2026

Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an information disclosure vulnerability that allows un

Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an improper access control vulnerability that allows u

Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an information disclosure vulnerability that allows un

Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an authorization bypass vulnerability that allows unau

Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an authentication bypass vulnerability that allows una

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatti

A vulnerability in Nuvation Energy nCloud VPN Service allowed Network Boundary Bridging.This issue affected the nCloud V

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Nuvation Ene

Unintended Proxy or Intermediary vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Network Boundary B

Insufficiently Protected Credentials vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Signature Spoo

Authentication Bypass Using an Alternate Path or Channel vulnerability in Nuvation Energy Multi-Stack Controller (MSC) a

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Nuvation Ene

A vulnerability in Nuvation Battery Management System allows Authentication Bypass.This issue affects Battery Management

listmonk is a standalone, self-hosted, newsletter and mailing list manager. Prior to version 6.0.0, lower-privileged use

MessagePack for Java is a serializer implementation for Java. A denial-of-service vulnerability exists in versions prior

Bagisto is an open source laravel eCommerce platform. A stored Cross-Site Scripting (XSS) vulnerability exists in Bagist

Bagisto is an open source laravel eCommerce platform. Versions prior to 2.3.10 are vulnerable to server-side template in

Bagisto is an open source laravel eCommerce platform. Versions prior to 2.3.10 are vulnerable to server-side template in

Bagisto is an open source laravel eCommerce platform. Versions prior to 2.3.10 are vulnerable to server-side template in

Bagisto is an open source laravel eCommerce platform. Prior to version 2.3.10, an Insecure Direct Object Reference vulne

Bagisto is an open source laravel eCommerce platform. In versions on the 2.3 branch prior to 2.3.10, API routes remain a

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.0.dev45, multiple cr

A security flaw has been discovered in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected by this

libtpms, a library that provides software emulation of a Trusted Platform Module, has a flaw in versions 0.10.0 and 0.10

AdonisJS is a TypeScript-first web framework. A Path Traversal vulnerability in AdonisJS multipart file handling may all

Emlog is an open source website building system. Versions up to and including 2.5.19 are vulnerable to server-side Out-o

Emlog is an open source website building system. Version 2.5.23 has a stored cross-site scripting vulnerability that can

Emlog is an open source website building system. Version 2.5.23 has a stored cross-site scripting vulnerability in the `

Emlog is an open source website building system. In version 2.5.23, article creation functionality is vulnerable to cros

A vulnerability was found in code-projects Online Music Site 1.0. This impacts an unknown function of the file /Frontend

A vulnerability has been found in code-projects Online Music Site 1.0. This affects an unknown function of the file /Fro

Emlog is an open source website building system. In version 2.5.23, the admin can set controls which makes users unable

A flaw has been found in code-projects Online Music Site 1.0. The impacted element is an unknown function of the file /F

A vulnerability was detected in code-projects Content Management System 1.0. The affected element is an unknown function

A security vulnerability has been detected in code-projects Content Management System 1.0. Impacted is an unknown functi

In the plex.tv backend for Plex Media Server (PMS) through 2025-12-31, a non-server device token can retrieve share toke

In the plex.tv backend for Plex Media Server (PMS) through 2025-12-31, a non-server device token can retrieve other toke

In Plex Media Server (PMS) through 1.42.2.10156, ability to access /myplex/account with a device token is not properly a

Plex Media Server (PMS) through 1.42.2.10156 allows retrieval of a permanent access token via a /myplex/account call wit

An issue in Vatilon v1.12.37-20240124 allows attackers to access sensitive directories and files via a directory travers

Vatilon v1.12.37-20240124 was discovered to transmit user credentials in plaintext.

An authentication bypass in the /cgi-bin/jvsweb.cgi endpoint of Revotech I6032W-FHW v1.0.0014 - 20210517 allows attacker

CasaOS versions up to and including 0.4.15 expose multiple unauthenticated endpoints that allow remote attackers to retr

A vulnerability was identified in Daptin 0.10.3. Affected by this vulnerability is the function goqu.L of the file serve

An exposure of sensitive system information to an unauthorized control sphere vulnerability has been reported to affect

Plane is an an open-source project management tool. In plane.io, a guest user doesn't have a permission to access https[

An integer underflow vulnerability exists in the `nextstate()` function in `gpsd/packet.c` of gpsd versions prior to com

gpsd before commit dc966aa contains a heap-based out-of-bounds write vulnerability in the drivers/driver_nmea2000.c file

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker

An external control of file name or path vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If an attac