2026

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Kolay Software Inc

Relative Path Traversal, Improper Isolation or Compartmentalization vulnerability in erlang otp erlang/otp (tftp_file mo

The installer for ジョブログ集計/分析ソフトウェア RICOHジョブログ集計ツール versions prior to Ver.1.3.7 contains an issue with the DLL search pat

WordPress Plugin "Survey Maker" versions 5.1.7.7 and prior contain a cross-site scripting vulnerability. If this vulnera

This vulnerability allows authenticated attackers to read an arbitrary file by changing a filepath parameter into an int

A vulnerability has been found in rachelos WeRSS we-mp-rss up to 1.4.8. This impacts the function fix_html of the file t

A flaw has been found in Comfast CF-E7 2.6.0.9. This affects the function sub_441CF4 of the file /cgi-bin/mbox-config?me

A vulnerability was detected in Comfast CF-E7 2.6.0.9. The impacted element is the function sub_41ACCC of the file /cgi-

A security vulnerability has been detected in JeecgBoot up to 3.9.1. The affected element is an unknown function of the

This affects versions of the package bn.js before 5.2.3. Calling maskn(0) on any BN instance corrupts the internal state

A weakness has been identified in Fujian Smart Integrated Management Platform System up to 7.5. Impacted is an unknown f

The Quiz Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `vc_quizmaker` shortco

uTLS is a fork of crypto/tls, created to customize ClientHello for fingerprinting resistance while still using it for th

minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Versions 10.2.0

uTLS is a fork of crypto/tls, created to customize ClientHello for fingerprinting resistance while still using it for th

Flare is a Next.js-based, self-hostable file sharing platform that integrates with screenshot tools. Versions 1.7.0 and

LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. In versions 26.1.1 and below, the port gro

LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. In versions 26.1.1 and below, the device g

A security flaw has been discovered in Fujian Smart Integrated Management Platform System up to 7.5. This issue affects

A vulnerability was identified in Dromara RuoYi-Vue-Plus up to 5.5.3. This vulnerability affects the function SaServletF

LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Versions 24.10.0 through 26.1.1 are vulner

LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Versions 25.12.0 and below have a Time-Bas

LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Versions 25.12.0 and below are affected by

LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Versions 25.12.0 and below contain an SQL

LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Versions 25.12.0 and below are vulnerable

Ghost is a Node.js content management system. Versions 3.24.0 through 6.19.0 allow unauthenticated attackers to perform

Frappe Learning Management System (LMS) is a learning system that helps users structure their content. In versions 2.44.

node-tar is a full-featured Tar for Node.js. When using default options in versions 7.5.7 and below, an attacker-control

calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books. Versions 9.2.1 and

calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books. Versions 9.2.1 and

Music Assistant is an open-source media library manager that integrates streaming services with connected speakers. Vers

Slyde is a program that creates animated presentations from XML. In versions 0.0.4 and below, Node.js automatically impo

PJSIP is a free and open source multimedia communication library written in C. In versions 2.16 and below, there is a cr

Sensitive data disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cy

Sensitive data disclosure and manipulation due to improper authentication. The following products are affected: Acronis

Sensitive data disclosure and manipulation due to improper authentication. The following products are affected: Acronis

Sensitive data disclosure and manipulation due to missing authentication. The following products are affected: Acronis C

Tanium addressed an insertion of sensitive information into log file vulnerability in TanOS.

Tanium addressed a SQL injection vulnerability in Asset.

Tanium addressed a use-after-free vulnerability in the Cloud Workloads Enforce client extension.

Tanium addressed an insertion of sensitive information into log file vulnerability in Interact and TDS.

OpenClaw is a personal AI assistant. Prior to version 2026.2.15, a atored XSS issue in the OpenClaw Control UI when rend

OpenClaw is a personal AI assistant. Prior to version 2026.2.15, a bug in `download` skill installation allowed `targetD

OpenClaw is a personal AI assistant. Prior to version 2026.2.15, `normalizeForHash` in `src/agents/sandbox/config-hash.t

OpenClaw is a personal AI assistant. Prior to version 2026.2.15, in some shared-agent deployments, OpenClaw session tool

OpenClaw is a personal AI assistant. Telegram bot tokens can appear in error messages and stack traces (for example, whe

OpenClaw is a personal AI assistant. Prior to version 2026.2.15, a configuration injection issue in the Docker tool sand

OpenClaw is a personal AI assistant. Prior to version 2026.2.15, OpenClaw embedded the current working directory (worksp

OpenClaw is a personal AI assistant. In versions 2026.1.12 through 2026.2.12, OpenClaw browser download helpers accepted

Windmill is an open-source developer platform for internal code: APIs, background jobs, workflows and UIs. Versions 1.63