2026

A vulnerability was found in LakshayD02 Hostel-Management-System-PHP up to f87e67c283bab6f718faf2fec6ae39a13bd7036b. Thi

A vulnerability has been found in milvus-io milvus up to 2.6.13. This vulnerability affects unknown code of the file int

A flaw has been found in LMCache up to 0.5.4. This affects the function hex_hash_to_int16 of the file lmcache/integratio

Strawberry GraphQL is a library for creating GraphQL APIs. In versions 0.172.0 through0.315.6, the MaxAliasesLimiter ext

Strawberry GraphQL is a library for creating GraphQL APIs. In versions 0.71.0 through 0.315.6, the QueryDepthLimiter ext

Strawberry GraphQL is a library for creating GraphQL APIs. In versions 0.288.4 through 0.315.3, Strawberry's bundled Gra

Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Versions prior to 2.17.1 are vulnerable t

A lack of runtime integrity in GNCC GP5 v7.1.76 allows physically-proximate attackers to bypass file system read-only pr

The factory reset functionality in GNCC GP5 v7.1.76 fails to clear sensitive cryptographic material in the JFFS2 configu

GNCC GP5 v7.1.76 was discovered to store pre-signed Backblaze B2 upload URLs (PUT requests) in plaintext to the serial c

An issue in the U-Boot component of GNCC GP5 v7.1.76 allows physically-proximate attackers to bypass authentication and

GNCC GP5 v7.1.76 was discovered to store sensitive wireless network information in plaintext during routine operations t

An undocumented debug CGI endpoint in T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03 allows unauthenticated at

T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, and T7281 v1.0.03 were discovered to contain a hardcoded passw

Incorrect access control in the web management interface of T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, an

SolarWinds Serv-U is susceptible to specially crafted POST requests that crash the Serv-U service without authentication

A vulnerability in the MISP dashboard widgets allowed an authenticated user to manipulate the fields option and influenc

A security issue was fixed in the correlations over-correlation endpoint where the order query parameter was accepted fr

A logic error in the MISP CRUD component delete handler allowed validation failures to be bypassed when requests used th

A vulnerability was detected in zilliztech GPTCache up to 0.1.44. Affected by this issue is the function BufferedReader.

A security vulnerability has been detected in itsourcecode Fees Management System 1.0. Affected by this vulnerability is

OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an un-authenticated atta

This vulnerability exists in GX Earth 2022 ONT models due to the presence of hardcoded RSA private key within the device

FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.0, the password reset conf

Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to version 2.17.1, a path traversal

An open redirect vulnerability existed in MISP UsersController::routeafterlogin() because the value stored in the pre_lo

A URL validation flaw in the MISP dashboard button widget allowed a crafted relative-looking URL to be accepted as a loc

An authorization flaw existed in the MISP Event Template Importer overwrite workflow. When importing an event template i

A visibility control issue in the event template creation workflow allowed non-site-admin users to access private galaxi

A weakness has been identified in itsourcecode Fees Management System up to 1.0. Affected is an unknown function of the

A security flaw has been discovered in itsourcecode Fees Management System 1.0. This impacts an unknown function of the

A vulnerability was identified in itsourcecode Fees Management System 1.0. This affects an unknown function of the file

A vulnerability was determined in mjperpinosa stumasy. The impacted element is an unknown function of the file applicati

A vulnerability was found in mjperpinosa stumasy. The affected element is an unknown function of the file application/PH

HCL BigFix Cloud Lifecycle Management is affected by lack of input validation.  This low-level flaw allows unauthorized

HCL Hive Telco Observability is affected by  a Required directives missing from the CSP issue is detected in keycloak co

Dell BSAFE SSL-J contains an allocation of resources without limits or throttling vulnerability. An unauthenticated remo

WordPress Plugin Google Review Slider 6.1 contains a time-based blind SQL injection vulnerability that allows unauthenti

WordPress Popup Builder 3.49 contains a persistent cross-site scripting vulnerability that allows authenticated attacker

WordPress Soliloquy Lite 2.5.6 contains a persistent cross-site scripting vulnerability that allows authenticated attack

WordPress Theme Zoner Real Estate 4.1.1 contains a persistent cross-site scripting vulnerability that allows authenticat

Mobatek MobaXterm 12.1 contains a structured exception handling (SEH) based buffer overflow vulnerability in the usernam

Joomla com_jsjobs 1.2.6 contains an arbitrary file deletion vulnerability that allows authenticated attackers to delete

GigToDo 1.3 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malic

WordPress Hybrid Composer 1.4.6 contains an unauthenticated settings change vulnerability that allows unauthenticated at

Live Chat Unlimited 2.8.3 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to

LabF nfsAxe 3.7 Ping Client contains a buffer overflow vulnerability that allows local attackers to execute arbitrary co

AllPlayer 7.4 contains a local buffer overflow vulnerability in URL handling that allows attackers to overwrite structur

Contact Form by WD 1.13.1 contains a cross-site request forgery vulnerability combined with local file inclusion that al

NetShareWatcher 1.5.8.0 contains a structured exception handler buffer overflow vulnerability that allows local attacker