CWE-283

Gitea does not properly validate repository ownership when linking attachments to releases. An attachment uploaded to a

Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to version 1.

TSPortal is the WikiTide Foundation’s in-house platform used by the Trust and Safety team to manage reports, investigati

A missing S3 ownership verification in the Bedrock AgentCore Starter Toolkit before version v0.1.13 may allow a remote a

On the Trusted Firmware-M (TF-M) 2 through 2.3.0 platform before 00d1b3e, mailbox initialization on PSOC64 and RP2350 ac

Chatwoot is a customer engagement suite. From 2.14.0 to before 4.13.0, a Pre-Account Takeover (Pre-ATO) vulnerability ex

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the P

OpenClaw is a personal AI assistant. In versions 2026.2.13 and below of the OpenClaw CLI, the process cleanup uses syste

The Sentry kernel is a high security level micro-kernel implementation made for high security embedded systems. A given

A security flaw was identified in the Ansible Lightspeed API conversation endpoints that handle AI chat interactions. Th

Unverified ownership vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-domain-joiner allow