2026

A vulnerability was detected in D-Link DIR-825M 1.1.8. This affects the function sub_46725C of the file /boafrm/formDisk

A security vulnerability has been detected in Open Asset Import Library Assimp up to 6.0.2. The impacted element is the

A weakness has been identified in Open5GS up to 2.7.7. The affected element is the function smf_nudm_sdm_handle_get of t

A security flaw has been discovered in Open5GS up to 2.7.7. Impacted is the function amf_namf_comm_handle_n1_n2_message_

A vulnerability was identified in Open5GS up to 2.7.7. This issue affects some unknown processing of the file src/amf/na

AJCloud AJY IPC firmware prior to version 01.10715.11.37 contains a path traversal vulnerability in the jdbhttpd web ser

A vulnerability was determined in Open5GS up to 2.7.7. This vulnerability affects the function amf_namf_comm_decode_ue_m

Exposure of Data Element to Wrong Session vulnerability in ash-project ash_graphql can deliver one subscription's resolv

Incorrect Authorization vulnerability in ash-project ash_graphql delivers GraphQL subscription payloads for records a su

Allocation of Resources Without Limits or Throttling vulnerability in ash-project ash_graphql allows an unauthenticated

Improper Input Validation vulnerability in ash-project ash_graphql allows an unauthenticated client to crash a relay nod

Incorrect Authorization vulnerability in ash-project ash_graphql allows an authenticated subscriber in one tenant to rec

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_graphql allows a remote cl

A vulnerability was found in Forgejo up to 15.0.4. This issue affects the function net.LookupIP of the file services/mig

A vulnerability has been found in TOTOLINK N600R 4.3.0cu.7866_B20220506. This vulnerability affects the function loginAu

A flaw has been found in SourceCodester Queue Management System 1.0. This affects an unknown part of the file /api/add_c

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ash-project ash_cloak allows anyone with acc

Deserialization of Untrusted Data vulnerability in ash-project ash_cloak allows an attacker who can influence the bytes

A vulnerability was detected in sambitraj Student Management System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. Affe

A security vulnerability has been detected in Linux Foundation Magma 1.9.0. Affected by this vulnerability is an unknown

A weakness has been identified in Linux Foundation Magma 1.9.0. Affected is an unknown function of the file ngap_amf_han

A security flaw has been discovered in Linux Foundation Magma 1.9.0. This impacts an unknown function of the component N

A vulnerability was identified in Linux Foundation Magma 1.9.0. This affects an unknown function of the component Securi

Unchecked Return Value vulnerability in ash-project ash_postgres allows a user who can drive a tenant rename to a name t

Admidio versions before 5.0.12 contain a broken access control vulnerability in profile_function.php that allows authent

Admidio before 5.0.12 fails to enforce login-only module restrictions in RSS feed endpoints for forum and announcements

Admidio before 5.0.12 fails to sanitize album names in the photo ZIP download functionality, allowing authenticated user

Admidio before 5.0.12 contains a blind SQL injection vulnerability in the relation_type_list parameter of lists_show.php

SiYuan before v3.8.1 fails to properly escape block name, alias, and memo fields in hint, backlink, and breadcrumb rende

SiYuan before v3.8.1 contains a stored cross-site scripting vulnerability in confirmDialog() where unescaped package nam

SiYuan before v3.8.1 fails to filter invisible-tier content from SQL embed blocks, attribute-view keys, and attribute-vi

SiYuan before v3.8.1 does not apply the IsForbiddenAbsPath guard (introduced in GHSA-c8r8-95hg-mp34) to the /history/*pa

SiYuan 3.8.0 contains a path traversal / sensitive file exposure vulnerability in the RenderTemplate function (kernel/mo

SiYuan Windows installer before version 3.8.1 (affected versions >= 2.0.14) contains an uncontrolled search path element

WWBN AVideo contains a server-side request forgery filter bypass vulnerability in the isSSRFSafeURL function that fails

WWBN AVideo contains a cross-site request forgery vulnerability in sendEmail.json.php that allows authenticated administ

WWBN AVideo contains an unauthenticated reflected cross-site scripting vulnerability in the url2Embed.json.php endpoint

AVideo (current commit e01e41ecc and earlier) exposes stream credentials through the plugin/Live/view/Live_restreams/get

WWBN AVideo (current e01e41ecc and earlier) contains a brute-force rate limiting bypass in enforceRateLimit(), which pro

WWBN AVideo contains an unauthenticated credential submission vulnerability in plugin/Live/api/preauthorize.json.php tha

A vulnerability was determined in Linux Foundation Magma 1.9.0. The impacted element is an unknown function of the compo

A vulnerability was found in Linux Foundation Magma 1.9.0. The affected element is an unknown function of the file tasks

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the fi

Readest is an open-source e-book reader built on Tauri. In versions prior to 0.11.16, EPUB chapter HTML is sanitized wit

keploy versions 3.1.0 through 3.6.25 bind the agent control-plane HTTP server to all interfaces without authentication,

browser-use web-ui versions 2.0.0 through 3.0.0 write configured LLM API keys to disk in cleartext without encryption or

NextChat versions from 2.15.8 through 2.16.1 contain an improper URL validation vulnerability in the proxy endpoint that

jina-ai reader disables its private-address guard outside Google Cloud deployments, allowing unauthenticated attackers t

browser-use web-ui versions 2.0.0 through 3.0.0 fail to validate browser settings paths in run_agent_task, allowing atta

Qubes OS before qubes-core-dom0-linux 4.3.22 allows OS command injection during a qvm-copy-to-vm call from dom0 to an at