2026

A vulnerability was detected in Portabilis i-Educar 2.11. This impacts an unknown function of the file /intranet/educar_

A vulnerability was identified in atjiu pybbs 6.0.0. This affects the function create of the file src/main/java/co/yiiu/

A security flaw has been discovered in atjiu pybbs 6.0.0. This impacts the function create of the file src/main/java/co/

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, the `ip_a

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, users with

A vulnerability was identified in projectworlds Lawyer Management System 1.0. This issue affects some unknown processing

A vulnerability has been found in projectworlds Lawyer Management System 1.0. This impacts an unknown function of the fi

A security vulnerability has been detected in code-projects Accounting System 1.0. Impacted is an unknown function of th

HCL Aftermarket DPC is affected by Improper Input Validation which allows an attacker to inject executable code and can

Wazuh authd contains a heap-buffer overflow vulnerability that allows attackers to cause memory corruption and malformed

Wazuh authd contains a heap-buffer overflow vulnerability that allows attackers to cause memory corruption and malformed

A vulnerability was identified in code-projects Social Networking Site 1.0. The impacted element is an unknown function

A vulnerability was detected in SourceCodester Online Quiz System up to 1.0. Affected by this vulnerability is an unknow

A vulnerability was detected in QDOCS Smart School Management System up to 7.2. The impacted element is an unknown funct

A vulnerability was found in wandb OpenUI up to 1.0/3.5-turb. Affected is the function generic_exception_handler of the

A vulnerability was determined in wandb OpenUI up to 1.0. Affected by this vulnerability is an unknown functionality of

BlueKitchen BTstack versions prior to 1.8.1 contain an out-of-bounds read vulnerability in the AVRCP Controller LIST_PLA

BlueKitchen BTstack versions prior to 1.8.1 contain an out-of-bounds read vulnerability in the AVRCP Controller GET_PLAY

A vulnerability was found in gougucms 4.08.18. This impacts an unknown function of the file \gougucms-master\app\admin\v

A security flaw has been discovered in z-9527 admin 1.0/2.0. Affected is an unknown function of the file /server/routes/

A weakness has been identified in bufanyun HotGo 1.0/2.0. Affected by this vulnerability is an unknown functionality of

A security vulnerability has been detected in welovemedia FFmate up to 2.0.15. Affected by this issue is some unknown fu

A vulnerability was determined in SourceCodester Simple Customer Relationship Management System 1.0. This issue affects

A vulnerability was identified in Xiaopi Panel 1.0.0. This vulnerability affects unknown code of the file /demo.php of t

A vulnerability was identified in krayin laravel-crm up to 2.2. Impacted is the function composeMail of the file package

A security flaw has been discovered in Casdoor 2.356.0. This affects the function dangerouslySetInnerHTML. Performing a

A vulnerability has been found in Akaunting up to 3.1.21. This issue affects some unknown processing of the component In

Zcash zcashd before 6.12.0 allows invalid transactions to be accepted under certain conditions, which potentially could

LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and project

A security vulnerability has been detected in code-projects Easy Blog Site 1.0. This affects an unknown function of the

A flaw has been found in SourceCodester Sales and Inventory System 1.0. Affected is an unknown function of the file /del

Beszel is a server monitoring platform. Prior to 0.18.7, some API endpoints in the Beszel hub accept a user-supplied sys

An issue was discovered in OpenStack Keystone 14 through 26 before 26.1.1, 27.0.0, 28.0.0, and 29.0.0. Restricted applic

A vulnerability was detected in 1Panel-dev MaxKB up to 2.2.1. This vulnerability affects the function StaticHeadersMiddl

A flaw has been found in 1Panel-dev MaxKB up to 2.6.1. This issue affects some unknown processing of the file apps/commo

A vulnerability has been found in PHPGurukul Company Visitor Management System 2.0. This impacts an unknown function of

A vulnerability has been found in 1Panel-dev MaxKB up to 2.4.2. Impacted is an unknown function of the file ui/src/chat.

EspoCRM is an open source customer relationship management application. In versions 9.3.3 and below, the POST /api/v1/At

A security vulnerability has been detected in DbGate up to 7.1.4. This affects an unknown function of the file packages/

OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers. A regression introduced in 7.11.0 p

The component accepts XML input through the publisher without disabling external entity resolution. This allows maliciou

A vulnerability was detected in classroombookings up to 2.17.0. This impacts the function read of the file crbs-core/app

A flaw has been found in lukevella rallly up to 4.7.4. This affects an unknown function of the file apps/web/src/app/[lo

libgphoto2 is a camera access and control library. In versions up to and including 2.5.33, a missing null terminator exi

libgphoto2 is a camera access and control library. In versions up to and including 2.5.33, an out of bound read in ptp_u

A vulnerability has been found in ComfyUI up to 0.13.0. Affected by this vulnerability is the function getuserdata of th

A vulnerability was found in ComfyUI up to 0.13.0. Affected by this issue is some unknown functionality of the file serv

A flaw has been found in langflow-ai langflow up to 1.8.3. This affects an unknown function of the file src/frontend/src

The Email Encoder WordPress plugin before 2.3.4 does not sanitise and escape some of its settings, which could allow hi

A vulnerability has been found in langgenius dify up to 1.13.3. Impacted is the function openInNewTab of the file web/ap