2026

MoguBlog through 6.2 contains a broken access control vulnerability that allows authenticated administrators to move or

MoguBlog through 6.2 contains an insecure direct object reference vulnerability that allows authenticated administrators

MoguBlog through 6.2 contains an insecure direct object reference vulnerability that allows authenticated administrators

MoguBlog through 6.2 contains an information disclosure vulnerability that allows low-privileged front-end users to read

yshop-crm through 2.1.3 contains a missing authorization vulnerability that allows any authenticated back-office user to

yshop-crm through 2.1.3 contains a missing authorization vulnerability that allows any authenticated back-office user to

yshop-crm through 2.1.3 contains a missing authorization vulnerability that allows any authenticated back-office user to

lamp-cloud through 5.10.1 contains an insecure direct object reference vulnerability that allows authenticated users to

TDuck survey form through 6.0 contains an insecure direct object reference vulnerability in the saveFormTheme handler th

lamp-cloud through 5.10.1 contains an insecure direct object reference vulnerability that allows authenticated users to

TDuck survey form through 6.0 contains a broken access control vulnerability that allows authenticated users to add fiel

TDuck survey form through 6.0 contains an insecure direct object reference vulnerability that allows authenticated users

mac-shell-mcp before 2.0.0 contains an OS command injection vulnerability that allows MCP clients to bypass the command

RT-Thread through 5.3.0 contains a memory corruption vulnerability in the legacy USB CDC virtual COM port driver that al

LavaLite CMS through 10.1.2 contains an authorization bypass vulnerability that allows authenticated low-privileged user

Open Source Social Network (OSSN) through 10.1 contains a missing authorization vulnerability in ossn_album_page_handler

A flaw has been found in Yungengxin Cloud Billing 2024.11.28.11. Affected by this vulnerability is the function sub_1400

A vulnerability has been found in Ollama up to 0.34.1. The affected element is the function IsValid of the file types/mo

A flaw has been found in Yungengxin Yun Jia Security Guard up to 2.7.1.9. Impacted is the function sub_14000885C in the

A vulnerability was detected in Cairo-dock Glx-Dock up to 3.4.0. This issue affects some unknown processing of the file

A security vulnerability has been detected in meetecho janus-gateway up to 1.4.2. This vulnerability affects unknown cod

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 does not properly account for symbolic links in the IsRightsAuthori

Improper Authorization vulnerability in Apache SkyWalking BanyanDB. The Canopy includes incomplete proof-of-concept r

A weakness has been identified in meetecho janus-gateway up to 1.4.2. This affects an unknown part of the file src/plugi

A security flaw has been discovered in Zen Cart up to 2.2.2. Affected by this issue is some unknown functionality of the

A vulnerability was identified in Zen Cart 2.2.2. Affected by this vulnerability is the function eval of the file admin/

A vulnerability was determined in Zen Cart up to 2.2.2. Affected is the function zen_call_function of the file admin/inc

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_typescript allows an unaut

A vulnerability was found in Zen Cart up to 2.2.2. This impacts the function zen_db_perform in the library includes/modu

A vulnerability has been found in yangzongzhuan RuoYi up to 4.8.3. This affects the function checkRoleAllowed of the fil

A flaw has been found in DataEase up to 3.0.0. The impacted element is the function Utils.buildCalcField of the file io/

An SQL Injection vulnerability affecting Tuleap Enterprise Edition 17.5 could allow an attacker to have read access the

An Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through

A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow

A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow

A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow

An OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker

An incorrect authorization vulnerability in the WinBox authentication flow of MikroTik RouterOS allows a remote authenti

Improper verification of cryptographic signature vulnerability in DigiDoc libdigidocpp, DigiDoc DigiDoc4, DigiDoc DigiDo

A vulnerability was detected in Kamailio up to 6.0.7/6.1.3. The affected element is the function isup_get_calling_party

A security vulnerability has been detected in Tencent WeKnora up to 0.8.1. Impacted is the function validateSubquery of

A weakness has been identified in agno-agi agno up to 3.0.6/3.1.1. This issue affects the function member_agent.run in t

A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1. This vulnerability affects the function exec of

A SQL Injection (SQLi) affects the Kong Gateway (Enterprise and Open Source) clustering communication logic when operati

A vulnerability was identified in agno-agi agno up to 2.7.3/3.0.6. This affects the function get_authentication_dependen

A vulnerability was determined in agno-agi agno up to 3.0.9. Affected by this issue is the function agno.CodingTools.run

A vulnerability was found in agno-agi agno up to 3.0.6. Affected by this vulnerability is the function run_python_code o

A vulnerability has been found in idcCMS 1.70. Affected is an unknown function of the file admin/member_deal.php. The ma

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DLX Plugins Custom

Missing Authorization vulnerability in WP Desk Flexible Subscriptions flexible-subscriptions allows Exploiting Incorrect