2026

The Pydantic-AI MCP Run Python tool configures the Deno sandbox with an overly permissive configuration that allows the

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Zirve Infor

C&Cm@il developed by HGiga has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbit

C&Cm@il developed by HGiga has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrar

C&Cm@il developed by HGiga has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to rea

A security vulnerability has been detected in code-projects Online Reviewer System 1.0. Affected by this issue is some u

A weakness has been identified in code-projects Online Reviewer System 1.0. Affected by this vulnerability is an unknown

User credentials are stored using AES‑ECB encryption with a hardcoded key. An unauthenticated remote attacker obtaining

An unauthenticated remote attacker can bypass authentication by exploiting insufficient URI validation and using path tr

Improper length handling when parsing multiple cookie fields (including TRACKID) allows an unauthenticated remote attack

An unauthenticated remote attacker can send a crafted HTTP request containing an overly long SESSIONID cookie. This can

A security flaw has been discovered in code-projects Online Reviewer System 1.0. Affected is an unknown function of the

A vulnerability was identified in code-projects Online Reviewer System 1.0. This impacts an unknown function of the file

Products provided by Oki Electric Industry Co., Ltd. and its OEM products (Ricoh Co., Ltd., Murata Machinery, Ltd.) regi

GitLab has remediated a vulnerability in the Duo Workflow Service component of GitLab AI Gateway affecting all versions

MacroHub developed by GIGABYTE has a Local Privilege Escalation vulnerability. Due to the MacroHub application launching

A vulnerability was determined in D-Link DCS-933L up to 1.14.11. This affects an unknown function of the file /setSystem

A vulnerability was found in itsourcecode Event Management System 1.0. The impacted element is an unknown function of th

A flaw has been found in rachelos WeRSS we-mp-rss up to 1.4.8. Impacted is the function download_export_file of the file

The server identity check mechanism for firmware upgrade performed via command shell is insecurely implemented potential

A vulnerability was detected in rachelos WeRSS we-mp-rss up to 1.4.8. This issue affects some unknown processing of the

A weakness has been identified in code-projects for Plugin 1.0. This affects an unknown part of the file /Administrator/

A security flaw has been discovered in code-projects Online Music Site 1.0. Affected by this issue is some unknown funct

Versions of the package jsonpath before 1.3.0 are vulnerable to Arbitrary Code Injection via unsafe evaluation of user-s

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product supports old SSL

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product supports weak cr

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properl

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product is vulnerable to

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. Detailed messages are displayed

A vulnerability was identified in code-projects Online Music Site 1.0. Affected by this vulnerability is an unknown func

A vulnerability was determined in code-projects Online Music Site 1.0. Affected is an unknown function of the file /Admi

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properl

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The response header contains

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properl

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. Since there are input fields

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The library version could be

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The web server accepts the OP

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The web server accepts access

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not specify

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product lacks HSTS (HTTP

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. Physical paths could be displ

A vulnerability has been found in D-Link DIR-823X 250416. This affects the function sub_4211C8 of the file /goform/set_f

A flaw has been found in Tenda AC8 16.03.33.05. Affected by this vulnerability is an unknown functionality of the file /

A vulnerability was detected in Tenda AC8 16.03.33.05. Affected is the function fromSetWifiGusetBasic of the file /gofor

A security vulnerability has been detected in ZeroWdd studentmanager up to 2151560fc0a50ec00426785ec1e01a3763b380d9. Thi

A weakness has been identified in heyewei JFinalCMS 5.0.0. This affects an unknown function of the file /admin/admin/sav

A security flaw has been discovered in code-projects Online Reviewer System 1.0. The impacted element is an unknown func

A vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is an unknown function

A vulnerability was determined in code-projects Online Reviewer System 1.0. Impacted is an unknown function of the file

A vulnerability was found in code-projects Online Reviewer System 1.0. This issue affects some unknown processing of the