2026

OpenKM 6.3.12 contains an unrestricted SQL execution vulnerability that allows authenticated administrative users to exe

OpenKM 6.3.12 contains a local file inclusion vulnerability in the administrative scripting interface at /admin/Scriptin

libyang before 5.4.3 contains a heap use-after-free write vulnerability in lyd_parser_set_data_flags that incorrectly up

gix-submodule before 0.29.0 (gitoxide before 0.5.21, gix before 0.84.0) incorrectly validates the update field in .gitmo

FreeRDP before 3.26.0 contains a heap-buffer-overflow vulnerability in gdi_CacheToSurface that allows remote attackers t

A vulnerability was found in Shenzhen Sixun Software Sixun Shanghui Group Business Management System 10. Affected by thi

A vulnerability has been found in Totolink N300RH 6.1c.1353_B20190305. Affected is the function setPasswordCfg of the fi

A weakness has been identified in CodeAstro Leave Management System 1.0. The affected element is an unknown function of

A security flaw has been discovered in Squirrel up to 3.2. Impacted is the function ReadObject of the file squirrel/sqob

A vulnerability was identified in vllm-project vllm 0.19.0. This issue affects some unknown processing of the component

IEC 60870-5-104 used in bidirectional mode in RTU500 is vulnerable for a NULL pointer dereferencing, if a specially craf

Zohocorp Zoho Mail wordpress plugin is vulnerable to Cross-Site request forgery (CSRF). This issue affects Zoho Mail wo

A flaw was found in KubeVirt's virt-handler component. This vulnerability allows an authenticated OpenShift user with ed

A heap-based buffer overflow vulnerability exists in XML parser functionality in the HiDraw. An authenticated malicious

When Compliance is enabled on Check Point Multi-Domain Management, an authenticated administrator with read-write access

A Check Point HTTP-based service can incorrectly handle malformed HTTP requests. The issue is related to HTTP request pa

When the DLP is active, the UserCheck Web Portal contains an input-handling issue in the UserChoice flow. Under specific

When the Identity Awareness blade is enabled with Browser-Based Authentication, an unauthenticated user may be able to r

The Security Gateway does not correctly validate a length value in certain IKE packets when NAT-T is used (4500/UDP). As

The VPN service may mishandle an unexpected IKE fragment value received on the IKE port 500/UDP during the early stage o

An Allocation of Resources Without Limits or Throttling vulnerability in the OPC-UA Server used in PPT30 Operating Syst

This vulnerability stems from a business logic flaw.Attackers can exploit legitimate application functions in unintended

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in SpabRice Nyla allows Code

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Mas

A heap-based buffer overflow vulnerability exists in the ID3v2 parsing functionality of MediaInfoLib (version(s): 26.01)

A heap-based buffer overflow vulnerability exists in the LXF parsing functionality of MediaInfoLib (version(s): 26.01).

Missing Authorization vulnerability in Webful Creations RepairBuddy allows Exploiting Incorrectly Configured Access Cont

Missing Authorization vulnerability in VideoWhisper.Com Paid Videochat Turnkey Site allows Exploiting Incorrectly Config

The affected products perform improper length checking when parsing incoming HTTP requests, resulting in a size-limited

The affected products insufficiently verify authorization when deleting user accounts. An authenticated, low-privileged

The affected product extracts installation files to a temporary directory with incorrect default permissions during admi

The affected product creates a directory with insecure default permissions during administrative installation. This allo

Missing Authorization vulnerability in TeconceTheme Mayosis Core allows Exploiting Incorrectly Configured Access Control

A flaw has been found in Totolink CA750-PoE 6.2c.510. This affects the function setWiFiWpsConfig of the file /cgi-bin/cs

A vulnerability was detected in Totolink CA750-PoE 6.2c.510. The impacted element is the function recvUpgradeNewFw of th

A security vulnerability has been detected in Totolink CA750-PoE 6.2c.510. The affected element is the function setUploa

Versions of the package pacote from 11.2.7 and before 21.5.1 are vulnerable to Denial of Service (DoS) via the addGitSha

Versions of the package @koa/router from 14.0.0 and before 15.0.0 are vulnerable to Access Control Bypass due to the mid

Missing password field masking vulnerability in Hitachi Ops Center Analyzer (Hitachi Ops Center Analyzer detail view, Hi

A weakness has been identified in Totolink CA750-PoE 6.2c.510. Impacted is the function setUpgradeUboot of the file /cgi

A weakness has been identified in GNU LibreDWG up to 0.14. The impacted element is the function read_2004_compressed_sec

A security flaw has been discovered in GNU LibreDWG up to 0.14. The affected element is the function match_BLOCK_HEADER

A vulnerability was identified in itsourcecode Electronic Judging System 1.0. Impacted is an unknown function of the fil

A vulnerability was determined in itsourcecode Electronic Judging System 1.0. This issue affects some unknown processing

A vulnerability was found in itsourcecode Electronic Judging System 1.0. This vulnerability affects unknown code of the

A vulnerability has been found in itsourcecode Electronic Judging System 1.0. This affects an unknown part of the file /

A flaw has been found in xianrendzw EasyReport up to 2.0.17.0522_Beta. Affected by this issue is the function execute of

A vulnerability was detected in Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform 3000WEBV

Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar heade