2026

An issue was discovered in HAProxy before 3.3.6. The HTTP/3 parser does not check that the received body length matches

Decidim is a participatory democracy framework. In versions below 0.30.5 and 0.31.0.rc1 through 0.31.0, a stored code ex

The bson_validate function may return early on specific inputs and incorrectly report success. This behavior could resul

A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. Impacted is an unknown function of the

A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0. This issue affects some unknown

A security vulnerability has been detected in UTT HiPER 1200GW up to 2.5.3-170306. This vulnerability affects the functi

A weakness has been identified in code-projects Simple Content Management System 1.0. This affects an unknown part of th

Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in /orms/admin/rooms/view_room.php.

Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in /orms/admin/reservations/view_deta

Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via Event Re

Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via custom fields.

Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via module search.

Improper Neutralization of Input During Web Page Generation vulnerability allows Stored Cross-Site Scripting via event c

Missing Authorization vulnerability allows Exposure of Sensitive Information via configuration endpoint. This issue affe

Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via WebServe

Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via Network

Unrestricted Upload of File with Dangerous Type vulnerability allows Remote Code Execution via file upload. This issue a

Nitro PDF Pro for Windows 14.41.1.4 contains a heap use-after-free vulnerability in the implementation of the JavaScript

Nitro PDF Pro before 14.43 for Windows contains a NULL pointer dereference vulnerability in the JavaScript implementatio

A NULL pointer dereference in Nitro PDF Pro for Windows v14.41.1.4 allows attackers to cause a Denial of Service (DoS) v

Cross-Site Scripting vulnerability in the Snipe-IT web-based asset management system v8.3.0 to up and including v8.3.1 a

Rate Limiting for attempting a user login is not being properly enforced, making HCL DevOps Velocity susceptible to brut

A security flaw has been discovered in code-projects Simple Content Management System 1.0. Affected by this issue is som

A vulnerability was identified in code-projects Simple Content Management System 1.0. Affected by this vulnerability is

Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL injection in the file /rsms/a

Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerale to SQL injection in the file/rsms/adm

Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL injection in the file /rsms/a

Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in the file /orms/admin/activities/ma

Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL Injection in the file /orms/admin/rooms/manage_

Dag Authors, who normally should not be able to execute code in the webserver context could craft XCom payload causing t

In Totara LMS v19.1.5 and before, the forgot password API does not implement rate limiting for the target email address.

Totara LMS v19.1.5 and before is vulnerable to Incorrect Access Control. The login page code can be manipulated to revea

Totara LMS v19.1.5 and before is vulnerable to HTML Injection. An attacker can inject malicious HTML code in a message a

A heap buffer overflow in the av_bprint_finalize() function of FFmpeg v8.0.1 allows attackers to cause a Denial of Servi

An improper resource deallocation and closure vulnerability in the tools/zmqsend.c component of FFmpeg v8.0.1 allows att

An out-of-bounds read in the read_global_param() function (libavcodec/av1dec.c) of FFmpeg v8.0.1 allows attackers to cau

A stack overflow in the experimental/tinyobj_loader_opt.h file of tinyobjloader commit d56555b allows attackers to cause

A vulnerability in the `TFSMLayer` class of the `keras` package, version 3.13.0, allows attacker-controlled TensorFlow S

Before Airflow 3.2.0, it was unclear that secure Airflow deployments require the Deployment Manager to take appropriate

Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL Injection in the file /rsms/a

Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL injection in the file /rsms/a

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_log: fix uninitialized padding

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: fix use of uninitializ

In the Linux kernel, the following vulnerability has been resolved: ACPI: EC: clean up handlers on probe failure in acp

In the Linux kernel, the following vulnerability has been resolved: rds: ib: reject FRMR registration before IB connect

In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: restrict xt_check_match/xt_che

In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_hfsc: fix divide-by-zero in rtsc_min

In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_flow: fix NULL pointer dereference o

In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_fw: fix NULL pointer dereference on

In the Linux kernel, the following vulnerability has been resolved: bridge: mrp: reject zero test interval to avoid OOM