2026

A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an unknown function of the

GitAhead 2.5.0 through 2.7.1 contains an insecure update mechanism that installs downloaded updates without integrity or

Legcord 1.1.0 through 1.3.0 contains a configuration injection vulnerability that allows script in the Discord page to w

Legcord 1.1.0 through 1.3.0 contains a path traversal vulnerability in theme IPC handlers that allows script in the Disc

Chaterm before 0.12.1 contains a login cross-site request forgery vulnerability that allows remote attackers to inject l

maclof kubernetes-client 0.17.0 before 0.32.0 disables TLS certificate verification in parseKubeconfig() and parseKubeco

A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing o

A vulnerability has been found in Gerapy up to 0.9.13. This vulnerability affects the function project_create of the fil

A flaw has been found in code-projects Human Resource Management 1.0. This affects an unknown part of the file /humanres

A vulnerability was detected in itsourcecode Online Admission System 1.0. Affected by this issue is some unknown functio

A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03

A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b

A security flaw has been discovered in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b

A vulnerability was identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b

The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by default because the

The gist RubyGem before 6.1.0 contains an improper certificate validation vulnerability that allows on-path attackers to

Twine 2 desktop through 2.12.0 contains a cross-site scripting vulnerability in importStories() that executes markup fro

A vulnerability was determined in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b

A vulnerability was found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492

A vulnerability has been found in devopspolis secrets-replicator up to 0.4.0. Impacted is the function process_single_se

A flaw has been found in NASA cFS up to 7.0.1. This issue affects the function CFE_FS_ParseInputFileNameEx of the file c

A vulnerability was detected in crossplane crossplane-runtime up to 2.2.2/2.3.2. This vulnerability affects the function

Mammoth.js 1.3.0 before 1.12.3 contains a regular expression denial of service vulnerability in the style map tokeniser

gopay before 1.5.119 disables TLS certificate verification in defaultClient() in pkg/xhttp/client.go, allowing man-in-th

Cockpit CMS 2.12.0 before 2.14.1 disables TLS certificate verification in the cron.php web worker restart request, allow

go-micro before 6.0.0 contains an improper certificate validation vulnerability that allows network attackers to imperso

A flaw has been found in invariant-systems-ai aiir up to 1.7.0. The affected element is an unknown function of the compo

YesWiki before 4.6.7 contains a cross-site scripting vulnerability in the Bazar valeur action that allows page editors t

WWBN AVideo through 29.2.0 contains a stored cross-site scripting vulnerability that allows users with upload permission

WWBN AVideo 12.4 through 29.2.0 contains a stored cross-site scripting vulnerability that allows authenticated uploaders

Insertion of Sensitive Information Into Sent Data vulnerability in farvisun Mindio Magic MCP mindio-magic-mcp allows Ret

ZITADEL before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 UI because the 'ext

Zitadel before 4.16.2 contains a server-side request forgery vulnerability that allows attackers to make the server requ

ZITADEL 4.x before 4.17.1 does not check an organization's inactive state during Login V2 authentication, verifying only

ZITADEL 3.x before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 and Login V2 UI

ZITADEL before 4.17.1 contains an authentication bypass vulnerability in Login V2 that allows unauthenticated attackers

ZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains a missing authentication flaw in the hosted Login V1 UI, whose

ZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains an improper authorization vulnerability: when issuing passkey o

ZITADEL 4.x before 4.17.3 and 3.x through 3.4.15 protects IdP intent tokens with unauthenticated, malleable encryption,

ZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.17.3 creates links between user accounts and external identity providers

ZITADEL 3.0.0 through 3.4.15 and 4.x before 4.17.3 contains an incorrect authorization flaw in the User Service API, whi

SiYuan before 3.8.5 contains an information disclosure vulnerability that allows publish-mode readers to learn backlink

A vulnerability was detected in RainyGao DocSys up to 2.02.85. The impacted element is the function BaseController.creat

A security vulnerability has been detected in RainyGao DocSys up to 2.02.85. The affected element is the function DocCon

A weakness has been identified in YzmCMS up to 7.6. Impacted is the function Password of the file /common/function/syste

A security flaw has been discovered in mooSocial up to 3.2.4. This issue affects some unknown processing of the file /st

A vulnerability was identified in SciPhi-AI R2R up to 3.6.6. This vulnerability affects unknown code of the file py/shar

A vulnerability was determined in SciPhi-AI R2R up to 3.6.6. This affects an unknown part of the component JWT Secret Ha

Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes Cost Calculator Builder cost-calculato

A vulnerability was found in Comsenz Discuz! X5.0-20260801/X5.0-20260820/X5.0-20260910. Affected by this issue is the fu