2026

A vulnerability has been found in BareBones BBEdit up to 15.5.5. The affected element is an unknown function of the comp

Authorization Bypass Through User-Controlled Key vulnerability in ash-project ash_admin turns a record-lookup URL into a

Use of Insufficiently Random Values vulnerability in ash-project ash_admin ships a hardcoded, publicly known CSP nonce,

Stored Cross-site Scripting vulnerability in ash-project ash_admin executes attacker-supplied record content as script i

Reliance on Cookies without Validation and Integrity Checking vulnerability in ash-project ash_admin lets an attacker wh

A flaw has been found in BareBones BBEdit up to 15.5.5. Impacted is an unknown function of the component Java Language M

A vulnerability was detected in SeaCMS up to 13.6. This issue affects some unknown processing of the file /member.php?ac

A security vulnerability has been detected in SeaCMS up to 13.6. This vulnerability affects unknown code of the file /as

A weakness has been identified in SeaCMS up to 13.6. This affects an unknown part of the file /err.php. Executing a mani

A security flaw has been discovered in SeaCMS up to 13.6. Affected by this issue is some unknown functionality of the fi

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_ai discloses internal erro

Loop with Unreachable Exit Condition (Infinite Loop) vulnerability in ash-project ash_ai allows an attacker who can infl

Authorization Bypass Through User-Controlled Key vulnerability in ash-project ash_ai allows a caller of an identity-conf

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_ai discloses provider requ

A vulnerability was identified in SeaCMS up to 13.6. Affected by this vulnerability is the function unlink of the file /

A vulnerability was determined in SeaCMS up to 13.6. Affected is the function parseIf of the file search.php of the comp

A vulnerability was identified in TOTOLINK NR1800X 9.1.0u.6681_B20230703. This affects the function setUssd of the file

Origin Validation Error vulnerability in ash-project ash_ai allows a malicious web page to bypass the MCP server's DNS-r

Improper Control of Generation of Code (Code Injection) vulnerability in ash-project ash_ai allows a remote, unauthentic

A vulnerability was determined in LatencyUtils up to 2.0.3. Affected by this issue is the function LatencyStats.recordDe

A vulnerability was found in D-Link DIR-825M 1.1.8. Affected by this vulnerability is the function sub_456CF4 of the fil

A vulnerability has been found in LogNet grpc-spring-boot-starter up to 5.2.0. Affected is an unknown function of the co

A flaw has been found in D-Link DIR-825M 1.1.8. This impacts the function sub_41802C of the file /boafrm/formLtefotaUpgr

A vulnerability was detected in D-Link DIR-825M 1.1.8. This affects the function sub_46725C of the file /boafrm/formDisk

A security vulnerability has been detected in Open Asset Import Library Assimp up to 6.0.2. The impacted element is the

A weakness has been identified in Open5GS up to 2.7.7. The affected element is the function smf_nudm_sdm_handle_get of t

A security flaw has been discovered in Open5GS up to 2.7.7. Impacted is the function amf_namf_comm_handle_n1_n2_message_

A vulnerability was identified in Open5GS up to 2.7.7. This issue affects some unknown processing of the file src/amf/na

AJCloud AJY IPC firmware prior to version 01.10715.11.37 contains a path traversal vulnerability in the jdbhttpd web ser

A vulnerability was determined in Open5GS up to 2.7.7. This vulnerability affects the function amf_namf_comm_decode_ue_m

Exposure of Data Element to Wrong Session vulnerability in ash-project ash_graphql can deliver one subscription's resolv

Incorrect Authorization vulnerability in ash-project ash_graphql delivers GraphQL subscription payloads for records a su

Allocation of Resources Without Limits or Throttling vulnerability in ash-project ash_graphql allows an unauthenticated

Improper Input Validation vulnerability in ash-project ash_graphql allows an unauthenticated client to crash a relay nod

Incorrect Authorization vulnerability in ash-project ash_graphql allows an authenticated subscriber in one tenant to rec

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_graphql allows a remote cl

A vulnerability was found in Forgejo up to 15.0.4. This issue affects the function net.LookupIP of the file services/mig

A vulnerability has been found in TOTOLINK N600R 4.3.0cu.7866_B20220506. This vulnerability affects the function loginAu

A flaw has been found in SourceCodester Queue Management System 1.0. This affects an unknown part of the file /api/add_c

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ash-project ash_cloak allows anyone with acc

Deserialization of Untrusted Data vulnerability in ash-project ash_cloak allows an attacker who can influence the bytes

A vulnerability was detected in sambitraj Student Management System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. Affe

A security vulnerability has been detected in Linux Foundation Magma 1.9.0. Affected by this vulnerability is an unknown

A weakness has been identified in Linux Foundation Magma 1.9.0. Affected is an unknown function of the file ngap_amf_han

A security flaw has been discovered in Linux Foundation Magma 1.9.0. This impacts an unknown function of the component N

A vulnerability was identified in Linux Foundation Magma 1.9.0. This affects an unknown function of the component Securi

Unchecked Return Value vulnerability in ash-project ash_postgres allows a user who can drive a tenant rename to a name t

Admidio versions before 5.0.12 contain a broken access control vulnerability in profile_function.php that allows authent

Admidio before 5.0.12 fails to enforce login-only module restrictions in RSS feed endpoints for forum and announcements

Admidio before 5.0.12 fails to sanitize album names in the photo ZIP download functionality, allowing authenticated user