2026

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.7.14, Deno's permission system enforces filesystem

Pi is a minimal terminal coding harness. From 0.74.0 until 0.78.1, Pi versions with temporary npm or git extension packa

A flaw was found in KubeVirt's safepath package used by virt-handler. The OpenAtNoFollow function uses O_PATH|O_NOFOLLOW

Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain an Improper Certificate Validation vulner

A flaw was found in Keycloak. A remote attacker with administrative privileges, specifically those with `manage-client`

pnpm is a package manager. Prior to 10.34.0 and 11.4.0, pnpm's patch application pipeline (@pnpm/patch-package) performs

CANBoat through 6.22, fixed in commit a5a22b7, contains an off-by-one global buffer overflow in the searchForPgn() funct

The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to

It is possible to bypass the Kerberos pre-authentication check in Apache Kerby by sending a PA-DATA with an unrecognized

Unauthenticated Broken Access Control in Newsletters <= 4.13 versions.

Budibase is an open-source low-code platform. Prior to 3.39.0, `GET /api/chat-links/:instance/:token/handoff` is a publi

A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown function of t

A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0/6.php. This impacts an unknown fu

A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function

A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0/7.php. Affected by this vuln

A vulnerability was identified in yashpokharna2555 restaurent-management-system. This affects an unknown function of the

A weakness has been identified in antlr ANTLR4 up to 4.13.2. Affected is an unknown function of the file tool/src/org/an

A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0/5.php. Affected by this vulnerabi

A flaw has been found in SourceCodester Class and Exam Timetabling System 1.0. Impacted is an unknown function of the fi

A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. The affected element is an unkno

A vulnerability was found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.04-jdk8-SNAPSHOT. The impacted element is the

A vulnerability was found in Feehi CMS up to 2.1.1. This vulnerability affects unknown code of the file /api/articles of

A vulnerability was determined in Hanwang e-Face General Management Platform 6.3.5.4. This issue affects some unknown pr

A weakness has been identified in itsourcecode Baptism Information Management System 1.0. The impacted element is an unk

A security vulnerability has been detected in itsourcecode Baptism Information Management System 1.0. This affects an un

Because O+ Connect's IPC service does not authenticate clients, external applications can escalate privileges and perfor

A vulnerability was detected in itsourcecode Online Hotel Management System 1.0. This impacts an unknown function of the

A flaw has been found in itsourcecode Online Hotel Management System 1.0. Affected is an unknown function of the file /a

A vulnerability was found in itsourcecode Online Hotel Management System 1.0. Affected by this issue is some unknown fun

A weakness has been identified in code-projects Real State Services 1.0. Impacted is an unknown function of the file /si

A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0/1.php. Affected by this vulnerabi

A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some u

A weakness has been identified in SourceCodester Inventory Management System 1.0. This vulnerability affects unknown cod

A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLo

A vulnerability was detected in liftoff-sr CIPster up to e8e9dba09bf56962807d3504b783ccdb6287f3e4. Affected by this issu

Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat's rewrite valve meant that if the first cond

Missing Critical Step in Authentication vulnerability in Apache Tomcat when the JNDIRealm was configured to authenticate

A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfil

OS command injection in the NodejsFunction Docker bundling pipeline (OsCommand helper) in AWS aws-cdk-lib on all platfor

Dell Device Management Agent, versions prior to DDMA 26.05, contain an Improper Link Resolution Before File Access ('Lin

Wagtail is an open source content management system built on Django. In versions prior to 7.0.8, 7.3.3 and 7.4.2, reflec

In Progress Flowmon versions prior to 12.5.9 and 13.0.11, a vulnerability exists whereby an authenticated low-privileged

Calling `curl_easy_pause()` within the event-based `CURLMOPT_SOCKETFUNCTION` callback triggers a use-after-free vulnerab

A flaw was found in GIMP's Paint Shop Pro (PSP) file format parser. This heap buffer overflow vulnerability allows a rem

A vulnerability was found in jairiidriss restaurant-website-php-mysql up to 521428b5b612449df0cf4a5d15ee40cba67f3d35. Th

A security flaw has been discovered in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 222ff31c06687b1c6d0e1ab63953f82

A vulnerability was found in CodeAstro Apartment Visitor Management System 1.0. Affected is an unknown function of the f

A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability i

A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some u

A security vulnerability has been detected in code-projects Online Voting System up to 0.x/1.0. This issue affects the f