Vulnerabilities
Summary — last 7 days
New vulnerabilities4,948▲ 39 vs. last week
Critical / high2,111▼ 666 vs. last week
New active exploitation (KEV)9▼ 2 vs. last week
Unscored (no CVSS)757▲ 649 vs. last week
More filters
3 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Received | Low (2.1) | — | — | Itsourcecode Online Cake Ordering SystemAI | 10/20/2026 | 10/20/2026 | A vulnerability has been found in itsourcecode Online Cake Ordering System 1.0. Affected by this issue is some unknown functionality of the file /404.php. Such manipulation of the argument useruid leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed to the public and… | |
| Received | Low (2.1) | — | — | Itsourcecode Online Cake Ordering SystemAI | 10/20/2026 | 10/20/2026 | A flaw has been found in itsourcecode Online Cake Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /deletecustomer.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used. | |
| Deferred | Low (2.1) | 0.25% | — | Itsourcecode Online Cake Ordering SystemAI | 10/19/2026 | 10/19/2026 | A weakness has been identified in itsourcecode Online Cake Ordering System 1.0. This issue affects some unknown processing of the file confirm.php. This manipulation of the argument cancel causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and could be used… |