2026

** UNSUPPORTED WHEN ASSIGNED ** Use of cache containing sensitive information vulnerability in Apache Cocoon. When using

** UNSUPPORTED WHEN ASSIGNED ** Improper neutralization of special elements used in an SQL command ('SQL injection') vul

** UNSUPPORTED WHEN ASSIGNED ** Improper restriction of recursive entity references in DTDs ('XML entity expansion') vul

Pre-authentication OIDC discovery and JWKS fetches run synchronously on the asyncio event loop, so one unauthenticated r

PIA's token verification (`verify_token` in `pia/oidc.py`) fetches the OIDC discovery document of an allowlisted issuer

A Cross-Site WebSocket Hijacking vulnerability in Cloud Shell prior to 2026-07-22 on Google Cloud Platform allows an una

A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execut

A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the s

A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated att

A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code executi

A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials f

A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to

A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system.

A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system.

A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the syst

A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data.

The payment notification endpoint for PayPal accepts incoming data without verifying that it comes from the payment prov

In versions running on TYPO3 10 and 11, the configured OpenAI API key is embedded in every backend page, so that the edi

Values entered by visitors were placed into the HTML summary email without being escaped. An unauthenticated attacker co

A weakness has been identified in Osclass up to 8.3.1. Affected by this vulnerability is the function Item::findUserItem

A security flaw has been discovered in mcollina mcp-ripgrep up to 0.4.0. Affected is an unknown function of the file src

The download link for files uploaded through a form relied on a token that could be predicted. The file name in the requ

The extension provides a backend endpoint that writes a submitted value into a submitted field of a submitted page recor

The file search of the extension builds its database conditions by wrapping the search term in quotes itself. Only the w

The extension provides a public proxy endpoint that fetches a URL on behalf of the visitor. For one HTTP request method,

The order cancellation function accepts an order identifier from the request and acts on that order without checking tha

The AJAX routes of the extension do not check whether a backend user has access to the related module or dashboard widge

The extension no longer applied its access protection to files in file storages that use a non-default relative base pat

The backend module does not check whether a backend user has access to the requested site. Users with access to the modu

The extension hides the correct answer to each CAPTCHA inside the image data of the CAPTCHA itself. Anyone who can reque

The JSON import of the cookie consent configuration did not respect the backend user's permissions. Non-admin backend us

The routes that provide consent history and statistics data did not check whether the backend user had access to the mod

The backend module for reviewing the consent history accepted sorting, grouping and index options from the request and u

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brizy Brizy brizy

Pass-through of unvalidated KMS URLs to KMS clients in Apache C++ Parquet and PyArrow versions 4.0.0 to 25.0.1. This

A vulnerability in the bulk port configuration functionality could allow an unauthenticated attacker to crash the servic

A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator password without re

A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated attacker to achieve

A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism.

A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism.

An integer overflow vulnerability in the license manager service could allow an unauthenticated attacker to crash the se

A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash

A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash

A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash

A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker to

A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution

A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest authentica

A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges.

Enumeration of unauthenticated users in FacturaScripts, version 2025.61. The application returns different responses whe

Stored Cross-Site Scripting (XSS) in FacturaScripts, version 2025.61, caused by a lack of adequate validation or sanitis