2026

The Fluent Forms Pro Add On Pack plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to

Insertion of Sensitive Information Into Sent Data vulnerability in Atlas Educational Software Industry Ltd. Co. K12net a

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Xpoda Türkiye Info

Improper Authentication vulnerability in Birtech Information Technologies Industry and Trade Ltd. Co. Senseway allows Au

In JetBrains Hub before 2025.3.119807 authentication bypass allowing administrative actions was possible

In JetBrains PyCharm before 2025.3.2 a DOM-based XSS on Jupyter viewer page was possible

In JetBrains YouTrack before 2025.3.119033 access tokens could be exposed in Mailbox logs

Apache Airflow versions 3.0.0 - 3.1.7, has vulnerability that allows authenticated UI users with permission to one or mo

Apache Airflow versions 3.1.0 through 3.1.6 contain an authorization flaw that can allow an authenticated user with cust

A vulnerability was found in D-Link DCS-931L up to 1.13.0. Impacted is the function doSystem of the file /setSystemAdmin

A vulnerability has been found in DouPHP up to 1.9. This issue affects some unknown processing of the file /admin/file.p

Authentication Bypass by Alternate Name vulnerability in Apache Shiro. This issue affects Apache Shiro: before 2.0.7.

A flaw has been found in itsourcecode News Portal Project 1.0. This vulnerability affects unknown code of the file /admi

A vulnerability was detected in code-projects Online Reviewer System 1.0. This affects an unknown part of the file /syst

Roundcube Webmail before 1.5.13 and 1.6 before 1.6.13, when "Block remote images" is used, does not block SVG feImage.

The Python code being run by 'runPython' or 'runPythonAsync' is not isolated from the rest of the JS code, allowing any

The Pydantic-AI MCP Run Python tool configures the Deno sandbox with an overly permissive configuration that allows the

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Zirve Infor

C&Cm@il developed by HGiga has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbit

C&Cm@il developed by HGiga has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrar

C&Cm@il developed by HGiga has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to rea

A security vulnerability has been detected in code-projects Online Reviewer System 1.0. Affected by this issue is some u

A weakness has been identified in code-projects Online Reviewer System 1.0. Affected by this vulnerability is an unknown

User credentials are stored using AES‑ECB encryption with a hardcoded key. An unauthenticated remote attacker obtaining

An unauthenticated remote attacker can bypass authentication by exploiting insufficient URI validation and using path tr

Improper length handling when parsing multiple cookie fields (including TRACKID) allows an unauthenticated remote attack

An unauthenticated remote attacker can send a crafted HTTP request containing an overly long SESSIONID cookie. This can

A security flaw has been discovered in code-projects Online Reviewer System 1.0. Affected is an unknown function of the

A vulnerability was identified in code-projects Online Reviewer System 1.0. This impacts an unknown function of the file

Products provided by Oki Electric Industry Co., Ltd. and its OEM products (Ricoh Co., Ltd., Murata Machinery, Ltd.) regi

GitLab has remediated a vulnerability in the Duo Workflow Service component of GitLab AI Gateway affecting all versions

MacroHub developed by GIGABYTE has a Local Privilege Escalation vulnerability. Due to the MacroHub application launching

A vulnerability was determined in D-Link DCS-933L up to 1.14.11. This affects an unknown function of the file /setSystem

A vulnerability was found in itsourcecode Event Management System 1.0. The impacted element is an unknown function of th

A flaw has been found in rachelos WeRSS we-mp-rss up to 1.4.8. Impacted is the function download_export_file of the file

The server identity check mechanism for firmware upgrade performed via command shell is insecurely implemented potential

A vulnerability was detected in rachelos WeRSS we-mp-rss up to 1.4.8. This issue affects some unknown processing of the

A weakness has been identified in code-projects for Plugin 1.0. This affects an unknown part of the file /Administrator/

A security flaw has been discovered in code-projects Online Music Site 1.0. Affected by this issue is some unknown funct

Versions of the package jsonpath before 1.3.0 are vulnerable to Arbitrary Code Injection via unsafe evaluation of user-s

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product supports old SSL

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product supports weak cr

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properl

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product is vulnerable to

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. Detailed messages are displayed

A vulnerability was identified in code-projects Online Music Site 1.0. Affected by this vulnerability is an unknown func

A vulnerability was determined in code-projects Online Music Site 1.0. Affected is an unknown function of the file /Admi

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properl

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The response header contains

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properl