2026

A missing authentication for critical function vulnerability in KiloView Encoder Series could allow an unauthenticated a

Cross Site Scripting vulnerability in tale v.2.0.5 allows an attacker to execute arbitrary code.

Some VX800v v1.0 web interface endpoints transmit sensitive information over unencrypted HTTP due to missing application

Improper link resolution in USB HTTP access path in VX800v v1.0 allows a crafted USB device to expose root filesystem co

Improper handling of exceptional conditions in VX800v v1.0 in SIP processing allows an attacker to flood the device with

Improper link resolution in the VX800v v1.0 SFTP service allows authenticated adjacent attackers to use crafted symbolic

A weakness in the web interface’s application layer encryption in VX800v v1.0 allows an adjacent attacker to brute force

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that aut

The Icinga PowerShell Framework provides configuration and check possibilities to ensure integration and monitoring of W

Icinga 2 is an open source monitoring system. Starting in version 2.3.0 and prior to versions 2.13.14, 2.14.8, and 2.15.

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) th

immich is a high performance self-hosted photo and video management solution. Prior to version 2.5.0, API keys can escal

A vulnerability was identified in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. The impacted ele

A vulnerability was determined in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. The affected ele

A vulnerability was found in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. Impacted is an unknow

A HTML injection vulnerability exists in the file upload functionality of Cacti <= 1.2.29. When a file with an invalid f

The backup restore function does not properly validate unexpected or unrecognized tags within the backup file. When such

A vulnerability has been found in Bdtask SalesERP up to 20260116. This issue affects some unknown processing of the comp

A flaw has been found in D-Link DWR-M961 1.1.47. This vulnerability affects the function sub_419920 of the file /boafrm/

A vulnerability was detected in itsourcecode Society Management System 1.0. This affects an unknown part of the file /ad

An Insertion of Sensitive Information into Log File vulnerability in B&R PVI client versions prior to 6.5 may be abused

An input validation vulnerability in the flow.Tensor.new_empty/flow.Tensor.new_ones/flow.Tensor.new_zeros component of O

Parsec is a cloud-based application for cryptographically secure file sharing. In versions on the 3.x branch prior to 3.

CWE-276: Incorrect Default Permissions vulnerability exists that could cause privilege escalation through the reverse s

A security vulnerability has been detected in itsourcecode Society Management System 1.0. Affected by this issue is some

A weakness has been identified in itsourcecode Society Management System 1.0. Affected by this vulnerability is an unkno

A vulnerability was identified in itsourcecode School Management System 1.0. This impacts an unknown function of the fil

A vulnerability was determined in itsourcecode School Management System 1.0. This affects an unknown function of the fil

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Global Interactive

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Global Inte

An input validation vulnerability in the flow.scatter/flow.scatter_add component of OneFlow v0.9.0 allows attackers to c

A segmentation violation in the oneflow._oneflow_internal.autograd.Function.FunctionCtx.mark_non_differentiable componen

10-Strike Bandwidth Monitor 3.9 contains an unquoted service path vulnerability in multiple services that allows local a

SonarQube 8.3.1 contains an unquoted service path vulnerability that allows local attackers to gain SYSTEM privileges by

GOautodial 4.0 contains a persistent cross-site scripting vulnerability that allows authenticated agents to inject malic

CodeMeter 6.60 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary

BarcodeOCR 19.3.6 contains an unquoted service path vulnerability that allows local attackers to execute code with eleva

The Ruijie Networks Switch eWeb S29_RGOS version 11.4 contains a directory traversal vulnerability that allows unauthent

Audio Playback Recorder 3.2.2 contains a local buffer overflow vulnerability in the eject and registration parameters th

Tea LaTex 1.0 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary

Gnome Fonts Viewer 3.34.0 contains a heap corruption vulnerability that allows attackers to trigger an out-of-bounds wri

BearShare Lite 5.2.5 contains a buffer overflow vulnerability in the Advanced Search keywords input that allows attacker

MedDream PACS Server 6.8.3.751 contains an authenticated remote code execution vulnerability that allows authorized user

EasyPMS 1.0.0 contains an authentication bypass vulnerability that allows unprivileged users to manipulate SQL queries i

Liman 0.7 contains a cross-site request forgery vulnerability that allows attackers to manipulate user account settings

berliCRM 1.0.24 contains a SQL injection vulnerability in the 'src_record' parameter that allows remote attackers to man

TimeClock Software 1.01 contains an authenticated time-based SQL injection vulnerability that allows attackers to enumer

The Ultimate Project Manager CRM PRO version 2.0.5 contains a blind SQL injection vulnerability that allows attackers to

Ajenti 2.1.36 contains a post-authenticated remote command execution vulnerability that allows remote attackers to execu

Frigate Professional 3.36.0.9 contains a local buffer overflow vulnerability in the Pack File feature that allows attack