2026

A vulnerability was detected in xierongwkhd weimai-wetapp up to 5fe9e8225be4f73f2c5087f134aff657bdf1c6f2. This affects t

A flaw has been found in xierongwkhd weimai-wetapp up to 5fe9e8225be4f73f2c5087f134aff657bdf1c6f2. This vulnerability af

A weakness has been identified in phpipam up to 1.7.4. The impacted element is an unknown function of the file app/admin

A vulnerability has been found in itsourcecode College Management System 1.0. This issue affects some unknown processing

HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isola

A security flaw has been discovered in Tenda AC8 16.03.50.11. This affects the function route_set_user_policy_rule of th

A vulnerability was determined in taoofagi easegen-admin up to 8f87936ac774065b92fb20aab55b274a6ea76433. This issue affe

HTML Injection can be carried out in Product when a web application does not properly check or clean user input before s

The GL-iNet Comet (GL-RM1) KVM before version 1.8.2 does not sufficiently verify the authenticity of uploaded firmware f

JetKVM prior to 0.5.4 does not verify the authenticity of downloaded firmware files. An attacker-in-the-middle or a comp

SandboxJS is a JavaScript sandboxing library. Prior to 0.8.35, SandboxJS timers have an execution-quota bypass. A global

In wolfSSL 5.8.4, constant-time masking logic in sp_256_get_entry_256_9 is optimized into conditional branches (bnez) by

A vulnerability has been found in Comfast CF-AC100 2.6.0.8. This affects an unknown function of the file /cgi-bin/mbox-c

A vulnerability was found in Comfast CF-AC100 2.6.0.8. This impacts an unknown function of the file /cgi-bin/mbox-config

A vulnerability was determined in Comfast CF-AC100 2.6.0.8. Affected is an unknown function of the file /cgi-bin/mbox-co

A vulnerability was identified in itsourcecode Online Frozen Foods Ordering System 1.0. Affected by this vulnerability i

A security flaw has been discovered in itsourcecode Online Frozen Foods Ordering System 1.0. Affected by this issue is s

A weakness has been identified in itsourcecode Online Frozen Foods Ordering System 1.0. This affects an unknown part of

A vulnerability was detected in itsourcecode Online Doctor Appointment System 1.0. This issue affects some unknown proce

A vulnerability was determined in Cudy TR1200 R46-2.4.15-20250721-164017. Impacted is the function action_ipsec_conn of

A vulnerability has been found in code-projects Simple Gym Management System up to 1.0. This affects an unknown part of

A security vulnerability has been detected in yangzongzhuan RuoYi up to 4.8.2. This issue affects some unknown processin

A weakness has been identified in kalcaddle kodbox 1.64. This affects the function checkBin of the file /workspace/sourc

DiceBear is an avatar library for designers and developers. Starting in version 5.0.0 and prior to versions 5.4.4, 6.1.4

In the Linux kernel, the following vulnerability has been resolved: net: annotate data-races around sk->sk_{data_ready,

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix race in cpumap on PREEMPT_RT On PREEMPT_R

In the Linux kernel, the following vulnerability has been resolved: cxl: Fix race of nvdimm_bus object when creating nv

In the Linux kernel, the following vulnerability has been resolved: af_unix: Give up GC if MSG_PEEK intervened. Igor U

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Anti-Spam b

A vulnerability was determined in itsourcecode Free Hotel Reservation System 1.0. The affected element is an unknown fun

Streamlit is a data oriented application development framework for python. Streamlit Open Source versions prior to 1.54.

Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, `resolve

A vulnerability was identified in code-projects Chamber of Commerce Membership Management System 1.0. Impacted is the fu

A weakness has been identified in YunaiV yudao-cloud up to 2026.01. This vulnerability affects unknown code of the file

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorizati

A vulnerability was found in CMS Made Simple up to 2.2.22. This impacts the function _copyFilesToFolder in the library m

The application allows PDF JavaScript and document/print actions (such as WillPrint/DidPrint) to update form fields, ann

Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application version(s) 5.28.00.xx to 5.32.00.xx, contain(s) an Impro

The login mechanism of Sage DPW 2025_06_004 displays distinct responses for valid and invalid usernames, allowing enumer

Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0,

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorizati

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorizati

A vulnerability was determined in OpenCart 4.1.0.3. This affects an unknown part of the file installer.php of the compon

A security vulnerability has been detected in Tenda G103 1.0.0.5. The affected element is the function action_set_system

A vulnerability was detected in Tenda G103 1.0.0.5. The impacted element is the function action_set_net_settings of the

A vulnerability was determined in Dataease SQLbot up to 1.6.0. This issue affects the function get_es_data_by_http of th

hoppscotch is an open source API development ecosystem. Prior to version 2026.3.0, the /enter page contains a DOM-based

A weakness has been identified in Casdoor 2.356.0. This vulnerability affects unknown code of the component Webhook URL

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent concurrent access to IPSec ASO c

In the Linux kernel, the following vulnerability has been resolved: PM: runtime: Fix a race condition related to device