2026

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kriesi Enfold allo

In Eclipse Arrowhead versions from 5.0.0 to 5.2.1 when the MQTT API is enabled with the certificate authentication polic

In Eclipse Arrowhead versions from 5.0.0 to 5.2.1 the management-authorization gate that protects every /…/mgmt/… REST e

A remote code execution security issue exists in the affected products when parsing DOE files that could allow a remote

The administrative operations within the Carbon Console do not adequately validate specific user-supplied input. This ov

A vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools could elevate their p

A vulnerability exists in SYS600 which allows any user authenticated to the operating system of the server hosting the a

A CSV injection vulnerability exists in SYS600. Injected malicious formulas can add or modify data to the spreadsheet, i

SiYuan versions <= 3.8.1 (fixed in v3.8.2) contain an incomplete blocklist in the IsForbiddenAbsPath() function (kernel/

SiYuan before v3.8.2 logs API tokens from query parameters in plaintext to an accessible log file when full-text search

n8n versions before 2.36.2 contain a missing per-project authorization vulnerability in the Insights API routes that all

n8n versions before 2.34.1 contain a server-side request forgery vulnerability in the legacy request helper function exp

n8n before 1.123.73, 2.35.4, and 2.36.2 contains a credential exposure vulnerability in the Strapi, SeaTable, and Mailch

n8n versions before 1.123.73, 2.35.4, and 2.36.2 pass message content in the Gmail (v1) and Brevo nodes to the mail comp

n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain an expression sandbox escape in the $fromAI handler. $fromAI re

n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain a remote code execution vulnerability in the Git node. The node

n8n before 2.35.4 and 2.36.x before 2.36.2 contain a query injection vulnerability in the Elasticsearch Document Get All

n8n before 2.35.4 and 2.36.x before 2.36.2 does not validate credential references in the inline workflow JSON of nodes

n8n versions before 2.36.2 contain an expression sandbox bypass vulnerability where free identifiers in spread, computed

WWBN AVideo through commit c91b5975d contains a server-side request forgery vulnerability in the set_api_userImages API

AVideo through commit c91b5975d contains a server-side request forgery vulnerability in the EPG parser that allows authe

AVideo through commit c91b5975d contains a cross-site request forgery vulnerability in plugin/Live/saveLive.php that lac

AVideo through commit c91b5975d contains a cross-site request forgery vulnerability in removePoster.php that lacks forbi

AVideo through commit c91b5975d contains a cross-site request forgery and path traversal vulnerability in stopLive.php t

AVideo through commit c91b5975d contains a reflected cross-site scripting vulnerability in userLogin.php where the cance

AVideo through commit c91b5975d contains a reflected cross-site scripting vulnerability in videoEmbeded.php that echoes

WWBN AVideo contains a broken access control vulnerability in the unauthenticated feed/index.php endpoint that disables

WWBN AVideo fails to properly validate access controls on the public channel page, allowing unauthenticated visitors to

WWBN AVideo contains a SQL injection vulnerability in the sort column parameter of the get.json.php endpoint with APINam

WWBN AVideo contains an authentication failure vulnerability where the video_id_hash credential is a non-expiring, non-r

A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an

@fastify/http-proxy versions before 11.6.2 do not validate proxied HTTP request paths for backslash based dot-segments b

A vulnerability was found in NousResearch hermes-agent 0.18.0. This vulnerability affects the function resourceBufferFro

A vulnerability has been found in NousResearch hermes-agent 0.18.0. This affects the function fetchLinkTitle of the file

A flaw has been found in NousResearch hermes-agent 0.18.0. Affected by this issue is the function _sess_nowait of the fi

A vulnerability was detected in 2FastLabs agent-squad up to 1.1.4. Affected by this vulnerability is the function AgentS

Cheshire Cat AI's GET /memory/collections/{collection_id}/points endpoint fails to apply per-user filtering when retriev

LiME through 1.12.0 fails to validate the disk acquisition output path and does not use O_NOFOLLOW when opening the oper

zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function when proces

FreeRDP before 3.31.0 contains a heap out-of-bounds read vulnerability in the general_ChromaV1ToYUV444 function during A

FreeRDP versions 3.0.0 through 3.30.0 (before 3.31.0) transmit uninitialized heap memory in Save Session Info PDU reserv

Out-of-bounds Write and Improper Validation of Array Index vulnerability in Samsung Open Source TizenFX Samsung/TizenFX

A weakness has been identified in ZhongBangKeJi CRMEB up to 6.0.0. Affected by this vulnerability is the function eval o

A vulnerability was found in TOTOLINK CP450 4.1.0. The impacted element is an unknown function of the file /cgi-bin/cste

A vulnerability has been found in HKUDS AI-Trader up to d03ff6c056b32ced735adf7c19ed8175adb1c8df. The affected element i

A vulnerability was identified in langgenius dify 1.13.0. Affected by this vulnerability is the function router.replace

A vulnerability was determined in langgenius dify 1.13.0. Affected is the function router.replace of the file web/app/(s

SEPPmail Secure Email Gateway before 15.0.6 deserializes attacker-controlled data in a privileged REST import workflow w

SEPPmail Secure Email Gateway before 15.0.7 creates a fully privileged session before required multi-factor authenticati

SEPPmail Secure Email Gateway before 15.0.7 contains a command injection vulnerability that allows authenticated adminis