2026

OrcaStatLLM Researcher is an LLM Based Research Paper Generator. A Stored Cross-Site Scripting (XSS) vulnerability was d

OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Z

OpenProject is an open-source, web-based project management software. Prior to 17.0.2, the drag&drop handler moving an a

OpenSTAManager is an open source management software for technical assistance and invoicing. OpenSTAManager v2.9.8 and e

Gogs is an open source self-hosted Git service. In version 0.13.3 and prior, a path traversal vulnerability exists in th

Gogs is an open source self-hosted Git service. In version 0.13.3 and prior, there is an arbitrary file read/write via p

Gogs is an open source self-hosted Git service. In version 0.13.3 and prior, the endpoint "PUT /repos/:owner/:repo/conte

Gogs is an open source self-hosted Git service. In version 0.13.3 and prior, an authenticated user can cause a DOS attac

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Xerox Centr

Gophish <=0.12.1 is vulnerable to Incorrect Access Control. The administrative dashboard exposes each user’s long-lived

Gogs is an open source self-hosted Git service. In version 0.13.3 and prior, Gogs’ 2FA recovery code validation does not

Infor SyteLine ERP uses hard-coded static cryptographic keys to encrypt stored credentials, including user passwords, da

A vulnerability has been found in SourceCodester Medical Center Portal Management System 1.0. Affected is an unknown fun

A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This im

MuPDF versions 1.23.0 through 1.27.0 contain a double-free vulnerability in fz_fill_pixmap_from_display_list() when an e

Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1

Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1

Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1

Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1

Gogs is an open source self-hosted Git service. In version 0.13.3 and prior, due to the insufficient patch for CVE-2024-

JumpStart 0.6.0.0 contains an unquoted service path vulnerability in the jswpbapi service running with LocalSystem privi

SecurOS Enterprise 10.2 contains an unquoted service path vulnerability in the SecurosCtrlService that allows local user

TheJshen ContentManagementSystem 1.04 contains a SQL injection vulnerability that allows attackers to manipulate databas

Acer Launch Manager 6.1.7600.16385 contains an unquoted service path vulnerability in the DsiWMIService that allows loca

Millhouse-Project 1.414 contains a persistent cross-site scripting vulnerability in the comment submission functionality

thejshen Globitek CMS 1.4 contains a SQL injection vulnerability that allows attackers to manipulate database queries th

RimbaLinux AhadPOS 1.11 contains a SQL injection vulnerability in the 'alamatCustomer' parameter that allows attackers t

html5_snmp 1.11 contains multiple SQL injection vulnerabilities that allow attackers to manipulate database queries thro

html5_snmp 1.11 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scrip

BlueStacks App Player 2.4.44.62.57 contains an unquoted service path vulnerability in the BstHdLogRotatorSvc service tha

Alps HID Monitor Service 8.1.0.10 contains an unquoted service path vulnerability that allows local attackers to potenti

Wondershare Application Framework Service 2.4.3.231 contains an unquoted service path vulnerability that allows local at

A vulnerability was detected in SourceCodester Medical Center Portal Management System 1.0. This affects an unknown func

Mattermost Confluence plugin version <1.7.0 fails to properly escape user-controlled display names in HTML template rend

A security vulnerability has been detected in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. The impacted element is an u

Insufficient escaping of unicode characters in query log in Neo4j Enterprise and Community editions prior to 2026.01 can

Local privilege escalation vulnerability via insecure temporary batch file execution in ESET Management Agent

A weakness has been identified in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. The affected element is an unknown funct

A security flaw has been discovered in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. Impacted is an unknown function of

A flaw has been found in itsourcecode School Management System 1.0. This affects an unknown part of the file /ramonsys/s

A vulnerability was detected in IP-COM W30AP up to 1.0.0.11(1340). Affected by this issue is the function R7WebsSecurity

A security vulnerability has been detected in happyfish100 libfastcommon up to 1.0.84. Affected by this vulnerability is

The Yoast SEO – Advanced SEO with real-time guidance and built-in AI plugin for WordPress is vulnerable to Stored Cross-

A weakness has been identified in Portabilis i-Educar up to 2.10. Affected is an unknown function of the file FinalStatu

A security flaw has been discovered in itsourcecode Student Management System 1.0. This impacts an unknown function of t

A vulnerability was identified in itsourcecode Student Management System 1.0. This affects an unknown function of the fi

Out-of-bounds write vulnerability in the file system module. Impact: Successful exploitation of this vulnerability may a

Out-of-bounds access vulnerability in the frequency modulation module. Impact: Successful exploitation of this vulnerabi

Vulnerability of improper permission control in the print module. Impact: Successful exploitation of this vulnerability

Permission control vulnerability in the AMS module. Impact: Successful exploitation of this vulnerability may affect ava