Vulnerabilities > Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

DATE CVE VULNERABILITY TITLE RISK
2025-05-09 CVE-2025-4457 A vulnerability classified as critical was found in Project Worlds Car Rental Project 1.0.
network
low complexity
CWE-74
7.3
7.3
2025-05-09 CVE-2025-4458 Injection vulnerability in Code-Projects Patient Record Management System 1.0
A vulnerability was found in code-projects Patient Record Management System 1.0.
network
low complexity
code-projects CWE-74
8.8
8.8
2025-05-09 CVE-2025-4453 Injection vulnerability in Dlink Dir-619L Firmware 2.04B04
A vulnerability was found in D-Link DIR-619L 2.04B04.
network
low complexity
dlink CWE-74
critical
 9.8
9.8
2025-05-09 CVE-2025-4454 Injection vulnerability in Dlink Dir-619L Firmware 2.04B04
A vulnerability was found in D-Link DIR-619L 2.04B04.
network
low complexity
dlink CWE-74
critical
 9.8
9.8
2025-05-09 CVE-2025-4443 Injection vulnerability in Dlink Dir-605L Firmware 2.13B01
A vulnerability was found in D-Link DIR-605L 2.13B01.
network
low complexity
dlink CWE-74
critical
 9.8
9.8
2025-05-09 CVE-2025-4445 Injection vulnerability in Dlink Dir-605L Firmware 2.13B01
A vulnerability classified as critical has been found in D-Link DIR-605L 2.13B01.
network
low complexity
dlink CWE-74
critical
 9.8
9.8
2025-05-07 CVE-2025-20216 A vulnerability in the web interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an unauthenticated, remote attacker to inject HTML into the browser of an authenticated user. This vulnerability is due to improper sanitization of input to the web interface.
network
low complexity
CWE-74
4.7
4.7
2025-05-06 CVE-2025-4360 Injection vulnerability in Adrianmercurio GYM Management System 1.0
A vulnerability, which was classified as critical, has been found in itsourcecode Gym Management System 1.0.
network
low complexity
adrianmercurio CWE-74
critical
 9.8
9.8
2025-05-06 CVE-2025-4361 Injection vulnerability in PHPgurukul Company Visitor Management System 2.0
A vulnerability classified as critical has been found in PHPGurukul Company Visitor Management System 2.0.
network
low complexity
phpgurukul CWE-74
critical
 9.8
9.8
2025-05-06 CVE-2025-4362 Injection vulnerability in Adrianmercurio GYM Management System 1.0
A vulnerability classified as critical was found in itsourcecode Gym Management System 1.0.
network
low complexity
adrianmercurio CWE-74
critical
 9.8
9.8