2026

A security vulnerability has been detected in klaussilveira GitList 2.0.0. Affected by this vulnerability is the functio

A vulnerability has been found in yaojingang GEOFlow up to 2.1.0. Impacted is the function DistributionController.isVali

A flaw has been found in yaojingang GEOFlow up to 2.1.0. This issue affects the function preview of the file app/Http/Co

A vulnerability was detected in yaojingang GEOFlow up to 2.1.0. This vulnerability affects the function unlink of the fi

A security vulnerability has been detected in yaojingang GEOFlow up to 2.1.0. This affects an unknown part of the file a

Nodemailer before 8.0.8 disables TLS certificate verification in lib/fetch/index.js through rejectUnauthorized: false, a

Nodemailer before 8.0.9 fails to sanitize carriage return and line feed characters in list comment fields, allowing atta

Nodemailer before 8.0.9 fails to enforce disableFileAccess and disableUrlAccess options during message normalization in

nodemailer before 9.0.1 fails to apply disableFileAccess and disableUrlAccess flags to message-level raw option, allowin

Undertow is a flexible performant web server used in JBoss EAP and WildFly. A flaw was found in how Undertow handles Web

An Incorrect Authorization vulnerability in GitHub Trigger Comment Control in Google Cloud Build prior to 2026-06-24 on

nodemailer before 6.9.9 contains a regular expression denial of service vulnerability in email parsing when attachDataUr

The default docker image shipped for Venueless did not properly ensure that uploaded SVG files could not be delivered wi

A security flaw has been discovered in valkey-io valkey 9.1.0. The affected element is the function handleClientsBlocked

A vulnerability was identified in PowerJob up to 5.1.2. Impacted is the function MuConnectionManager.getOrCreateConnecti

A vulnerability was determined in jeecgboot jeewx-boot up to 641ab52c3e1845fec39996d7794c33fb40dad1dd. This issue affect

When Apache Shiro is used with the Jakarta EE integration module, a low-privileged user can craft an HTTP request that c

A vulnerability was found in Colorful iGameCenter 2.0.0.81. This vulnerability affects the function sub_11504 in the lib

A vulnerability has been found in code-projects Simple Inventory System 1.0. This affects an unknown part of the file /r

A flaw has been found in code-projects Simple Inventory System 1.0. Affected by this issue is some unknown functionality

A vulnerability was detected in open62541 up to 1.5.5. Affected by this vulnerability is the function UA_DataValue_backe

A security vulnerability has been detected in code-projects Employee Leave Managing System 1.0. Affected is an unknown f

The 爱采集数据采集和发布插件 WordPress plugin through 1.0.0 does not restrict which of its handler methods a request may invoke, and

GROWI contains an incorrect authorization vulnerability. If this vulnerability is exploited, an unauthenticated attacker

Dell PowerStore contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with

GROWI contains a vulnerability with an authorization bypass through user-controlled key in the bookmark folder APIs. If

NSP is vulnerable to an open redirect due to insufficient server-side validation of the URL (or redirect) parameter.

NSP is vulnerable to a stored XSS due to insufficient validation or encoding of user-controlled input in a workflow appl

WaveSuite is affected by an insufficient role-based access control vulnerability in the CPB Log Files feature. Successfu

A weakness has been identified in Soarkey StudentManagement and 学生信息管理系统 up to e08f7f1d5015af407aa4cca0ada3dea189b4937e.

A security flaw has been discovered in Soarkey StudentManagement and 学生信息管理系统 up to e08f7f1d5015af407aa4cca0ada3dea189b4

A vulnerability was identified in Systerel S2OPC up to 1.7.3. The impacted element is the function monitored_item_event_

A vulnerability was determined in Systerel S2OPC up to 1.7.3. The affected element is the function set_range_matrix_on_s

A vulnerability was found in TOTOLINK NR1800X 9.1.0u.6681_B20230703. Impacted is the function setUploadSetting of the fi

A vulnerability has been found in itsourcecode Online Medicine Delivery System 1.0. This issue affects the function Cust

A flaw has been found in itsourcecode Online Medicine Delivery System 1.0. This vulnerability affects the function loadR

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_phoenix writes the entire

Permissive Regular Expression vulnerability in ash-project ash_phoenix lets a remote client select the tenant an Ash app

Authorization Bypass Through User-Controlled Key vulnerability in ash-project ash_phoenix lets an attacker who controls

Incorrect Authorization vulnerability in ash-project ash_phoenix invokes the SubdomainHook authorization callback with a

A vulnerability was detected in itsourcecode Online Medicine Delivery System 1.0. This affects the function loadResultLi

A security vulnerability has been detected in itsourcecode Online Medicine Delivery System 1.0. Affected by this issue i

A weakness has been identified in itsourcecode Online Medicine Delivery System 1.0. Affected by this vulnerability is th

A security flaw has been discovered in itsourcecode Online Medicine Delivery System 1.0. Affected is the function Employ

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the f

Allocation of Resources Without Limits or Throttling vulnerability in ash-project ash_admin lets any client that can rea

Improper Encoding or Escaping of Output vulnerability in ash-project ash_admin lets an attacker who controls a record's

Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability in ash-project ash_admin allo

A vulnerability was determined in Kamailio up to 5.5.0/6.0.7. This affects the function get_4bytes of the file src/modul

A vulnerability was found in Cozmoslabs Profile Builder Plugin up to 3.16.1 on WordPress. The impacted element is the fu