2026

An issue in Insiders Technologies GmbH e-invoice pro before release 1 Service Pack 2 allows a remote attacker to cause a

This vulnerability allows a Backup or Tape Operator to perform remote code execution (RCE) as root by creating a malicio

An issue in Technitium DNS Server v.13.5 allows a remote attacker to cause a denial of service via the rate-limiting com

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of Internatio

Mastodon is a free, open-source social network server based on ActivityPub. Mastodon 4.3 added notifications of severed

Mastodon is a free, open-source social network server based on ActivityPub. By nature, Mastodon performs a lot of outbou

OpenMetadata is a unified metadata platform. Versions prior to 1.11.4 are vulnerable to remote code execution via Server

CoreDNS is a DNS server that chains plugins. Prior to version 1.14.0, multiple CoreDNS server implementations (gRPC, HTT

A Improper Neutralization of Argument Delimiters vulnerability in Foomuuri can lead to integrity loss of the firewall co

An issue in GL Inet GL.Inet AX1800 Version 4.6.4 & 4.6.8 are vulnerable. GL.Inet AX1800 Version 4.6.4 & 4.6.8 in the GL.

The LuCI web interface on Gl Inet GL.Inet AX1800 Version 4.6.4 & 4.6.8 are vulnerable. Fix available in version 4.8.2 GL

A command injection vulnerability exists in the GL-iNet GL-AXT1800 router firmware v4.6.8. The vulnerability is present

Cross-Site Scripting in phpgurukul Hostel Management System v2.1 user-provided complaint fields (Explain the Complaint)

The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2,

RustFS is a distributed object storage system built in Rust. In versions 1.0.0-alpha.13 through 1.0.0-alpha.78, a flawed

RustFS is a distributed object storage system built in Rust. Prior to version 1.0.0-alpha.79, he `ImportIam` admin API v

Logging Redactor is a Python library designed to redact sensitive data in logs based on regex patterns and / or dictiona

Snuffleupagus is a module that raises the cost of attacks against website by killing bug classes and providing a virtual

Directus is a real-time API and App dashboard for managing SQL database content. Prior to version 11.14.0, an open redir

Preact, a lightweight web development framework, JSON serialization protection to prevent Virtual DOM elements from bein

A Improper Authorization vulnerability in Foomuuri llows arbitrary users to influence the firewall configuration.This is

An External Control of File Name or Path vulnerability in smb4k allowsl ocal users to perform a local root exploit via s

An Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability allows local users

Asseco ADMX system is used for processing medical records. It allows logged in users to access medical files belonging t

The `rsa` crate is an RSA implementation written in rust. Prior to version 0.9.10, when creating a RSA private key from

Parsl is a Python parallel scripting library. A SQL Injection vulnerability exists in the parsl-visualize component of v

ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In versions up to and inc

Miniflux 2 is an open source feed reader. Prior to version 2.2.16, Miniflux's media proxy endpoint (`GET /proxy/{encoded

The OWASP core rule set (CRS) is a set of generic attack detection rules for use with compatible web application firewal

Asseco InfoMedica is a comprehensive solution used to manage both administrative and medical tasks in the healthcare sec

Asseco InfoMedica is a comprehensive solution used to manage both administrative and medical tasks in the healthcare sec

A flaw was found in Ansible Automation Platform (AAP). Read-only scoped OAuth2 API Tokens in AAP, are enforced at the Ga

A flaw was identified in the NTLM authentication handling of the libsoup HTTP library, used by GNOME and other applicati

A message out-of-bounds read vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-

A message unchecked NULL return value vulnerability in Trend Micro Apex Central could allow a remote attacker to create

A LoadLibraryEX vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to load an atta

Projects using the SUSE Virtualization (Harvester) environment may expose the OS default ssh login password  if they are

NeuVector supports login authentication through OpenID Connect. However, the TLS verification (which verifies the remote

CoreShop is a Pimcore enhanced eCommerce solution. Prior to version 4.1.8, a blind SQL injection vulnerability exists in

n8n is an open source workflow automation platform. In versions from 0.150.0 to before 2.2.2, an authentication bypass v

NiceGUI is a Python-based UI framework. From versions v2.10.0 to 3.4.1, an unauthenticated attacker can exhaust Redis co

NiceGUI is a Python-based UI framework. From versions 2.22.0 to 3.4.1, an unsafe implementation in the pushstate event l

NiceGUI is a Python-based UI framework. From versions 2.22.0 to 3.4.1, an unsafe implementation in the click event liste

NiceGUI is a Python-based UI framework. From versions 2.13.0 to 3.4.1, there is a XSS risk in NiceGUI when developers pa

Missing Authorization vulnerability in G5Theme Zorka zorka allows Exploiting Incorrectly Configured Access Control Secur

Missing Authorization vulnerability in Campaign Monitor Campaign Monitor for WordPress allows Exploiting Incorrectly Con

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Noor Alam Easy Media Down

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in [email protected]

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ryan Sutana WP App

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hands01 e-shops e-