2026

SiYuan is a personal knowledge management system. Versions prior to 3.5.4 have a stored Cross-Site Scripting (XSS) vulne

SiYuan is a personal knowledge management system. Versions prior to 3.5.4 contain a logic vulnerability in the /api/file

SiYuan is a personal knowledge management system. In versions prior to 3.5.4, the markdown feature allows unrestricted s

SiYuan is a personal knowledge management system. Versions prior to 3.5.4 are vulnerable to reflected cross-site scripti

Tugtainer is a self-hosted app for automating updates of Docker containers. In versions prior to 1.16.1, the password au

Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Starting in version

A vulnerability was determined in birkir prime up to 0.4.0.beta.0. This affects an unknown function of the file /graphql

A vulnerability was found in birkir prime up to 0.4.0.beta.0. The impacted element is an unknown function of the file /g

Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to version 1.

HotCRP is conference review software. Starting in commit aa20ef288828b04550950cf67c831af8a525f508 and prior to commit ce

Mailpit is an email testing tool and API for developers. Versions prior to 1.28.3 are vulnerable to Server-Side Request

teklifolustur_app is a web-based PHP application that allows users to create, manage, and track quotes for their clients

ChatterBot is a machine learning, conversational dialog engine for creating chat bots. ChatterBot versions up to 1.2.10

Movary is a web application to track, rate and explore your movie watch history. Due to insufficient input validation, a

Movary is a web application to track, rate and explore your movie watch history. Due to insufficient input validation, a

Movary is a web application to track, rate and explore your movie watch history. Due to insufficient input validation, a

Tandoor Recipes is a recipe manager than can be installed with the Nix package manager. Starting in version 23.05 and pr

A vulnerability has been found in birkir prime up to 0.4.0.beta.0. The affected element is an unknown function of the fi

A flaw has been found in birkir prime up to 0.4.0.beta.0. Impacted is an unknown function of the file /graphql of the co

Pterodactyl is a free, open-source game server management panel. Pterodactyl implements rate limits that are applied to

HCL AION  version 2 is affected by a Weak Password Policy vulnerability. This can  allow the use of easily guessable pas

HCL AION version 2 is affected by a Technical Error Disclosure vulnerability. This can expose sensitive technical detail

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, offscreen bitmap deletion leav

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, `xf_Pointer_New` frees `cursor

HotCRP is conference review software. A problem introduced in April 2024 in version 3.1 led to inadequately sanitized co

ESPHome is a system to control microcontrollers remotely through Home Automation systems. In versions 2025.9.0 through 2

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, FastGlyph parsing trusts `cbDa

OpenProject is an open-source, web-based project management software. When using groups in OpenProject to manage users,

OpenProject is an open-source, web-based project management software. Users of OpenProject versions prior to 16.6.5 and

OpenProject is an open-source, web-based project management software. Versions 16.3.0 through 16.6.4 are affected by a s

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, a client-side heap buffer over

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, a client-side heap buffer over

An issue was discovered in OpenStack keystonemiddleware 10.5 through 10.7 before 10.7.2, 10.8 and 10.9 before 10.9.1, an

A vulnerability was detected in birkir prime up to 0.4.0.beta.0. This issue affects some unknown processing of the file

A security vulnerability has been detected in birkir prime up to 0.4.0.beta.0. This vulnerability affects unknown code.

HCL AION is affected by an Unrestricted File Upload vulnerability. This can allow malicious file uploads, potentially re

HCL AION is affected by a Missing Security Response Headers vulnerability. The absence of standard security headers may

HCL AION version 2 is affected by a JWT Token Expiry Too Long vulnerability. This may increase the risk of token misuse,

HCL AION is affected by an Unrestricted File Upload vulnerability. This can allow malicious file uploads, potentially re

HCL AION version 2 is affected by a Cacheable HTTP Response vulnerability. This may lead to unintended storage of sensit

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, a client-side heap buffer over

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, in ClearCodec, when `glyphData

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0,`freerdp_bitmap_decompress_plan

LobeChat is an open source chat application platform. Prior to version 2.0.0-next.193, `knowledgeBase.removeFilesFromKno

Koko Analytics is an open-source analytics plugin for WordPress. Versions prior to 2.1.3 are vulnerable to arbitrary SQL

The @fastify/express plugin adds full Express compatibility to Fastify. A security vulnerability exists in @fastify/expr

A flaw has been found in UTT HiPER 810 1.7.4-141218. The impacted element is the function strcpy of the file /goform/set

@fastify/middie is the plugin that adds middleware support on steroids to Fastify. A security vulnerability exists in @f

A vulnerability was detected in pbrong hrms 1.0.1. The affected element is the function UpdateRecruitmentById of the fil

A security vulnerability has been detected in PHPGurukul Directory Management System 1.0. Impacted is an unknown functio