Vulnerabilities
Summary — last 7 days
New vulnerabilities3,338▲ 363 vs. last week
Critical / high1,493▲ 135 vs. last week
New active exploitation (KEV)7▼ 3 vs. last week
Unscored (no CVSS)592▲ 119 vs. last week
42 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Received | Low (2.1) | — | — | Itsourcecode Leave Management SystemAI | 10/1/2026 | 10/1/2026 | A vulnerability has been found in itsourcecode Leave Management System 1.0. The affected element is an unknown function of the file /module/leavetype/controller.php. Such manipulation of the argument LEAVTID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and… | |
| Deferred | Low (2) | 0.21% | — | Sourcecodester Online Leave Management SystemAI | 9/30/2026 | 9/30/2026 | A vulnerability was identified in SourceCodester Online Leave Management System 1.0. This issue affects some unknown processing of the file /admin/?page=reports. The manipulation of the argument date_start/date_end leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available… | |
| Deferred | Low (2.1) | 0.20% | — | Itsourcecode Leave Management SystemAI | 9/23/2026 | 9/23/2026 | A weakness has been identified in itsourcecode Leave Management System 1.0. Impacted is an unknown function of the file /module/leavetype/index.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and could be used for… | |
| Deferred | Low (2.1) | 0.33% | — | Itsourcecode Leave Management SystemAI | 9/20/2026 | 9/22/2026 | A flaw has been found in itsourcecode Leave Management System 1.0. This affects an unknown part of the file /module/department/index.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. | |
| Deferred | Low (2.1) | 0.33% | — | Itsourcecode Leave Management SystemAI | 9/20/2026 | 9/21/2026 | A security vulnerability has been detected in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module/department/controller.php. The manipulation of the argument DEPTID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may… | |
| Deferred | Low (2.1) | 0.33% | — | Itsourcecode Leave Management SystemAI | 9/16/2026 | 9/22/2026 | A flaw has been found in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module/leave/index.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used. | |
| Deferred | Low (2.1) | 0.33% | — | Itsourcecode Leave Management SystemAI | 9/16/2026 | 9/16/2026 | A vulnerability has been found in itsourcecode Leave Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /module/employee/index.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to… | |
| Deferred | Low (2.1) | 0.33% | — | Itsourcecode Leave Management SystemAI | 9/14/2026 | 9/15/2026 | A vulnerability was identified in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module/company/index.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used. | |
| Deferred | Medium (5.5) | 0.43% | — | Itsourcecode Leave Management SystemAI | 9/14/2026 | 9/14/2026 | A weakness has been identified in itsourcecode Leave Management System 1.0. Affected by this issue is some unknown functionality of the file /login.php. Executing a manipulation of the argument user_email can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the public… | |
| Deferred | Low (2.1) | 0.33% | — | Codeastro Simple Online Leave Management SystemAI | 7/13/2026 | 7/13/2026 | A vulnerability was detected in CodeAstro Simple Online Leave Management System 1.0. This affects an unknown part of the file /SimpleOnlineLeave/admin/accept.php of the component POST Handler. Performing a manipulation of the argument appid results in sql injection. The attack is possible to be carried out remotely.… | |
| Deferred | Low (2.1) | 0.33% | — | Codeastro Simple Online Leave Management SystemAI | 7/13/2026 | 7/13/2026 | A security vulnerability has been detected in CodeAstro Simple Online Leave Management System 1.0. Affected by this issue is some unknown functionality of the file /SimpleOnlineLeave/admin/deletemp.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has… | |
| Deferred | Low (2.1) | 0.33% | — | Coderastro Simple Online Leave Management SystemAI | 7/13/2026 | 7/14/2026 | A weakness has been identified in CodeAstro Simple Online Leave Management System 1.0. Affected by this issue is some unknown functionality of the file /SimpleOnlineLeave/admin/dashboard.php. This manipulation of the argument Name causes sql injection. The attack can be initiated remotely. The exploit has been made… | |
| Deferred | Medium (5.5) | 0.43% | — | Codeastro Simple Online Leave Management SystemAI | 7/9/2026 | 7/9/2026 | A vulnerability was determined in CodeAstro Simple Online Leave Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /SimpleOnlineLeave/index.php. Executing a manipulation of the argument email can lead to sql injection. The attack may be performed from remote. The exploit has… | |
| Deferred | Low (2.1) | 0.20% | — | Codeastro Leave Management SystemAI | 6/8/2026 | 7/23/2026 | A security flaw has been discovered in CodeAstro Leave Management System 1.0. This affects an unknown part of the file /admin/add_leave.php. Performing a manipulation of the argument type_of_leave results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and… | |
| Deferred | Medium (5.3) | 0.19% | — | Codeastro Leave Management SystemAI | 6/8/2026 | 7/23/2026 | A vulnerability was identified in CodeAstro Leave Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/search_staff_for_updation.php. Such manipulation of the argument Name leads to sql injection. The attack may be performed from remote. | |
| Deferred | Low (2.1) | 0.20% | — | Codeastro Leave Management SystemAI | 6/8/2026 | 7/23/2026 | A vulnerability was determined in CodeAstro Leave Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/search_staff_to_assign_pc.php. This manipulation of the argument Name causes sql injection. The attack is possible to be carried out remotely. The exploit has been… | |
| Deferred | Low (2.1) | 0.20% | — | Codeastro Leave Management SystemAI | 6/8/2026 | 7/23/2026 | A vulnerability was found in CodeAstro Leave Management System 1.0. Affected is an unknown function of the file /admin/delete_leave_type.php. The manipulation of the argument leave_type results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used. | |
| Deferred | Low (2.1) | 0.20% | — | Codeastro Leave Management SystemAI | 6/8/2026 | 7/23/2026 | A vulnerability has been found in CodeAstro Leave Management System 1.0. This impacts an unknown function of the file /admin/search_staff_for_deletion.php. The manipulation of the argument Name leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may… | |
| Deferred | Low (2.1) | 0.32% | — | Codeastro Leave Management SystemAI | 5/26/2026 | 7/23/2026 | A weakness has been identified in CodeAstro Leave Management System 1.0. The affected element is an unknown function of the file /admin/add_staff.php. Executing a manipulation of the argument email_id can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and… | |
| Deferred | Medium (5.5) | 0.41% | — | Codeastro Leave Management SystemAI | 5/8/2026 | 6/17/2026 | A weakness has been identified in CodeAstro Leave Management System 1.0. Affected is an unknown function of the file /login.php. This manipulation of the argument txt_username causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks. | |
| Analyzed | Low (1.9) | 0.28% | — | Phpgurukul Staff Leave Management System | 1/8/2026 | 6/17/2026 | A flaw has been found in PHPGurukul Staff Leave Management System 1.0. The affected element is the function ADD_STAFF/UPDATE_STAFF of the file /staffleave/slms/slms/adminviews.py of the component SVG File Handler. Executing a manipulation of the argument profile_pic can lead to cross site scripting. The attack can be… | |
| Modified | Low (2) | 0.29% | — | Itsourcecode Leave Management System | 10/8/2025 | 6/17/2026 | A security flaw has been discovered in itsourcecode Leave Management System 1.0. This impacts the function redirect of the file /module/employee/controller.php?action=reset of the component Query Parameter Handler. Performing a manipulation of the argument ID results in cross site scripting. It is possible to initiate… | |
| Analyzed | Medium (5.5) | 0.48% | — | Itsourcecode Leave Management System | 10/8/2025 | 6/17/2026 | A vulnerability was identified in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /reset.php. Such manipulation of the argument employid leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used. | |
| Analyzed | Medium (4.3) | 0.21% | — | Phpgurukul Employee Leave Management System | 9/2/2025 | 6/17/2026 | PHPGurukul Employee Leave Management System 2.1 contains an Insecure Direct Object Reference (IDOR) vulnerability in leave-details.php. An authenticated user can change the leaveid parameter in the URL to access leave application details of other users. | |
| Modified | High (8.8) | 0.65% | — | Projectworlds Leave Management System | 12/21/2023 | 6/17/2026 | Leave Management System Project v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'setsickleave' parameter of the admin/setleaves.php resource does not validate the characters received and they are sent unfiltered to the database. |