2026

Missing Authorization vulnerability in varunvairavanlc LeadConnector leadconnector allows Exploiting Incorrectly Configu

Missing Authorization vulnerability in WPDeveloper NotificationX notificationx allows Exploiting Incorrectly Configured

The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulnerable to Insecure Dir

Any unauthenticated user can reset the WorkTime on-prem database configuration by sending a specific HTTP request to the

changedetection.io is a free open source web page change detection tool. In versions prior to 0.53.2, the `/static/<grou

Echo is a Go web framework. In versions 5.0.0 through 5.0.2 on Windows, Echo’s `middleware.Static` using the default fil

Missing Authorization vulnerability in DevsBlink EduBlink edublink allows Exploiting Incorrectly Configured Access Contr

Missing Authorization vulnerability in SeedProd Coming Soon Page, Under Construction & Maintenance Mode by SeedProd comi

A user enumeration vulnerability exists in FormaLMS 4.1.18 and below in the password recovery functionality accessible v

Server-Side Request Forgery (SSRF) vulnerability in OpenText™ XM Fax allows Server Side Request Forgery.  The vulnerabi

User Interface (UI) Misrepresentation of Critical Information vulnerability in OpenText™ Directory Services allows Cache

Tanium addressed an insertion of sensitive information into log file vulnerability in TanOS.

PJSIP is a free and open source multimedia communication library written in C. In versions 2.16 and below, there is a cr

Frappe Learning Management System (LMS) is a learning system that helps users structure their content. In versions 2.44.

uTLS is a fork of crypto/tls, created to customize ClientHello for fingerprinting resistance while still using it for th

This affects versions of the package bn.js before 5.2.3. Calling maskn(0) on any BN instance corrupts the internal state

Missing Authorization vulnerability in Anssi Laitila Shared Files shared-files.This issue affects Shared Files: from n/a

Missing Authorization vulnerability in SecuPress SecuPress Free secupress.This issue affects SecuPress Free: from n/a th

Path Traversal: '.../...//' vulnerability in primersoftware Primer MyData for Woocommerce primer-mydata allows Path Trav

OpenSourcePOS 3.4.1 has a second order SQL Injection vulnerability in the handling of the currency_symbol configuration

Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. In versions 5.

Werkzeug is a comprehensive WSGI web application library. Versions 3.1.5 and below, the safe_join function allows Window

A vulnerability was detected in Foswiki up to 2.1.10. The affected element is an unknown function of the component Chang

ASN.1 TypeScript ESM library, including codecs for Basic Encoding Rules (BER) and Distinguished Encoding Rules (DER). In

Static Web Server (SWS) is a production-ready web server suitable for static web files or assets. In versions 2.1.0 thro

OpenClaw is a personal AI assistant. In versions 2026.2.13 and below of the OpenClaw CLI, the process cleanup uses syste

A vulnerability was identified in funadmin up to 7.1.0-rc4. Affected by this vulnerability is the function getMember of

The The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce plugin for Wor

A security flaw has been discovered in FastApiAdmin up to 2.2.0. Affected by this vulnerability is the function reset_ap

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Jeff Starr Simple Ajax Chat

free5GC UDR is the user data repository (UDR) for free5GC, an an open-source project for 5th generation (5G) mobile core

free5gc UDM provides Unified Data Management (UDM) for free5GC, an open-source project for 5th generation (5G) mobile co

free5GC is an open-source project for 5th generation (5G) mobile core networks. Versions up to and including 1.4.1 of th

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-1

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-15

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-1

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-1

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-1

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-1

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-1

free5GC UDR is the user data repository (UDR) for free5GC, an an open-source project for 5th generation (5G) mobile core

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-15

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-1

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-1

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-1

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-1

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-1

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-1

RTU500 web interface: An unprivileged user can read user management information. The information cannot be accessed via

Piwigo is an open source photo gallery application for the web. In version 15.5.0 and likely earlier 15.x releases, the