2026

A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03

A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b

A vulnerability was detected in itsourcecode Online Admission System 1.0. This affects an unknown function of the file /

A security vulnerability has been detected in itsourcecode Online Admission System 1.0. The impacted element is an unkno

A weakness has been identified in itsourcecode Online Admission System 1.0. The affected element is an unknown function

A security flaw has been discovered in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown func

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of

In apu, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege wi

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of

In apu, there is a possible memory corruption due to improper input validation. This could lead to local escalation of p

In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio

In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio

In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escala

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of

GitAhead 2.5.0 through 2.7.1 contains an insecure update mechanism that installs downloaded updates without integrity or

Legcord 1.1.0 through 1.3.0 contains a configuration injection vulnerability that allows script in the Discord page to w

Legcord 1.1.0 through 1.3.0 contains a path traversal vulnerability in theme IPC handlers that allows script in the Disc

maclof kubernetes-client 0.17.0 before 0.32.0 disables TLS certificate verification in parseKubeconfig() and parseKubeco

A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing o

A vulnerability was detected in itsourcecode Online Admission System 1.0. Affected by this issue is some unknown functio

A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b

A security flaw has been discovered in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b

The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by default because the

The gist RubyGem before 6.1.0 contains an improper certificate validation vulnerability that allows on-path attackers to

Twine 2 desktop through 2.12.0 contains a cross-site scripting vulnerability in importStories() that executes markup fro

A vulnerability was determined in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b

A vulnerability was found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492

Mammoth.js 1.3.0 before 1.12.3 contains a regular expression denial of service vulnerability in the style map tokeniser

gopay before 1.5.119 disables TLS certificate verification in defaultClient() in pkg/xhttp/client.go, allowing man-in-th

go-micro before 6.0.0 contains an improper certificate validation vulnerability that allows network attackers to imperso

WWBN AVideo through 29.2.0 contains a stored cross-site scripting vulnerability that allows users with upload permission

WWBN AVideo 12.4 through 29.2.0 contains a stored cross-site scripting vulnerability that allows authenticated uploaders

ZITADEL 4.x before 4.17.1 does not check an organization's inactive state during Login V2 authentication, verifying only

ZITADEL 3.x before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 and Login V2 UI

ZITADEL before 4.17.1 contains an authentication bypass vulnerability in Login V2 that allows unauthenticated attackers

ZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains a missing authentication flaw in the hosted Login V1 UI, whose

ZITADEL 4.x before 4.17.3 and 3.x through 3.4.15 protects IdP intent tokens with unauthenticated, malleable encryption,

A vulnerability was detected in RainyGao DocSys up to 2.02.85. The impacted element is the function BaseController.creat

A security flaw has been discovered in mooSocial up to 3.2.4. This issue affects some unknown processing of the file /st

A vulnerability was identified in SciPhi-AI R2R up to 3.6.6. This vulnerability affects unknown code of the file py/shar

A vulnerability was determined in SciPhi-AI R2R up to 3.6.6. This affects an unknown part of the component JWT Secret Ha

Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes Cost Calculator Builder cost-calculato

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VeronaLabs WP Stat

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / Stell

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cozmoslabs Transla

The CoCart WordPress plugin before 4.9.7 does not scope its REST API authentication filter to its own endpoints, which

A vulnerability was detected in Ahsay AhsayCBS up to 9.15.2.69/10.3.4.44. This affects the function checkSysPwd of the f

Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, bef