2026

Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. Prior to version 2.2.3, th

Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. Prior to version 2.2.3, a

Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. Prior to version 2.2.3, a

oRPC is an tool that helps build APIs that are end-to-end type-safe and adhere to OpenAPI standards. Prior to version 1.

OneUptime is a solution for monitoring and managing online services. In version 10.0.11 and prior, the WebAuthn authenti

Ghostfolio is an open source wealth management software. Prior to version 2.244.0, by bypassing symbol validation, an at

Kimai is a web-based multi-user time-tracking application. Prior to version 2.51.0, "GET /api/invoices/{id}" only checks

Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. Prior to version 2.2.3, if

Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. Prior to version 2.2.3, th

Internet Routing Registry daemon version 4 is an IRR database server, processing IRR objects in the RPSL format. From ve

Ghostfolio is an open source wealth management software. Prior to version 2.245.0, an attacker can exploit the manual as

Home-Gallery.org is a self-hosted open-source web gallery to browse personal photos and videos. Prior to version 1.21.0,

OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. Prior to version

OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. Prior to version

OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. Prior to version

LangBot is a global IM bot platform designed for LLMs. Prior to version 4.8.7, LangBot’s web UI renders user-supplied ra

Idno is a social publishing platform. Prior to version 1.6.4, a logic error in the API authentication flow causes the CS

Idno is a social publishing platform. Prior to version 1.6.4, there is a remote code execution vulnerability via chained

Talishar is a fan-made Flesh and Blood project. Prior to commit 6be3871, a Path Traversal vulnerability was identified i

Talishar is a fan-made Flesh and Blood project. Prior to commit a9c218e, an authentication bypass vulnerability in Talis

Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create c

Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create c

Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create c

Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create c

Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create c

Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create c

WWBN AVideo is an open source video platform. Prior to version 24.0, the official docker-compose.yml publishes the memca

TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32. Prior to version 2.04, TinyWeb accepts request header

Chamilo is a learning management system. Prior to version 1.11.34, Chamilo LMS is affected by an authenticated remote co

WWBN AVideo is an open source video platform. Prior to version 24.0, an authenticated Remote Code Execution (RCE) vulner

WWBN AVideo is an open source video platform. Prior to version 24.0, an unauthenticated SQL Injection vulnerability exis

TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32. Prior to version 2.03, an integer overflow vulnerabil

MarkUs is a web application for the submission and grading of student assignments. Prior to version 2.9.4, MarkUs allows

MarkUs is a web application for the submission and grading of student assignments. Prior to version 2.9.4, MarkUs curren

Chamilo is a learning management system. Prior to version 1.11.34, the functionality for the user to update the category

Chamilo is a learning management system. Prior to version 1.11.34, there is a stored cross-site scripting (XSS) vulnerab

Chamilo is a learning management system. Prior to version 1.11.34, there is a stored cross-site scripting (XSS) vulnerab

Chamilo is a learning management system. Prior to version 1.11.34, a Cross-Site Request Forgery (CSRF) vulnerability all

Chamilo is a learning management system. Prior to version 1.11.34, a stored XSS vulnerability exists in Chamilo LMS that

Chamilo is a learning management system. Prior to version 1.11.34, there is a stored XSS vulnerability in Chamilo LMS (V

A vulnerability was detected in DefaultFuction Jeson Customer Relationship Management System 1.0.0. Impacted is an unkno

A vulnerability was identified in Wavlink WL-NU516U1 V240425. This vulnerability affects the function sub_401A0C of the

A vulnerability was determined in Wavlink WL-NU516U1 V240425. This affects the function sub_405AF4 of the file /cgi-bin/

A vulnerability was found in HSC Cybersecurity Mailinspector up to 5.3.2-3. Affected by this issue is some unknown funct

The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Sensitive Information Exposure

Local privilege escalation due to insecure Unix socket permissions. The following products are affected: Acronis Cyber P

Sensitive information disclosure due to improper access control. The following products are affected: Acronis Cyber Prot

Sensitive information disclosure due to improper configuration of a headless browser. The following products are affecte

Unauthorized data access due to insufficient access control validation. The following products are affected: Acronis Cyb

Unauthorized report deletion due to insufficient access control. The following products are affected: Acronis Cyber Prot