2026

Zammad is a web based open source helpdesk/customer support system. In 7.0.3 and 7.1.1, an authenticated administrator c

Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, zammad's HTML sanitizer, which block

Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, when creating or updating an email s

Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, an authenticated user with agent per

Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, attacker-controlled HTML in inbound

Zammad is a web based open source helpdesk/customer support system. In 7.0.3 and 7.1.1, under certain conditions, Zammad

GLPI is a free asset and IT management software package. From 0.85 until 10.0.26 and 11.0.8, a low-privileged authentica

GLPI is a free asset and IT management software package. From 11.0.6 until 11.0.8, an authenticated technician can store

GLPI is a free asset and IT management software package. From 9.4.0 until 10.0.26 and 11.0.8, an attacker with the READ

GLPI is a free asset and IT management software package. From 0.84 until 10.0.26 and 11.0.8, an administrator holding th

GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, a low-privileged authenticated user c

GLPI is a free asset and IT management software package. From 11.0.5 until 11.0.8, under certain conditions, permission

GLPI is a free asset and IT management software package. From 0.70 until 10.0.26 and 11.0.8, a technician can manipulate

GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, an attacker can craft a URL for a das

GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, the time-based one-time password veri

GLPI is a free asset and IT management software package. From 0.70 until 10.0.26 and 11.0.8, an authenticated hotliner o

GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, a form administrator can use Form imp

GLPI is a free asset and IT management software package. From 10.0.0 until 10.0.26 and 11.0.8, any logged-in GLPI user c

GLPI is a free asset and IT management software package. From 0.72 until 10.0.26 and 11.0.8, an authenticated user witho

TDuck survey form through 6.0 fails to validate write passwords on submission endpoints, enforcing the check only on the

TDuck survey form through 6.0 fails to enforce form fill-in restrictions on the authenticated submission endpoint POST /

TDuck survey form 6.0 contains an information disclosure vulnerability in FormAuthUtils.hasPermission that fails open wh

TDuck survey form through 6.0 lacks authorization checks on FormThemeController write endpoints for global form themes a

X-SpringBoot through 6.0 exposes appKey and appSecret credentials in the GET /application/manager/select endpoint withou

A vulnerability has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be

A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affecte

A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be.

A security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db

A weakness has been identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be

Bludit CMS through 3.22.0 contains an authorization bypass vulnerability that allows authenticated users with the Author

A flaw was found in NetworkManager-vpnc, a VPN plugin for NetworkManager. A local unprivileged user can exploit this vul

A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to r

A flaw was found in NetworkManager-fortisslvpn, the FortiSSLVPN plugin for NetworkManager. The nm-fortisslvpn-service im

A flaw was found in NetworkManager-sstp, the SSTP VPN plugin for NetworkManager. A local unprivileged user can exploit t

Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, a security filter that protects Zamm

Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, the legacy destroy_form action on At

Zammad is a web based open source helpdesk/customer support system. In 7.0.2 and 7.1.0, zammad's session management for

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2 and 7.1.0, zammad's HTML sanitizer (H

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, during federated authentication (OAu

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2 and 7.1.0, this issue concerns a lack

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, vulnerability in Zammad's HTML sanit

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1, a low-privilege authenticated user m

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, an authorization bypass vulnerabilit

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, a broken access control vulnerabilit

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, summary In Zammad's inbound PGP emai

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, this vulnerability breaks normal tic

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, summary An unauthenticated request t

A security flaw has been discovered in zhistaredu StarTraining up to 3.8.1. The affected element is an unknown function

A vulnerability was identified in zhistaredu StarTraining up to 3.8.1. Impacted is the function anonymous of the file /d

A vulnerability was determined in zhistaredu StarTraining up to 3.8.1. This issue affects the function UserLoginService.