2026

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 r

Vexa is an open-source, self-hostable meeting bot API and meeting transcription API. Prior to 0.10.0-260419-1910, the Ve

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5,

OS Command Injection Remote Code Execution Vulnerability in UI in Progress ADC Products allows an authenticated attacker

OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacke

OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacke

OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacke

A security vulnerability has been detected in rowboatlabs rowboat up to 0.1.67. This impacts the function tool_call of t

A vulnerability was identified in Tenda F451 1.0.0.7_cn_svn7958. The affected element is the function fromSafeClientFilt

A vulnerability was determined in Tenda F451 1.0.0.7_cn_svn7958. Impacted is the function fromwebExcptypemanFilter of th

A vulnerability was found in Tenda F451 1.0.0.7_cn_svn7958. This issue affects the function fromGstDhcpSetSer of the fil

A vulnerability has been found in Metasoft 美特软件 MetaCRM up to 6.4.0. This vulnerability affects the function Statement.e

A security vulnerability has been detected in moxi624 Mogu Blog v2 up to 5.2. Affected by this vulnerability is the func

In the Linux kernel, the following vulnerability has been resolved: X.509: Fix out-of-bounds access when parsing extens

A vulnerability was determined in 1024bit extend-deep up to 0.1.6. The impacted element is an unknown function of the fi

ThreatSonar Anti-Ransomware developed by TeamT5 has an Privilege Escalation vulnerability. Authenticated remote attacker

SKYSEA Client View and SKYMEC IT Manager provided by Sky Co.,LTD. configure the installation folder with improper file a

A weakness has been identified in TransformerOptimus SuperAGI up to 0.0.14. Affected by this issue is the function Uploa

ThreatSonar Anti-Ransomware developed by TeamT5 has an Arbitrary File Deletion vulnerability. Authenticated remote attac

A weakness has been identified in modelscope agentscope up to 1.0.18. This vulnerability affects the function _process_a

A security flaw has been discovered in modelscope agentscope up to 1.0.18. This affects the function _get_bytes_from_web

A vulnerability was identified in modelscope agentscope up to 1.0.18. Affected by this issue is the function _parse_url/

A vulnerability was determined in modelscope agentscope up to 1.0.18. Affected by this vulnerability is the function exe

A vulnerability was found in rickxy Hospital Management System up to 88a4290d957dc5bdde8a56e5ad451ad14f7f90f4. Affected

Initialization of a resource with an insecure default vulnerability exists in SD-330AC and AMC Manager provided by silex

SD-330AC and AMC Manager provided by silex technology, Inc. contain a stack-based buffer overflow vulnerability in proce

A security flaw has been discovered in langflow-ai langflow up to 1.1.0. This issue affects the function create_upload_f

A vulnerability was identified in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f90

A vulnerability was determined in brikcss merge up to 1.3.0. This affects an unknown part. Executing a manipulation of t

A flaw has been found in TransformerOptimus SuperAGI up to 0.0.14. Affected by this issue is the function get_vector_db_

A vulnerability was detected in H3C Magic B1 up to 100R004. Affected by this vulnerability is the function SetMobileAPIn

A security vulnerability has been detected in liangliangyy DjangoBlog up to 2.1.0.0. Affected is an unknown function of

A vulnerability was identified in liangliangyy DjangoBlog up to 2.1.0.0. The impacted element is an unknown function of

A vulnerability has been found in osuuu LightPicture up to 1.2.2. This issue affects some unknown processing of the file

A vulnerability was identified in kodcloud KodExplorer up to 4.52. This impacts the function fileGet of the file /app/co

A vulnerability was determined in kodcloud KodExplorer up to 4.52. This affects the function share.class.php::initShareO

A vulnerability has been found in H3C Magic B1 up to 100R004. The affected element is the function SetAPWifiorLedInfoByI

A flaw has been found in dameng100 muucmf 1.9.5.20260309. Impacted is the function getListByPage of the file /index/Sear

A security vulnerability has been detected in H3C Magic B0 up to 100R002. This vulnerability affects the function Edit_B

UI / API User with asset materialize permission could trigger dags they had no access to. Users are advised to migrate t

In case of SQL errors, exception/stack trace of errors was exposed in API even if "api/expose_stack_traces" was set to f

An example of BashOperator in Airflow documentation suggested a way of passing dag_run.conf in the way that could cause

Dag Authors, who normally should not be able to execute code in the webserver context could craft XCom payload causing t

The CMP – Coming Soon & Maintenance Plugin by NiteoThemes plugin for WordPress is vulnerable to arbitrary file upload an

Postiz is an AI social media scheduling tool. Prior to version 2.21.6, a file upload validation bypass allows any authen

Emissary is a P2P based data-driven workflow engine. In versions 8.42.0 and below, Executrix.getCommand() is vulnerable

Movary is a self hosted web app to track and rate a user's watched movies. Prior to version 0.71.1, an ordinary authenti

SecureDrop Client is a desktop app for journalists to securely communicate with sources and handle submissions on the Se

ChurchCRM is an open-source church management system. In versions prior to 7.2.0, the family record deletion endpoint (S

Movary is a self hosted web app to track and rate a user's watched movies. Prior to version 0.71.1, an ordinary authenti