2026

Free MP3 CD Ripper 2.8 contains a stack buffer overflow vulnerability that allows remote attackers to execute arbitrary

Elaniin CMS 1.0 contains an authentication bypass vulnerability that allows attackers to access the dashboard by manipul

BacklinkSpeed 2.4 contains a buffer overflow vulnerability that allows attackers to corrupt the Structured Exception Han

Mocha Telnet Lite for iOS 4.2 contains a denial of service vulnerability that allows attackers to crash the application

QlikView 12.50.20000.0 contains a denial of service vulnerability in the FTP server address input field that allows loca

The $uri$args concatenation in nginx configuration file present in Open Security Issue Management (OSIM) prior v2025.9.0

A vulnerability was found in jishenghua jshERP up to 3.6. The impacted element is the function install of the file /jshE

Session Fixation vulnerability in QR Menu Pro Smart Menu Systems Menu Panel allows Session Hijacking. This issue affect

Authorization Bypass Through User-Controlled Key vulnerability in QR Menu Pro Smart Menu Systems Menu Panel allows Explo

A vulnerability has been found in Open5GS up to 2.7.6. The affected element is the function sgwc_s11_handle_modify_beare

A flaw has been found in Open5GS up to 2.7.5. Impacted is the function ogs_gtp2_f_teid_to_ip of the file /sgwc/s11-handl

Stored Cross-Site Scripting (XSS) in RLE NOVA's PlanManager. This vulnerability allows an attacker to execute JavaScript

Improper Access Control vulnerability in Akın Software Computer Import Export Industry and Trade Ltd. QR Menu allows Aut

Session Fixation vulnerability in Akın Software Computer Import Export Industry and Trade Ltd. QR Menu allows Session Fi

Dell OpenManage Network Integration, versions prior to 3.9, contains an Improper Authentication vulnerability. A low pri

A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Nomad-Run

A missing validation of a user-controlled value in the TeamViewer DEX Client (former 1E Client) - Content Distribution S

An out-of-bounds read vulnerability in the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (Noma

An out-of-bounds read vulnerability in the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (Noma

An integer underflow in the UDP command handler of the TeamViewer DEX Client (former 1E Client) - Content Distribution S

A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior versi

A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior versi

A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior versi

Improper Link Resolution Before File Access (invoked by 1E‑Explorer‑TachyonCore‑DeleteFileByPath instruction) in TeamVie

In the Eclipse OMR port library component since release 0.2.0, an API function to return the textual names of all suppor

The Custom Login Page Customizer WordPress plugin before 2.5.4 does not have a proper password reset process, allowing a

SmarterTools SmarterMail versions prior to build 9518 contain an unauthenticated path coercion vulnerability in the bac

Hidden functionality issue exists in multiple MFPs provided by Brother Industries, Ltd., which may allow an attacker to

Multiple MFPs provided by Brother Industries, Ltd. does not properly validate server certificates, which may allow a man

A security vulnerability has been detected in SEMCMS 5.0. This vulnerability affects unknown code of the file /SEMCMS_In

A weakness has been identified in itsourcecode School Management System 1.0. This affects an unknown part of the file /r

Tanium addressed a SQL injection vulnerability in Asset.

Erugo is a self-hosted file-sharing platform. In versions up to and including 0.2.14, an authenticated low-privileged us

A security flaw has been discovered in PHPGurukul Hospital Management System 1.0. Affected by this issue is some unknown

A vulnerability was identified in jishenghua jshERP up to 3.6. Affected by this vulnerability is an unknown functionalit

A flaw has been found in Totolink A7000R 4.1cu.4154. This impacts the function CloudACMunualUpdateUserdata of the file /

soroban-sdk is a Rust SDK for Soroban contracts. Arithmetic overflow can be triggered in the `Bytes::slice`, `Vec::slice

Maker.js is a 2D vector line drawing and shape modeling for CNC and laser cutters. In versions up to and including 0.19.

`bulk_extractor` is a digital forensics exploitation tool. Starting in version 1.4, `bulk_extractor`’s embedded unrar co

A vulnerability was detected in Totolink A7000R 4.1cu.4154. This affects the function setUnloadUserData of the file /cgi

A security vulnerability has been detected in jishenghua jshERP up to 3.6. The impacted element is the function getBillI

A weakness has been identified in itsourcecode School Management System 1.0. The affected element is an unknown function

A security flaw has been discovered in D-Link DIR-823X 250416. Impacted is the function sub_41E2A0 of the file /goform/s

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color

Podman Desktop is a graphical tool for developing on containers and Kubernetes. A critical authentication bypass vulnera

NocoDB is software for building databases as spreadsheets. Prior to version 0.301.0, a stored cross-site scripting (XSS)

NocoDB is software for building databases as spreadsheets. Prior to version 0.301.0, an unvalidated redirect (open redir

NocoDB is software for building databases as spreadsheets. Prior to version 0.301.0, a blind Server-Side Request Forgery

NocoDB is software for building databases as spreadsheets. Prior to version 0.301.0, an authenticated user with org-leve

Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0, non-adm