2026

A vulnerability was detected in p2r3 convert up to 6998584ace3e11db66dff0b423612a5cf91de75b. Affected is the function Bu

A security vulnerability has been detected in rowboatlabs rowboat up to 0.1.67. This impacts the function tool_call of t

A weakness has been identified in usememos memos up to 0.22.1. This affects the function memos_access_token of the file

A security flaw has been discovered in Yifang CMS up to 2.0.5. The impacted element is the function store of the file pl

When sed is invoked with both -i (in-place edit) and --follow-symlinks, the function open_next_file() performs two separ

Double-Free / Use-After-Free (UAF) in the `IntoIter::drop` and `ThinVec::clear` functions in the thin_vec crate. A panic

A vulnerability was identified in Tenda F451 1.0.0.7_cn_svn7958. The affected element is the function fromSafeClientFilt

A vulnerability was determined in Tenda F451 1.0.0.7_cn_svn7958. Impacted is the function fromwebExcptypemanFilter of th

A vulnerability was found in Tenda F451 1.0.0.7_cn_svn7958. This issue affects the function fromGstDhcpSetSer of the fil

A vulnerability has been found in Metasoft 美特软件 MetaCRM up to 6.4.0. This vulnerability affects the function Statement.e

A flaw has been found in phili67 Ecclesia CRM up to 8.0.0. This affects the function ValidateInput of the file /v2/query

A vulnerability was detected in Cockpit-HQ Cockpit up to 2.13.5. Affected by this issue is some unknown functionality of

A security vulnerability has been detected in moxi624 Mogu Blog v2 up to 5.2. Affected by this vulnerability is the func

A weakness has been identified in BichitroGan ISP Billing Software 2025.3.20. Affected is an unknown function of the fil

A security flaw has been discovered in BichitroGan ISP Billing Software 2025.3.20. This impacts an unknown function of t

A vulnerability was identified in BichitroGan ISP Billing Software 2025.3.20. This affects an unknown function of the fi

In the Linux kernel, the following vulnerability has been resolved: X.509: Fix out-of-bounds access when parsing extens

In the Linux kernel, the following vulnerability has been resolved: net: skb: fix cross-cache free of KFENCE-allocated

Fudo Enterprise in versions from 5.5.0 through 5.6.2 allows low privileged users to access certain administrator-only re

A vulnerability was determined in 1024bit extend-deep up to 0.1.6. The impacted element is an unknown function of the fi

A vulnerability was found in SonicCloudOrg sonic-server up to 2.0.0. The affected element is the function Upload of the

A vulnerability has been found in langgenius dify up to 1.13.3. Impacted is the function openInNewTab of the file web/ap

A flaw has been found in langgenius dify up to 1.13.3. This issue affects the function parse_openai_plugin_json_to_tool_

ThreatSonar Anti-Ransomware developed by TeamT5 has an Privilege Escalation vulnerability. Authenticated remote attacker

SKYSEA Client View and SKYMEC IT Manager provided by Sky Co.,LTD. configure the installation folder with improper file a

A vulnerability was detected in langgenius dify up to 0.6.9. This vulnerability affects the function get_api_tool_provid

A security vulnerability has been detected in TransformerOptimus SuperAGI up to 0.0.14. This affects the function extrac

A weakness has been identified in TransformerOptimus SuperAGI up to 0.0.14. Affected by this issue is the function Uploa

ThreatSonar Anti-Ransomware developed by TeamT5 has an Arbitrary File Deletion vulnerability. Authenticated remote attac

EasyFlow .NET developed by Digiwin has a SQL Injection vulnerability, allowing unauthenticated remote attackers to injec

EasyFlow .NET developed by Digiwin has a SQL Injection vulnerability, allowing unauthenticated remote attackers to injec

ProjectDiscovery Nuclei 3 before 3.8.0 allows DSL expression injection. This affects use of -env-vars for multi-step tem

A command injection vulnerability was found in the PPTP VPN Clients on the ADM. The vulnerability allows an administrati

A stack-based buffer overflow vulnerability was found in the VPN Clients on the ADM. The issue stems from the use of unb

A security flaw has been discovered in TransformerOptimus SuperAGI up to 0.0.14. Affected by this vulnerability is the f

A vulnerability was identified in TransformerOptimus SuperAGI up to 0.0.14. Affected is the function delete_agent/stop_s

A vulnerability was determined in TransformerOptimus SuperAGI up to 0.0.14. This impacts the function get_agent_executio

A vulnerability was found in liangliangyy DjangoBlog up to 2.1.0.0. This affects an unknown function of the file djangob

The Email Encoder WordPress plugin before 2.3.4 does not sanitise and escape some of its settings, which could allow hi

A vulnerability has been found in liangliangyy DjangoBlog up to 2.1.0.0. The impacted element is an unknown function of

A flaw has been found in liangliangyy DjangoBlog up to 2.1.0.0. The affected element is the function form_valid of the f

A vulnerability was detected in lm-sys fastchat up to 0.2.36. Impacted is the function add_text of the component Arena S

A security vulnerability has been detected in lm-sys fastchat up to 0.2.36. This issue affects the function api_generate

A weakness has been identified in modelscope agentscope up to 1.0.18. This vulnerability affects the function _process_a

A security flaw has been discovered in modelscope agentscope up to 1.0.18. This affects the function _get_bytes_from_web

A vulnerability was identified in modelscope agentscope up to 1.0.18. Affected by this issue is the function _parse_url/

A vulnerability was determined in modelscope agentscope up to 1.0.18. Affected by this vulnerability is the function exe

A vulnerability was found in rickxy Hospital Management System up to 88a4290d957dc5bdde8a56e5ad451ad14f7f90f4. Affected

A vulnerability has been found in Lagom WHMCS Template up to 2.4.2. This impacts an unknown function of the component Da

A flaw has been found in langflow-ai langflow up to 1.8.3. This affects an unknown function of the file src/frontend/src