw has been found in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /patient.php. This manipulation of the argument editid causes sql injection. The atta...

📅 2026-07-04 Inspect Dossier →
CWE-20 Remote (AV:N)

A security vulnerability has been detected in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 13fd582aaf49aeab7438acc0fc3eb973a1f5e6a7. The affected element is the function getCartItems in the libra...

📅 2026-07-04 Inspect Dossier →
CWE-352 Remote (AV:N)

Dancer2::Plugin::Auth::OAuth::Provider versions before 0.23 for Perl do not support the OAuth 2.0 state parameter. The authentication_url method builds the provider authorization redirect without iss...

📅 2026-07-04 Inspect Dossier →
CWE-352 Remote (AV:N)

Plack::Middleware::OAuth versions through 0.10 for Perl do not support the OAuth 2.0 state parameter. RequestTokenV2 builds the provider authorization redirect without issuing a state value, and Acce...

📅 2026-07-04 Inspect Dossier →
CVE-2026-14636 MEDIUM 5.4
CWE-22 Remote (AV:N)

A weakness has been identified in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 23105f25dadf57b4314fc015a63a7c6e910c89df. Impacted is the function do_upload_others_images of the file application/m...

📅 2026-07-04 Inspect Dossier →
CWE-22 Remote (AV:N)

A security flaw has been discovered in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 222ff31c06687b1c6d0e1ab63953f82c3674c52b. This issue affects some unknown processing of the file application/mo...

📅 2026-07-04 Inspect Dossier →
CVE-2026-14634 MEDIUM 4.3
CWE-79 Remote (AV:N)

A vulnerability was identified in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 213babdbaa949e94557246414db0130e01394517. This vulnerability affects the function checkForPostRequests of the file a...

📅 2026-07-04 Inspect Dossier →
CVE-2026-14633 MEDIUM 4.3
CWE-79 Remote (AV:N)

A vulnerability was determined in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 49b20f53de2b7ec34e920b11c863f1491d911a04. This affects an unknown part of the file /index.php/api/product/set of the...

📅 2026-07-04 Inspect Dossier →
CVE-2026-14632 MEDIUM 4.3
CWE-601 Remote (AV:N)

A vulnerability was found in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 95dfa8cebbb87ab46ae450643a07241274a74dce. Affected by this issue is the function setReferrer of the file application/core...

📅 2026-07-04 Inspect Dossier →
Showing Page 206 of 2,711 • 65,059 newly disclosed advisories