2026

A vulnerability in danny-avila/librechat allows attackers to exploit the unrestricted Fork Function in `/api/convos/fork

The `SimpleDirectoryReader` component in `llama_index.core` version 0.12.23 suffers from uncontrolled memory consumption

In mlflow version 2.20.3, the temporary directory used for creating Python virtual environments is assigned insecure wor

A vulnerability in h2oai/h2o-3 version 3.46.0.1 allows remote attackers to write arbitrary data to any file on the serve

In lunary-ai/lunary version 1.2.2, an account hijacking vulnerability exists due to a password reset token leak. A user

In lunary-ai/lunary version 1.2.13, an insufficient granularity of access control vulnerability allows users to delete p

A Local File Inclusion (LFI) vulnerability exists in the '/reinstall_extension' endpoint of the parisneo/lollms-webui ap

A vulnerability has been discovered in GitLab CE/EE affecting all versions starting with 16.8 before 18.5.0 that could h

A vulnerability in the `lollms_generation_events.py` component of parisneo/lollms version 5.9.0 allows unauthenticated a

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service

In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service,

In wlan AP/STA firmware, there is a possible system becoming irresponsive due to an uncaught exception. This could lead

In Thread, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation o

In pcie, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p

In imgsys, there is a possible memory corruption due to improper locking. This could lead to local denial of service if

In imgsys, there is a possible escalation of privilege due to use after free. This could lead to local escalation of pri

In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

In cameraisp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation

In cameraisp, there is a possible escalation of privilege due to use after free. This could lead to local denial of serv

In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

In wlan, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote (proximal/adja

In wlan STA driver, there is a possible escalation of privilege due to a missing bounds check. This could lead to local

In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, i

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, i

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service

In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if

The unified WEBUI application of the ONT/Beacon device contains an input handling flaw that allows authenticated users t

Improper input verification issue exists in Cybozu Garoon 5.0.0 to 6.0.3, which may lead to unauthorized alteration of p

Cross-site scripting vulnerability exists in Message function of Cybozu Garoon 5.15.0 to 6.0.3, which may allow an attac

Cross-site scripting vulnerability exists in E-mail function of Cybozu Garoon 5.0.0 to 6.0.3, which may allow an attacke

The Five Star Restaurant Reservations WordPress plugin before 2.7.9 does not have CSRF checks in some bulk actions, whi

The Library Viewer WordPress plugin before 3.2.0 does not sanitise and escape some parameters before outputting them bac

The User Profile Builder WordPress plugin before 3.15.2 does not have a proper password reset process, allowing a few u

A vulnerability was identified in JeecgBoot 3.9.0. This vulnerability affects unknown code of the file /JeecgBoot/sys/ap

A vulnerability was determined in SourceCodester Medical Certificate Generator App 1.0. This affects an unknown part. Th

A flaw was found in foreman_kubevirt. When configuring the connection to OpenShift, the system disables SSL verification

A flaw was found in fog-kubevirt. This vulnerability allows a remote attacker to perform a Man-in-the-Middle (MITM) atta

A flaw was found in Keycloak Admin API. This vulnerability allows an administrator with limited privileges to retrieve s

The database account and password are hardcoded, allowing login with the account to manipulate the database in MagicInfo

An unauthenticated user can upload arbitrary files to execute remote code, leading to privilege escalation in MagicInfo9

A vulnerability in MagicInfo9 Server allows authorized users to upload HTML files without authentication, leading to Sto

RaspAP raspap-webgui versions prior to 3.3.6 contain an OS command injection vulnerability. If exploited, an arbitrary O

A vulnerability was found in D-Link DSL-6641K N8.TR069.20131126. Affected by this issue is the function doSubmitPPP of t

A vulnerability has been found in DJI Mavic Mini, Air, Spark and Mini SE up to 01.00.0500. Affected by this vulnerabilit

A vulnerability was identified in EFM ipTIME A8004T 14.18.2. Affected by this vulnerability is the function commit_vpncl