2026

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.2 IBM WebSphere Application Server Liberty could prov

A vulnerability has been found in itsourcecode College Management System 1.0. This vulnerability affects unknown code of

A vulnerability was found in itsourcecode College Management System 1.0. This issue affects some unknown processing of t

IDC SFX2100 Satalite Recievers set the `/etc/resolv.conf` file to be world-writable by any local user, allowing DNS reso

Race condition vulnerability in the device security management module. Impact: Successful exploitation of this vulnerabi

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Kings Plugins B2BKing Premium allows Phishing.This

A flaw has been found in Wavlink WL-NU516U1 240425. This affects the function ota_new_upgrade of the file /cgi-bin/adm.c

A vulnerability has been found in Wavlink WL-NU516U1 240425. This vulnerability affects the function usb_p910 of the fil

A vulnerability has been found in Wavlink NU516U1 251208. This vulnerability affects the function sub_405B2C of the file

A security vulnerability has been detected in code-projects Simple Flight Ticket Booking System 1.0. This impacts an unk

A vulnerability was detected in code-projects Simple Flight Ticket Booking System 1.0. Affected is an unknown function o

A vulnerability has been found in OpenCart 4.0.2.3. Affected by this issue is the function Save of the file admin/contro

A security vulnerability has been detected in ContiNew Admin up to 4.2.0. This issue affects the function URI.create of

A vulnerability was detected in SourceCodester Employee Task Management System 1.0. Impacted is an unknown function of t

A flaw has been found in SourceCodester Employee Task Management System up to 1.0. The affected element is an unknown fu

A vulnerability was detected in Comfast CF-AC100 2.6.0.8. This affects the function sub_44AC14 of the file /cgi-bin/mbox

Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-a

StudioCMS is a server-side-rendered, Astro native, headless content management system. Prior to 0.4.3, the REST API crea

A vulnerability was detected in xierongwkhd weimai-wetapp up to 5fe9e8225be4f73f2c5087f134aff657bdf1c6f2. This affects t

A flaw has been found in xierongwkhd weimai-wetapp up to 5fe9e8225be4f73f2c5087f134aff657bdf1c6f2. This vulnerability af

A weakness has been identified in phpipam up to 1.7.4. The impacted element is an unknown function of the file app/admin

A vulnerability has been found in itsourcecode College Management System 1.0. This issue affects some unknown processing

HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isola

A security flaw has been discovered in Tenda AC8 16.03.50.11. This affects the function route_set_user_policy_rule of th

A vulnerability was determined in taoofagi easegen-admin up to 8f87936ac774065b92fb20aab55b274a6ea76433. This issue affe

HTML Injection can be carried out in Product when a web application does not properly check or clean user input before s

The GL-iNet Comet (GL-RM1) KVM before version 1.8.2 does not sufficiently verify the authenticity of uploaded firmware f

JetKVM prior to 0.5.4 does not verify the authenticity of downloaded firmware files. An attacker-in-the-middle or a comp

SandboxJS is a JavaScript sandboxing library. Prior to 0.8.35, SandboxJS timers have an execution-quota bypass. A global

In wolfSSL 5.8.4, constant-time masking logic in sp_256_get_entry_256_9 is optimized into conditional branches (bnez) by

A vulnerability has been found in Comfast CF-AC100 2.6.0.8. This affects an unknown function of the file /cgi-bin/mbox-c

A vulnerability was found in Comfast CF-AC100 2.6.0.8. This impacts an unknown function of the file /cgi-bin/mbox-config

A vulnerability was determined in Comfast CF-AC100 2.6.0.8. Affected is an unknown function of the file /cgi-bin/mbox-co

A vulnerability was identified in itsourcecode Online Frozen Foods Ordering System 1.0. Affected by this vulnerability i

A security flaw has been discovered in itsourcecode Online Frozen Foods Ordering System 1.0. Affected by this issue is s

A weakness has been identified in itsourcecode Online Frozen Foods Ordering System 1.0. This affects an unknown part of

A vulnerability was detected in itsourcecode Online Doctor Appointment System 1.0. This issue affects some unknown proce

A vulnerability was determined in Cudy TR1200 R46-2.4.15-20250721-164017. Impacted is the function action_ipsec_conn of

A vulnerability has been found in code-projects Simple Gym Management System up to 1.0. This affects an unknown part of

A security vulnerability has been detected in yangzongzhuan RuoYi up to 4.8.2. This issue affects some unknown processin

A weakness has been identified in kalcaddle kodbox 1.64. This affects the function checkBin of the file /workspace/sourc

DiceBear is an avatar library for designers and developers. Starting in version 5.0.0 and prior to versions 5.4.4, 6.1.4

In the Linux kernel, the following vulnerability has been resolved: net: annotate data-races around sk->sk_{data_ready,

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix race in cpumap on PREEMPT_RT On PREEMPT_R

In the Linux kernel, the following vulnerability has been resolved: cxl: Fix race of nvdimm_bus object when creating nv

In the Linux kernel, the following vulnerability has been resolved: af_unix: Give up GC if MSG_PEEK intervened. Igor U

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Anti-Spam b

A vulnerability was determined in itsourcecode Free Hotel Reservation System 1.0. The affected element is an unknown fun

Streamlit is a data oriented application development framework for python. Streamlit Open Source versions prior to 1.54.