2026

A vulnerability has been found in SourceCodester Pizzafy Ecommerce System 1.0. Affected by this issue is the function sa

A vulnerability was found in SourceCodester Pizzafy Ecommerce System 1.0. This affects the function save_order of the fi

A vulnerability was determined in SourceCodester Pizzafy Ecommerce System 1.0. This vulnerability affects the function s

A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects an unknown part of the fil

A weakness has been identified in Devs Palace ERP Online up to 4.0.0. The affected element is an unknown function of the

A security vulnerability has been detected in Devs Palace ERP Online up to 4.0.0. The impacted element is an unknown fun

A vulnerability was detected in Devs Palace ERP Online up to 4.0.0. This affects an unknown function of the file /invent

A flaw has been found in Devs Palace ERP Online up to 4.0.0. This impacts an unknown function of the file /inventory/ite

A vulnerability was identified in Devs Palace ERP Online up to 4.0.0. Affected by this vulnerability is an unknown funct

A security flaw has been discovered in Devs Palace ERP Online up to 4.0.0. Affected by this issue is some unknown functi

A weakness has been identified in Devs Palace ERP Online up to 4.0.0. This affects an unknown part of the file /inventor

A security vulnerability has been detected in Devs Palace ERP Online up to 4.0.0. This vulnerability affects unknown cod

A vulnerability was identified in Devs Palace ERP Online up to 4.0.0. This impacts an unknown function of the file /acco

Zen is a firefox-based browser. Prior to 1.19.12b, RSS feed URLs entered by the user are validated to http: or https: in

Geyser is a bridge between Minecraft: Bedrock Edition and Minecraft: Java Edition. Prior to 2.9.3, a server-side request

Insufficient logging in the entry export feature in Devolutions Server allows an authenticated user with export permissi

A vulnerability was identified in SourceCodester SUP Online Shopping 1.0. The impacted element is an unknown function of

A vulnerability was found in SourceCodester/oretnom23 Hospitals Patient Records Management System 1.0. The impacted elem

Easyelife App lock (aka Fingerprint,Applock or locker.app.safe.applocker) 1.9.2 for Android allows a local attacker with

SailingLab AppLock (aka com.alpha.applock) 4.3.8 for Android allows a local attacker with physical access to bypass the

AppLockZ App Lock and Fingerprint Lock (applock.passwordfingerprint.applockz) 4.2.11 for Android allows a local attacker

A vulnerability was determined in QianFox FoxCMS up to 1.2.6. The impacted element is an unknown function of the file /T

Incorrect behavior order in the Infotainment / Digital Round display of the Indian Motorcycle Scout Bobber + Tech 2025 m

Incorrect behavior order in the Infotainment / Digital Round display of the Indian Motorcycle Scout Bobber + Tech 2025 m

A vulnerability has been found in sambitraj STUDENT-MANAGEMENT-SYSTEM 1.0. Affected is an unknown function of the compon

A vulnerability has been found in 1Panel-dev CordysCRM up to 1.6.2. This affects an unknown function of the file backend

A weakness has been identified in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Impacted is an unkn

A security vulnerability has been detected in SourceCodester Ship Ferry Ticket Reservation System 1.0. Impacted is an un

A weakness has been identified in FluentCMS 0.0.5. The impacted element is an unknown function of the file /admin/blocks

A vulnerability was detected in SourceCodester Hospitals Patient Records Management System 1.0. This issue affects some

A vulnerability was identified in CodeAstro Human Resource Management System 1.0. Impacted is an unknown function of the

Logic bypass vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect availabi

A vulnerability has been found in Intelliants Subrion CMS up to 4.0.3. Affected by this issue is some unknown functional

A weakness has been identified in Chess Play and Learn App up to 4.9.42 on Android. This issue affects some unknown proc

A vulnerability in allegroai/clearml versions up to and including 1.16.5 allows for relative path traversal when extract

A weakness has been identified in code-projects Assessment Management 1.0. Affected by this issue is some unknown functi

A vulnerability was found in MyEMS up to 6.4.0. The affected element is the function on_post of the file myems-api/core/

The Nuvoton NuMaker HSUSBD USB device-controller driver (drivers/usb/udc/udc_numaker.c) armed the control Data IN stage

A vulnerability was identified in SourceCodester Online Book Store System 1.0. This issue affects some unknown processin

A weakness has been identified in Pluck CMS up to 4.7.21. This vulnerability affects the function htmlspecialchars_decod

A security issue was discovered in the Kubernetes Java client library where a compromised pod may be able to create new

In the Synopsys DesignWare I2C driver (drivers/i2c/i2c_dw.c) operating in target/slave mode, the rx_full interrupt handl

This issue was addressed with additional restrictions on the lock screen. This issue is fixed in macOS Sequoia 15.7.8, m

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a local attacker t

Zephyr's Bluetooth Mesh subnet key management leaks one PSA Crypto key slot on every subnet-key teardown. In subsys/blue

Sharp and Toshiba Tec MFPs (multifunction printers) caches data internally when printing, and leave them uncleared. They

The user impersonation flow in WSO2 Identity Server fails to properly manage refresh tokens associated with impersonated

A vulnerability was determined in DataGear up to 5.0.0. The impacted element is the function HtmlTplDashboardWidgetHtmlR

The root password hash of the device can be obtained through unencrypted information in the firmware.

A security vulnerability has been detected in PHPGurukul Company Visitor Management System 1.0. This issue affects some