Fallos del tipo CWE-94
3787 resultadosCVE-2025-65715HIGHAn issue in the code-runner.executorMap setting of Visual Studio Code Extensions Code Runner v0.12.2 allows attackers to execute arbitrary cEPSS 0.3%CVE-2025-10614MEDIUMitsourcecode E-Logbook with Health Monitoring System for COVID-19 print_reports_prev.php cross site scriptingEPSS 0.3%CVE-2025-9440MEDIUM1000projects Online Project Report Submission and Evaluation System add_title.php cross site scriptingEPSS 0.3%CVE-2025-9438MEDIUM1000projects Online Project Report Submission and Evaluation System add_student.php cross site scriptingEPSS 0.3%CVE-2025-9017MEDIUMPHPGurukul Zoo Management System add-foreigner-ticket.php cross site scriptingEPSS 0.3%CVE-2026-14749MEDIUMmjperpinosa stumasy calculate.php eval code injectionEPSS 0.3%CVE-2025-9439MEDIUM1000projects Online Project Report Submission and Evaluation System edit_faculty.php cross site scriptingEPSS 0.3%CVE-2025-11360MEDIUMjakowenko double-take API app.js app.use cross site scriptingEPSS 0.3%CVE-2025-11125MEDIUMlangleyfcu Online Banking System Error Message connection_error.php cross site scriptingEPSS 0.3%CVE-2026-44346HIGHBentoML: Dockerfile command injection via envs[*].name in bentofile.yamlEPSS 0.3%CVE-2026-54133CRITICALjmespath.php has CompilerRuntime code injection via unescaped function namesEPSS 0.3%CVE-2025-3692MEDIUMSourceCodester Online Eyewear Shop Master.php cross site scriptingEPSS 0.3%CVE-2025-55192HIGHHomeAssistant-Tapo-Control Code Injection Vulnerability in issues.yml WorkflowEPSS 0.3%CVE-2024-37885LOWCode injection in Nextcloud Desktop Client for macOSEPSS 0.3%CVE-2026-7401MEDIUMSourceCodester CET Automated Grading System with AI Predictive Analytics Registration index.php register cross site scriptingEPSS 0.3%CVE-2025-9656MEDIUMPHPGurukul Directory Management System add-directory.php cross site scriptingEPSS 0.3%CVE-2025-6092MEDIUMcomfyanonymous comfyui Incomplete Fix CVE-2024-10099 image cross site scriptingEPSS 0.3%CVE-2025-41362MEDIUMCode injection vulnerability in IDF and ZLFEPSS 0.3%CVE-2025-68015CRITICALWordPress Event Tickets with Ticket Scanner plugin <= 2.8.5 - Remote Code Execution (RCE) vulnerabilityEPSS 0.3%CVE-2025-0483MEDIUMFanli2012 native-php-cms jump.php cross site scriptingEPSS 0.3%