2026

A vulnerability was determined in aandrew-me ytDownloader up to 3.20.2. This affects the function child_process.exec of

A vulnerability was found in aandrew-me ytDownloader up to 3.20.2. Affected by this issue is the function createTextNode

A security vulnerability has been detected in DbGate up to 7.1.4. This affects an unknown function of the file packages/

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-1

EspoCRM is an open source customer relationship management application. In versions 9.3.3 and below, the POST /api/v1/Em

EspoCRM is an open source customer relationship management application. In versions 9.3.3 and below, the POST /api/v1/At

Craft Commerce is an ecommerce platform for Craft CMS. In versions 5.0.0 through 5.5.4, an SQL injection vulnerability e

Craft Commerce is an ecommerce platform for Craft CMS. In versions 4.0.0 through 4.10.2 and 5.0.0 through 5.5.4, there i

An issue in the Bluetooth RFCOMM service of Parani M10 Motorcycle Intercom v2.1.3 allows unauthorized attackers to cause

A HTML Injection vulnerability exists in the Dashboard module of Vtiger CRM 8.4.0. The application fails to properly neu

Vtiger CRM 8.4.0 contains a reflected cross-site scripting (XSS) vulnerability in the MailManager module. Improper handl

In Phpgurukul Online Course Registration v3.1, an arbitrary file upload vulnerability was discovered within the profile

A weakness has been identified in DbGate up to 7.1.4. The impacted element is the function apiServerUrl1 of the file pac

A security flaw has been discovered in code-projects Easy Blog Site 1.0. This affects an unknown function of the file po

A vulnerability was identified in CodeAstro Online Job Portal 1.0. The impacted element is an unknown function of the fi

EspoCRM is an open source customer relationship management application. Versions 9.3.3 and below have a stored HTML inje

EspoCRM is an open source customer relationship management application. Versions 9.3.3 and below have an authenticated S

nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus a

Craft Commerce is an ecommerce platform for Craft CMS. In versions 4.0.0 through 4.10.2 and 5.0.0 through 5.5.4, the Pay

An issue in the <code>pickle</code> protocol of Pyro v3.x allows attackers to execute arbitrary code via supplying a cra

A vulnerability was determined in Tenda F456 1.0.0.5. The affected element is the function formwebtypelibrary of the fil

A vulnerability was found in Tenda F456 1.0.0.5. Impacted is the function fromqossetting of the file /goform/qossetting.

A vulnerability has been found in Tenda F456 1.0.0.5. This issue affects the function fromNatStaticSetting of the file /

A flaw has been found in Tenda F456 1.0.0.5. This vulnerability affects the function formWrlsafeset of the file /goform/

Pachno 1.0.6 contains a deserialization vulnerability that allows unauthenticated attackers to execute arbitrary code by

Pachno 1.0.6 contains an authentication bypass vulnerability in the runSwitchUser() action that allows authenticated low

Pachno 1.0.6 contains an XML external entity injection vulnerability that allows unauthenticated attackers to read arbit

Pachno 1.0.6 contains a cross-site request forgery vulnerability that allows attackers to perform arbitrary actions in a

Pachno 1.0.6 contains an unrestricted file upload vulnerability that allows authenticated users to upload arbitrary file

Pachno 1.0.6 contains an open redirection vulnerability that allows attackers to redirect users to arbitrary external we

Pachno 1.0.6 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary HTML and sc

The `/registercrd` endpoint in KubePlus 4.14 in the kubeconfiggenerator component is vulnerable to command injection. Th

A vulnerability was detected in Tenda F456 1.0.0.5. This affects the function fromexeCommand of the file /goform/exeComm

A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Affected by this issue is the funct

A weakness has been identified in Totolink A3002MU B20211125.1046. Affected by this vulnerability is the function sub_41

Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a memo

jq is a command-line JSON processor. An integer overflow vulnerability exists through version 1.8.1 within the jvp_strin

simple-git enables running native Git commands from JavaScript. Versions up to and including 3.31.1 allow execution of a

A vulnerability exists in the command handling of the IEC 61850 communication stack included in the product revisions li

A security flaw has been discovered in PHPGurukul Daily Expense Tracking System 1.1. Affected is an unknown function of

A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the function opj_pi_initialise_encode in

A vulnerability was determined in itsourcecode Construction Management System 1.0. This affects an unknown function of t

A vulnerability was found in itsourcecode Construction Management System 1.0. The impacted element is an unknown functio

A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. The affected element is an unk

ChurchCRM is an open-source church management system. Prior to 7.0.0, it was possible in many places across the ChurchCR

Sourcecodester Online Thesis Archiving System v1.0 is vulnerable to SQL injection in the file /otas/admin/curriculum/man

Sourcecodester Online Thesis Archiving System v1.0 is vulnerable to SQL injection in /otas/projects_per_department.php.

Sourcecodester Online Thesis Archiving System v1.0 is vulnerale to SQL injection in the file /otas/view_archive.php.