2026

A vulnerability was found in mf-yang openclaw-cn 2026.2.5. This affects an unknown part of the file src/agents/bash-tool

A vulnerability was determined in mf-yang openclaw-cn up to 0.2.1. This vulnerability affects the function isApprovedEle

A vulnerability was identified in mf-yang openclaw-cn up to 0.2.1. This issue affects the function assertNoSymlinkEscape

A weakness has been identified in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unkn

A vulnerability was determined in OpenHands up to 0.62.0. The affected element is the function initialize_repo of the fi

A security vulnerability has been detected in MonomythDevelopment la-forge-mcp 1.0.0. This issue affects the function sc

A flaw has been found in MissionSquad mcp-api up to 1.11.9. The affected element is an unknown function of the file src/

A vulnerability has been found in MissionSquad mcp-api up to 1.11.8. The impacted element is the function this.packageSe

A vulnerability was determined in SourceCodester Online Examination & Learning Management System 1.0. This issue affects

A security flaw has been discovered in itsourcecode Hospital Management System 1.0. The affected element is an unknown f

A weakness has been identified in itsourcecode Hospital Management System 1.0. The impacted element is an unknown functi

A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. This affects an unknown funct

A vulnerability was detected in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the fil

A flaw has been found in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /viewa

A vulnerability has been found in SourceCodester Photo Share Website 1.0. The impacted element is an unknown function of

go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, reference name

In versions of the Datadog Android application prior to v541-5.9.2, the exported launcher activity AppActivity accepts a

A security vulnerability has been detected in HKUDS nanobot up to 0.2.1. Impacted is the function ExecTool._guard_comman

A vulnerability has been found in HKUDS nanobot up to 0.2.1. This affects the function _download_image_data_url of the f

A vulnerability was identified in abdullah1854 MCPGateway up to 549f494a9e363f40530149de324b8097de424230. This impacts t

A security flaw has been discovered in aliyun alibabacloud-dataworks-mcp-server up to 1.0.43. The impacted element is th

A weakness has been identified in anubissbe ProjectHub-Mcp up to 5.0.0. This affects an unknown function of the file bac

A vulnerability was identified in itsourcecode Hospital Management System 1.0. This issue affects some unknown processin

A vulnerability has been found in Dolibarr ERP up to 23.0.3. Affected is the function fail of the file htdocs/takepos/in

A vulnerability was found in lock-upme OPMS up to 831440f37a92c1568f2e071d5233bc873a9d8b09. The impacted element is an u

A weakness has been identified in 3CORESec Trapdoor up to 1.2.2. Affected by this vulnerability is the function DefaultF

A vulnerability was determined in itsourcecode Hospital Management System 1.0. The affected element is an unknown functi

A vulnerability has been found in NocteDefensor LudusMCP 1.0.24. Affected by this vulnerability is an unknown functional

A vulnerability was detected in dmitriiweb article-scraper-mcp 1.0.0. This vulnerability affects the function fetch_arti

A flaw was found in multicluster-global-hub. During a ManagedClusterMigration, the system incorrectly grants all managed

Discourse is an open-source discussion platform. Prior to 2026.1.7, an authenticated user could submit specially formed

SAP NetWeaver Application Server Java (Adobe Document Service) uses outdated open source cryptographic and data transfer

Due to an SQL Injection vulnerability in SAP Social intelligence, an authenticated attacker could directly inject an SQL

Due to a Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP, an authenticated attacker co

A vulnerability was found in Open5GS up to 2.7.1. This affects the function hss_ogs_diam_s6a_air_cb/hss_ogs_diam_s6a_ulr

A flaw was found in insights-client. When the application receives a non-200 response, it logs the request headers, whic

A flaw was found in insights-client. The setDefault() function logs the value of every environment variable it processes

An authenticated command injection vulnerability was identified in GMS Command-Line Interface (CLI) 9.5.1 (Build 9510.10

A vulnerability was determined in Open5GS up to 2.7.1. This vulnerability affects the function mme_s6a_subscription_data

A vulnerability was identified in Open5GS up to 2.7.1. This issue affects the function pcrf_rx_aar_cb of the file src/pc

A flaw has been found in Open5GS up to 2.7.1. Affected by this vulnerability is an unknown functionality of the componen

The Linkable Loadable Extensions (llext) subsystem mis-handles PLT/RELA relocation entries when linking a relocatable (p

Improper restriction of XML external entity reference vulnerability in Ministry of Justice UYAP Document Editor allows S

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information and bypass secu

NortheBridge/luminalshine is a Sunshine-compatible game stream host for Moonlight. Prior to version 26.05.0-rc4, a laten

A flaw was found in sblim-sfcb. A local, low-privileged attacker can exploit a race condition during privileged instance

A flaw was found in sblim-cmpi-base. Insecure temporary file creation in the provider registration scripts allows a loca

Unauthenticated Broken Access Control in Anti Spam and list cleaner &#8211; AcyChecker <= 2.0.0 versions.

rsync before 3.5.0 contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability in the non-daemon recei