CWE-287

A flaw has been found in 666ghj MiroFish up to 0.1.2. This affects the function create_app of the file backend/app/__ini

A vulnerability has been found in innocommerce InnoShop up to 0.7.8. The affected element is the function InstallService

A security flaw has been discovered in YunaiV yudao-cloud up to 2026.01. This impacts the function getAccessToken of the

A security flaw has been discovered in YunaiV yudao-cloud up to 3.8.0. This affects the function doFilterInternal of the

A flaw has been found in PrefectHQ prefect up to 3.6.13. Affected is an unknown function of the file /api/events/in of t

A vulnerability was identified in Industrial Application Software IAS Canias ERP 8.03. This issue affects the function i

A vulnerability was detected in OpenClaw up to 2026.1.24. The impacted element is the function handleBlueBubblesWebhookR

A vulnerability was detected in inkeep agents 0.58.14. This vulnerability affects the function createDevContext of the f

A vulnerability was identified in Open5GS up to 2.7.6. This impacts an unknown function of the file src/amf/ngap-handler

A weakness has been identified in OUSL-GROUP-BrinaryBrains School Student Management System up to 1e70e5ad1125b86dca4ee0

A security vulnerability has been detected in code-projects Smart Parking System 1.0. Affected is an unknown function of

A weakness has been identified in Enderfga claw-orchestrator up to 3.5.5. This affects the function EmbeddedServer of th

A vulnerability was identified in code-projects Hotel and Tourism Reservation System 1.0. This issue affects the functio

A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.11.3. This affects the function resolveAut

A vulnerability was detected in sayan365 student-management-system up to 7f3c9ce7d410332335c2affac93a385485051800. This

A vulnerability was identified in ealpha072 Student-Management-System up to 01451bd7a2f58cdda07bd0b86e3967582e3ecd08. Af

A vulnerability was determined in DTStack Taier up to 1.4.0. The affected element is the function preHandle of the file

A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the function UserAPIKeyAuth of the file lite

A vulnerability was determined in BerriAI litellm up to 1.82.2. This affects the function json.dumps of the file litellm

IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to bypass authentication and gain unauthorize

A vulnerability was found in Feehi CMS up to 2.1.1. This vulnerability affects unknown code of the file /api/articles of

A vulnerability was found in jairiidriss restaurant-website-php-mysql up to 521428b5b612449df0cf4a5d15ee40cba67f3d35. Th

A weakness has been identified in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0b5135d8b6e85cce2ec3aece99. This affects

A vulnerability has been found in will-moss Isaiah up to 1.36.9. This affects an unknown function of the file app/main.g

A weakness has been identified in waooAI waoowaoo up to 0.4.1. Affected by this vulnerability is the function getInterna

A vulnerability has been found in Gerapy up to 0.9.13. The impacted element is an unknown function of the file gerapy/se

A vulnerability was found in newpanjing simpleui 2026.01.13. This affects the function self.get_action of the file simpl

A security vulnerability has been detected in H3C NX15 V100R017. Impacted is an unknown function of the file /api/wizard

A vulnerability was detected in letta-ai LettaBot 0.2.0. Impacted is an unknown function of the file src/api/server.ts o

A vulnerability was detected in code-projects Task Management System 1.0. Affected is an unknown function of the file /i

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to improper authenticatio

A flaw has been found in itsourcecode Payroll System 1.0. The impacted element is the function create/read/update/delete

An authentication bypass vulnerability in Netatalk 2.2.2 through 4.4.2 allows a remote privileged user to authenticate a

MinIO is a high-performance object storage system. Prior to version RELEASE.2026-03-26T21-24-40Z, a flaw in extractMetad

Laravel Passport provides OAuth2 server support to Laravel. From 13.0.0 to before 13.7.1, there is an Authentication Byp

An Editor can overwrite a dashboard not owned by them to acquire admin on that specific dashboard. The user must have wr

pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.0, the pusb_pad_compare(

Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core).

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance). Suppor

Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operations).

BigBlueButton is an open-source virtual classroom. Prior to 3.0.23, BigBlueButton exposed /bigbluebutton/api/handleJoinE

Improper authentication in Windows Storage allows an authorized attacker to elevate privileges locally.

An insecure authentication mechanism in the safe_exec.sh startup script of Blurams Flare Camera version 24.1114.151.929

Admidio is an open-source user management solution. Prior to version 5.0.9, the OIDC token introspection endpoint (/modu

Chatwoot is a customer engagement suite. From 2.14.0 to before 4.13.0, a Pre-Account Takeover (Pre-ATO) vulnerability ex

SubjectDnX509PrincipalExtractor does not correctly handle certain malformed X.509 certificate CN values, which can lead

DroneAware is a drone detection platform. The centralized DroneAware server backing droneaware.io was vulnerable to an a

n8n is an open source workflow automation platform. Prior to 2.27.4 and from 2.28.0 prior to 2.28.1, n8n instances confi

OpenFGA is an authorization/permission engine built for developers. Prior to 1.18.0, OpenFGA's OIDC authenticator skippe

RabbitMQ is a messaging and streaming broker. Prior to 3.13.15, 4.0.20, 4.1.11, and 4.2.6, AMQP 0-9-1, AMQP 1.0, and Str