2026

The backup restore function does not properly validate unexpected or unrecognized tags within the backup file. When such

A vulnerability has been found in Bdtask SalesERP up to 20260116. This issue affects some unknown processing of the comp

A flaw has been found in D-Link DWR-M961 1.1.47. This vulnerability affects the function sub_419920 of the file /boafrm/

A vulnerability was detected in itsourcecode Society Management System 1.0. This affects an unknown part of the file /ad

An Insertion of Sensitive Information into Log File vulnerability in B&R PVI client versions prior to 6.5 may be abused

An input validation vulnerability in the flow.Tensor.new_empty/flow.Tensor.new_ones/flow.Tensor.new_zeros component of O

Parsec is a cloud-based application for cryptographically secure file sharing. In versions on the 3.x branch prior to 3.

CWE-276: Incorrect Default Permissions vulnerability exists that could cause privilege escalation through the reverse s

A security vulnerability has been detected in itsourcecode Society Management System 1.0. Affected by this issue is some

A weakness has been identified in itsourcecode Society Management System 1.0. Affected by this vulnerability is an unkno

A vulnerability was identified in itsourcecode School Management System 1.0. This impacts an unknown function of the fil

A vulnerability was determined in itsourcecode School Management System 1.0. This affects an unknown function of the fil

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Global Interactive

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Global Inte

An input validation vulnerability in the flow.scatter/flow.scatter_add component of OneFlow v0.9.0 allows attackers to c

A segmentation violation in the oneflow._oneflow_internal.autograd.Function.FunctionCtx.mark_non_differentiable componen

10-Strike Bandwidth Monitor 3.9 contains an unquoted service path vulnerability in multiple services that allows local a

SonarQube 8.3.1 contains an unquoted service path vulnerability that allows local attackers to gain SYSTEM privileges by

GOautodial 4.0 contains a persistent cross-site scripting vulnerability that allows authenticated agents to inject malic

CodeMeter 6.60 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary

BarcodeOCR 19.3.6 contains an unquoted service path vulnerability that allows local attackers to execute code with eleva

The Ruijie Networks Switch eWeb S29_RGOS version 11.4 contains a directory traversal vulnerability that allows unauthent

Audio Playback Recorder 3.2.2 contains a local buffer overflow vulnerability in the eject and registration parameters th

Tea LaTex 1.0 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary

Gnome Fonts Viewer 3.34.0 contains a heap corruption vulnerability that allows attackers to trigger an out-of-bounds wri

BearShare Lite 5.2.5 contains a buffer overflow vulnerability in the Advanced Search keywords input that allows attacker

MedDream PACS Server 6.8.3.751 contains an authenticated remote code execution vulnerability that allows authorized user

EasyPMS 1.0.0 contains an authentication bypass vulnerability that allows unprivileged users to manipulate SQL queries i

Liman 0.7 contains a cross-site request forgery vulnerability that allows attackers to manipulate user account settings

berliCRM 1.0.24 contains a SQL injection vulnerability in the 'src_record' parameter that allows remote attackers to man

TimeClock Software 1.01 contains an authenticated time-based SQL injection vulnerability that allows attackers to enumer

The Ultimate Project Manager CRM PRO version 2.0.5 contains a blind SQL injection vulnerability that allows attackers to

Ajenti 2.1.36 contains a post-authenticated remote command execution vulnerability that allows remote attackers to execu

Frigate Professional 3.36.0.9 contains a local buffer overflow vulnerability in the Pack File feature that allows attack

Free MP3 CD Ripper 2.8 contains a stack buffer overflow vulnerability that allows remote attackers to execute arbitrary

Elaniin CMS 1.0 contains an authentication bypass vulnerability that allows attackers to access the dashboard by manipul

BacklinkSpeed 2.4 contains a buffer overflow vulnerability that allows attackers to corrupt the Structured Exception Han

Mocha Telnet Lite for iOS 4.2 contains a denial of service vulnerability that allows attackers to crash the application

QlikView 12.50.20000.0 contains a denial of service vulnerability in the FTP server address input field that allows loca

The $uri$args concatenation in nginx configuration file present in Open Security Issue Management (OSIM) prior v2025.9.0

A vulnerability was found in jishenghua jshERP up to 3.6. The impacted element is the function install of the file /jshE

Session Fixation vulnerability in QR Menu Pro Smart Menu Systems Menu Panel allows Session Hijacking. This issue affect

Authorization Bypass Through User-Controlled Key vulnerability in QR Menu Pro Smart Menu Systems Menu Panel allows Explo

A vulnerability has been found in Open5GS up to 2.7.6. The affected element is the function sgwc_s11_handle_modify_beare

A flaw has been found in Open5GS up to 2.7.5. Impacted is the function ogs_gtp2_f_teid_to_ip of the file /sgwc/s11-handl

Stored Cross-Site Scripting (XSS) in RLE NOVA's PlanManager. This vulnerability allows an attacker to execute JavaScript

Improper Access Control vulnerability in Akın Software Computer Import Export Industry and Trade Ltd. QR Menu allows Aut

Session Fixation vulnerability in Akın Software Computer Import Export Industry and Trade Ltd. QR Menu allows Session Fi

Dell OpenManage Network Integration, versions prior to 3.9, contains an Improper Authentication vulnerability. A low pri

A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Nomad-Run