2026

A vulnerability was found in JeecgBoot up to 3.9.1. Impacted is the function user.getUsername of the file /sys/user/logi

A vulnerability was identified in JeecgBoot up to 3.9.1. The impacted element is an unknown function of the file /sys/co

A vulnerability was found in itsourcecode Courier Management System 1.0. The affected element is an unknown function of

Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.6 and 11.0.0.0, including 9.3.x and 8.3.x, d

A Cross-Site Request Forgery (CSRF) vulnerability was discovered in the delete.php endpoint of Jason2605 AdminPanel 4.0.

FacturaScripts is an open source accounting and invoicing software. In 2025.81 and earlier, an authenticated unrestricte

pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.0, multiple pam_usb help

pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.0, pam_usb is a PAM modu

Microsoft UFO open-source framework for intelligent automation across devices and platforms. In 3.0.1-4-ge2626659, Micro

Server-Side Request Forgery (CWE-918) in Kibana can allow an authenticated user with connector management privileges to

Inappropriate implementation in Media in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to bypass same

A vulnerability has been found in TRENDnet TEW-432BRP 3.10B20. This impacts the function formSetRoute of the file /gofor

A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. Affected is the function formWPS of the file /goform/formWPS.

A security flaw has been discovered in TRENDnet TEW-432BRP 3.10B20. This affects the function formSetPortTr of the file

ACM/MCE assisted-service writes raw referenced pull-secret contents into `InfraEnv.status.conditions[].message` when pul

Arcane is an interface for managing Docker containers, images, networks, and volumes. In 1.18.1 and earlier, GET /enviro

FastGPT is an AI Agent building platform. Prior to 4.15.0-beta1, the JavaScript sandbox worker at projects/code-sandbox/

A race condition in the shared Extreme Platform ONE IAM Gateway API-key authentication path could, under specific high-c

A weakness has been identified in Edimax BR-6478AC 1.23. This affects the function formStaDrvSetup of the file /goform/f

A vulnerability was detected in TaleLin lin-cms-spring-boot up to 0.2.1. This issue affects some unknown processing of t

A vulnerability was determined in Edimax BR-6478AC 1.23. The affected element is the function formWlbasic of the file /g

A security vulnerability has been detected in OUSL-GROUP-BrinaryBrains School Student Management System up to 1e70e5ad11

A flaw has been found in code-projects Visitor Management System 1.0. Affected by this issue is some unknown functionali

A security flaw has been discovered in Bdtask Multi-Store Inventory Management System 1.0. The affected element is the f

A vulnerability was identified in Aider-AI Aider 0.86.3. Affected is an unknown function of the file aider/args.py of th

A security flaw has been discovered in Aider-AI Aider 0.86.3. Affected by this vulnerability is the function editor_code

A weakness has been identified in Aider-AI Aider 0.86.3. Affected by this issue is some unknown functionality of the com

A security vulnerability has been detected in Aider-AI Aider 0.86.3. This affects the function requests.get of the file

A vulnerability has been found in TRENDnet TEW-432BRP 3.10B20. Impacted is the function formSysCmd of the file /goform/f

A vulnerability was determined in TRENDnet TEW-432BRP 3.10B20. The impacted element is the function formWlanSetup of the

A security flaw has been discovered in OFCMS up to 1.1.3. The impacted element is the function Query of the file ofcms-a

A weakness has been identified in OFFIS DCMTK 3.7.0. This affects the function DcmQueryRetrieveIndexDatabaseHandle::dele

A vulnerability was identified in OFCMS 1.1.3. This issue affects the function Query of the file \ofcms-admin\src\main\j

A security flaw has been discovered in OFCMS 1.1.3. Impacted is the function Query of the file \ofcms-admin\src\main\jav

A weakness has been identified in OFCMS 1.1.3. The affected element is the function Query of the file \ofcms-admin\src\m

A security vulnerability has been detected in Metasoft 美特软件 MetaCRM 6.4.0. The impacted element is an unknown function o

A vulnerability has been found in code-projects Online Hospital Management System 1.0. Affected is an unknown function o

A vulnerability was found in AstrBotDevs AstrBot 4.23.6. Affected by this vulnerability is the function _sanitize_prompt

A vulnerability was determined in AstrBotDevs AstrBot 4.23.6. Affected by this issue is the function _normalize_rw_path

A vulnerability was identified in AstrBotDevs AstrBot 4.24.2. This affects the function astr_main_agent of the file astr

A flaw has been found in nextlevelbuilder GoClaw up to 3.11.3. The impacted element is the function handleSave of the fi

A weakness has been identified in NousResearch hermes-agent up to 2026.4.30. This affects the function _scan_memory_cont

A flaw has been found in CodeAstro Ingredients Stock Management System 1.0. This vulnerability affects unknown code of t

A vulnerability was determined in JeecgBoot up to 3.9.2. The affected element is the function WordUtil.addImage of the f

A vulnerability was identified in JeecgBoot up to 3.9.2. The impacted element is an unknown function of the file /airag/

A security flaw has been discovered in jeecgboot The server processes these URLs up to 3.9.1. This affects the function

A weakness has been identified in itsourcecode Content Management System 1.0. This impacts an unknown function of the fi

Missing authentication and clear‑text transmission of data from the heat pumps to the control server, combined with the

A vulnerability was identified in itsourcecode Content Management System 1.0. This vulnerability affects unknown code of

A security flaw has been discovered in itsourcecode Content Management System 1.0. This issue affects some unknown proce