2026

Bagisto is an open source laravel eCommerce platform. Prior to version 2.3.10, an Insecure Direct Object Reference vulne

Bagisto is an open source laravel eCommerce platform. In versions on the 2.3 branch prior to 2.3.10, API routes remain a

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.0.dev45, multiple cr

A security flaw has been discovered in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected by this

libtpms, a library that provides software emulation of a Trusted Platform Module, has a flaw in versions 0.10.0 and 0.10

AdonisJS is a TypeScript-first web framework. A Path Traversal vulnerability in AdonisJS multipart file handling may all

Emlog is an open source website building system. Versions up to and including 2.5.19 are vulnerable to server-side Out-o

Emlog is an open source website building system. Version 2.5.23 has a stored cross-site scripting vulnerability that can

Emlog is an open source website building system. Version 2.5.23 has a stored cross-site scripting vulnerability in the `

Emlog is an open source website building system. In version 2.5.23, article creation functionality is vulnerable to cros

A vulnerability was found in code-projects Online Music Site 1.0. This impacts an unknown function of the file /Frontend

A vulnerability has been found in code-projects Online Music Site 1.0. This affects an unknown function of the file /Fro

Emlog is an open source website building system. In version 2.5.23, the admin can set controls which makes users unable

A flaw has been found in code-projects Online Music Site 1.0. The impacted element is an unknown function of the file /F

A vulnerability was detected in code-projects Content Management System 1.0. The affected element is an unknown function

A security vulnerability has been detected in code-projects Content Management System 1.0. Impacted is an unknown functi

In the plex.tv backend for Plex Media Server (PMS) through 2025-12-31, a non-server device token can retrieve share toke

In the plex.tv backend for Plex Media Server (PMS) through 2025-12-31, a non-server device token can retrieve other toke

In Plex Media Server (PMS) through 1.42.2.10156, ability to access /myplex/account with a device token is not properly a

Plex Media Server (PMS) through 1.42.2.10156 allows retrieval of a permanent access token via a /myplex/account call wit

An issue in Vatilon v1.12.37-20240124 allows attackers to access sensitive directories and files via a directory travers

Vatilon v1.12.37-20240124 was discovered to transmit user credentials in plaintext.

An authentication bypass in the /cgi-bin/jvsweb.cgi endpoint of Revotech I6032W-FHW v1.0.0014 - 20210517 allows attacker

CasaOS versions up to and including 0.4.15 expose multiple unauthenticated endpoints that allow remote attackers to retr

A vulnerability was identified in Daptin 0.10.3. Affected by this vulnerability is the function goqu.L of the file serve

An exposure of sensitive system information to an unauthorized control sphere vulnerability has been reported to affect

Plane is an an open-source project management tool. In plane.io, a guest user doesn't have a permission to access https[

An integer underflow vulnerability exists in the `nextstate()` function in `gpsd/packet.c` of gpsd versions prior to com

gpsd before commit dc966aa contains a heap-based out-of-bounds write vulnerability in the drivers/driver_nmea2000.c file

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker

An external control of file name or path vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If an attac

A generation of error message containing sensitive information vulnerability has been reported to affect HBS 3 Hybrid Ba

An SQL injection vulnerability has been reported to affect Hyper Data Protector. The remote attackers can then exploit t

An SQL injection vulnerability has been reported to affect MARS (Multi-Application Recovery Service). The remote attacke

A path traversal vulnerability has been reported to affect Qfiling. The remote attackers can then exploit the vulnerabil

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker

A buffer overflow vulnerability has been reported to affect License Center. If a remote attacker gains an administrator

A path traversal vulnerability has been reported to affect several product versions. If a local attacker gains a user ac

An out-of-bounds read vulnerability has been reported to affect License Center. If a remote attacker gains a user accoun

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker

An improper control of generation of code vulnerability has been reported to affect Malware Remover. The remote attacker

SQL injection in gosaliajainam/online-movie-booking 5.5 in movie_details.php allows attackers to gain sensitive informat

A cross-site scripting (XSS) vulnerability has been reported to affect QuMagie. The remote attackers can then exploit th

An allocation of resources without limits or throttling vulnerability has been reported to affect several QNAP operating

An out-of-bounds read vulnerability has been reported to affect several QNAP operating system versions. If a remote atta

An out-of-bounds read vulnerability has been reported to affect several QNAP operating system versions. If a remote atta

An out-of-bounds read vulnerability has been reported to affect several QNAP operating system versions. If a remote atta

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker