2026

In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o

In ccci, there is a possible out of bounds write and read due to a missing bounds check. This could lead to local inform

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, i

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service

A vulnerability was determined in Jeebase 0.0.1. This vulnerability affects the function updateUser of the file /user/up

A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. The impacted element is the functi

A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. The affected element is an unknown func

A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an unknown function of the

Chaterm before 0.12.1 contains a login cross-site request forgery vulnerability that allows remote attackers to inject l

A vulnerability has been found in Gerapy up to 0.9.13. This vulnerability affects the function project_create of the fil

A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03

A vulnerability was identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b

A vulnerability has been found in devopspolis secrets-replicator up to 0.4.0. Impacted is the function process_single_se

A vulnerability was detected in crossplane crossplane-runtime up to 2.2.2/2.3.2. This vulnerability affects the function

A flaw has been found in invariant-systems-ai aiir up to 1.7.0. The affected element is an unknown function of the compo

YesWiki before 4.6.7 contains a cross-site scripting vulnerability in the Bazar valeur action that allows page editors t

Insertion of Sensitive Information Into Sent Data vulnerability in farvisun Mindio Magic MCP mindio-magic-mcp allows Ret

SiYuan before 3.8.5 contains an information disclosure vulnerability that allows publish-mode readers to learn backlink

A security vulnerability has been detected in RainyGao DocSys up to 2.02.85. The affected element is the function DocCon

A vulnerability was found in Comsenz Discuz! X5.0-20260801/X5.0-20260820/X5.0-20260910. Affected by this issue is the fu

A vulnerability has been found in Weaviate Verba up to 2.1.3. Affected by this vulnerability is the function get_environ

A flaw has been found in Drogon up to 1.9.13-1/10.0-beta.3 on Windows. Affected is the function StaticFileRouter::route

A security flaw has been discovered in topoteretes cognee up to 1.5.4. The affected element is the function get_user_id_

A vulnerability was found in Laradock up to 20.4. Impacted is an unknown function of the file workspace/Dockerfile of th

The User Private Files WordPress plugin before 2.2.0 does not properly protect its stored private files on multisite in

The Five Star Business Profile and Schema WordPress plugin before 2.4.0 does not properly restrict the callbacks used to

The Horizontal scrolling announcements WordPress plugin through 2.6 does not sanitise and escape one of its announcement

The Razorpay for WooCommerce WordPress plugin before 4.8.8 does not perform ownership or authorization checks on a REST

A security flaw has been discovered in Omega Solution CoinEx Crypto 2025. Affected is an unknown function of the file /t

A vulnerability was identified in Omega Solution CoinEx Crypto 2025. This impacts an unknown function of the file /custo

ezBookkeeping 1.2.0 before 2.0.1 contains a privilege escalation vulnerability that allows attackers holding an API toke

A vulnerability was determined in Omega Solution CoinEx Crypto 2025. This affects an unknown function of the file /custo

LaraDashboard before 1.4.8 contains an incorrect authorization vulnerability that allows authenticated users with only s

LaraDashboard before 1.4.8 contains an open redirect vulnerability that allows remote attackers to redirect users by sup

LaraDashboard 1.4.2 before 1.4.8 applies advanced email validation to unauthenticated forgot-password and reset-password

W (vincent-peugnet/wcms) through 3.18.0 contains a stored cross-site scripting vulnerability that allows unauthenticated

OpenAM before 16.1.3 contains a server-side request forgery vulnerability that allows attackers able to register or modi

OpenAM before 16.1.3 contains an improper authorization vulnerability that allows delegated administrators to destroy se

OpenAM before 16.1.3 contains an authorization bypass vulnerability in the sessions REST endpoint query operation that a

OpenAM before 16.1.3 applies its OAuth2 Provider PKCE enforcement only to authorization requests whose response_type is

OpenAM before 16.1.3 contains an open redirect vulnerability that allows unauthenticated attackers to redirect users by

OpenAM before 16.1.3 contains an email content injection vulnerability that allows unauthenticated attackers to control

OpenAM before 16.1.3 contains a latent cross-site scripting defect that places the SAML message, relay state and target

OpenAM before 16.1.3 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to in

Nezha Dashboard from 1.8.0 before 2.3.13 contains an improper locking vulnerability where a non-deferred mutex unlock le

Nezha from 1.8.0 before 2.3.13 contains a lock-order inversion in UpdateGroup and DeleteGroup that allows authenticated

A vulnerability has been found in Linux Mint Xreader up to 4.6.9. Impacted is the function g_file_get_child of the file

The Twenty20 Image Before-After plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'offset' Shortcode

A flaw has been found in Linux Mint Xreader up to 4.6.5. This issue affects the function setup_document_content_list/g_s

The Burst Statistics – Simple WordPress Analytics (Google Analytics Alternative) plugin for WordPress is vulnerable to I