2026

Spring Framework applications that use Spring's data binding infrastructure to apply user-supplied property paths onto a

Spring MVC and WebFlux applications that obtain a data-binding Errors instance with HTML escaping enabled and then rende

Spring Security's InetAddressMatchers utility provides matchInternal() and matchExternal() builders for constructing an

Several components in Spring Security compare security-sensitive values using standard string equality (String.equals())

CC: Tweaked is a mod for Minecraft which adds programmable computers, turtles, and more to the game. Prior to 1.120.0, t

libreoffice-convert is a Node.js module for converting office documents to different formats. Prior to 1.8.2, index.js u

Silverstripe UserForms provides a visual form builder for the Silverstripe CMS. From 6.0.0 until 6.4.9, 7.0.7, and 7.1.1

Silverstripe Advanced Workflow is a highly configurable step-based workflow module. Prior to 6.4.5, 7.1.3, and 7.2.1, an

CakePHP Queue is a queue-interop compatible queueing library. From 0.1.11 until 2.3.1, QueueManager::getUniqueId() gener

n8n-nodes-sqlite3 is a node for operating a local SQLite database from n8n. Prior to 1.0.0, nodes/SqliteNode/v1/SqliteV1

Trilium is an open-source hierarchical note-taking application. In versions prior to 0.104.0, the automatic image-downlo

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on

Trilium is an open-source hierarchical note-taking application. In versions prior to 0.104.0, the default-on "Safe impor

An integer overflow in the SMF component of Open5GS v2.7.6 allows attackers to cause a Denial of Service (DoS) via suppl

Incorrect access control in /vfm-admin/ajax/sendfiles.php in Veno File Manager Project 4.4.9 allows an unauthenticated a

Veno File Manager Project Veno File Manager Project 4.4.9 is vulnerable to Incorrect Access Control in admin-head-update

Arbitrary File Rename Leading to Privilege Escalation in Actions::renameFile() function in Veno File Manager Project 4.4

Incorrect access control in /vfm-admin/ajax/streamvid.php in Veno File Manager Project in 4.4.9 allows an authenticated

Absolute Path Disclosure in /vfm-admin/assets/zipstream/grandt/relativepath/RelativePath.Example1.php in Veno File Manag

Arbitrary file write in /vfm-admin/index.php?section=translations&action=update in Veno File Manager Project 4.4.9 allow

Incorrect access control in /vfm-admin/admin-panel/view/save-cvs.php in Veno File Manager Project 4.4.9 allows an unauth

Path traversal leading to Arbitrary File Read in /vfm-admin/index.php and /vfm-admin/ajax/streamvid.php in Veno File Man

Veno File Manager Project 4.4.9 is vulnerable to Arbitrary File Deletion in /vfm-admin/index.php?section=translations&ac

User enumeration in /vfm-admin/ajax/usr-check.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker

A vulnerability in pentestgpt/core/langfuse.py in PentestGPT 1.0.0 allows remote attackers to disclose sensitive user te

A SQL injection vulnerability in NL2SQLTool in crewai-tools v1.10.2rc1 allows a remote attacker to execute arbitrary SQL

A vulnerability in FileWriterTool in crewai-tools <= 1.10.2rc1 allows a remote attacker to achieve code execution via ma

A vulnerability in the WebSocket endpoint of gpt-researcher v0.14.7 and before allows an unauthenticated remote attacker

BerriAI litellm <=1.82.4 is vulnerable to Server-Side Template Injection (SSTI), which allows unauthenticated remote att

Agno up to and including 2.5.8 is vulnerable to Remote Code Execution (RCE) via prompt injection. The PythonTools and Sh

An issue in the inviteController.js component in Bluewave Labs Checkmate <=3.3.0 allows remote authenticated administrat

A Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare.so library of LB-link R

A Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare.so library of LB-link R

DNG SDK versions 1.7.1 2502 and earlier are affected by an out-of-bounds write vulnerability that could lead to applicat

DNG SDK versions 1.7.1 2502 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory ex

An issue in Time4 Popcorn for Windows <= 6.2.1.18 and Time4Popcorn for MacOS <= 6.2.1.17 and Time4Popcorn for Android <=

EAZ EazyFix 12.9 allows a Security Feature Bypass related to a "Missing Cryptographic Step" associated with "Secure Boot

The Tutor LMS WordPress plugin before 4.0.6 does not prevent request data from overwriting internal variables while rend

ServiceNow has remediated an improper access control vulnerability that was identified in the ServiceNow AI platform. Th

ServiceNow has remediated a code injection vulnerability that was identified in the ServiceNow AI platform. This vulnera

Passing an effectively empty string to the `,ccs=` syntax extension of the mode argument in the `fopen` function in the

SpeechBrain before 1.1.1 contains an arbitrary code execution vulnerability that allows attackers to execute arbitrary c

Affected versions of Flowintel incorrectly attempted to validate login email addresses by calling Email(email). That doe

Affected versions of Flowintel do not revoke existing authenticated sessions when a user’s password is changed. This m

Affected versions of Flowintel construct timeline HTML using attacker-controllable MISP object fields such as: *

Affected versions of Flowintel expose the /my_assignment/user API endpoint to any authenticated API user. The endpoint a

Affected versions of Flowintel contain an authorization flaw in the administrative user-edit API. The existing authori

Affected versions of Flowintel contain an insecure direct object reference / broken object-level authorization issue acr