2026

A weakness has been identified in Edimax BR-6675nD 1.12. This impacts the function formWpsStart of the file /goform/form

A security flaw has been discovered in Edimax BR-6675nD 1.12. This affects the function formHwSet of the file /goform/fo

A vulnerability was determined in JPress up to 1.0.3. The affected element is an unknown function of the file /ucenter/a

A vulnerability was found in yangzongzhuan RuoYi-Vue up to 3.9.2. Impacted is the function FileUploadUtils.upload of the

A security vulnerability has been detected in ItzCrazyKns Vane up to 1.12.1. Affected by this issue is some unknown func

A security flaw has been discovered in NousResearch hermes-agent 2026.4.23. Affected is the function _discover_dashboard

A vulnerability has been found in Ettercap up to 0.8.3. The affected element is the function FUNC_DECODER of the file sr

A vulnerability was detected in Edimax EW-7438RPn 1.12. This issue affects the function formEZCHNwlanSetup of the file /

A security vulnerability has been detected in Edimax EW-7438RPn 1.12. This vulnerability affects the function formConnec

A weakness has been identified in Edimax EW-7438RPn 1.12. This affects the function formAccept of the file /goform/formA

A vulnerability was identified in Edimax EW-7438RPn 1.28a. Affected by this vulnerability is the function formHwSet of t

A vulnerability was determined in postcss-selector-parser up to 6.1.2/7.1.2. Affected is the function toString of the fi

A vulnerability was detected in NousResearch hermes-agent up to 2026.4.16. The affected element is an unknown function o

A weakness has been identified in NousResearch hermes-agent up to 2026.4.23. This issue affects the function _make_run_e

A security flaw has been discovered in NousResearch hermes-agent up to 2026.4.16. This vulnerability affects the functio

A vulnerability was determined in calcom cal.diy up to 4.9.4. Affected by this issue is the function getServerSideProps

A vulnerability has been found in Edimax EW-7438RPn up to 1.31. Affected is the function formWizSurvey of the file /gofo

A weakness has been identified in Edimax EW-7438RPn up to 1.31. The affected element is the function formWpsStart of the

A security flaw has been discovered in SourceCodester Hospitals Patient Records Management System 1.0. Impacted is an un

Joomla Component jomres 9.11.2 contains a cross-site request forgery vulnerability that allows attackers to modify user

userSpice 4.3.24 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts through

Smartshop 1 contains a cross-site request forgery vulnerability that allows attackers to modify user profiles by trickin

A weakness has been identified in QuantumNous new-api up to 0.12.1. The impacted element is the function SearchUserTopUp

A security flaw has been discovered in calcom cal.diy up to 4.9.4. The affected element is the function validateUrlForSS

A vulnerability was identified in calcom cal.diy up to 4.9.4. Impacted is an unknown function. The manipulation leads to

A vulnerability was determined in 546669204 vps-inventory-monitoring up to 98c00b370668c96ae75e91c15548d9ea113652d9. Thi

A vulnerability was found in omec-project amf up to 2.1.1. This vulnerability affects unknown code of the component NGRe

A vulnerability has been found in omec-project amf up to 2.1.1. This affects an unknown part of the component NGSetupReq

A flaw has been found in omec-project amf up to 2.1.1. Affected by this issue is the function PDUSessionResourceModifyIn

A vulnerability was detected in omec-project amf up to 2.1.1. Affected by this vulnerability is an unknown functionality

A security vulnerability has been detected in Edimax BR-6428NS 1.10. Affected is the function formWlbasic of the file /g

A weakness has been identified in Edimax BR-6428NS 1.10. This impacts the function system of the file /goform/formWlanM

Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthoriz

RT is an open source, enterprise-grade issue and ticket tracking system. Versions prior to 5.0.10 and 6.0.0 through 6.0.

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, a malformed HEIF sequence file

JupyterHub is software that allows users to create a multi-user server for Jupyter notebooks. In versions 4.1.0 through

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. In versions 1

Devise is an authentication solution for Rails based on Warden. In versions 5.0.3 and below, when the Timeoutable module

TypeBot is a chatbot builder tool. In versions 3.16.0 and prior, the WhatsApp Cloud API webhook endpoint (POST /v1/works

TypeBot is a chatbot builder tool. In versions 3.15.2, the getLinkedTypebots API endpoint returns full bot definitions t

In Arm ArmNN through 2026-03-27, an integer overflow in TensorShape::GetNumElements() in armnn/Tensor.cpp allows a craft

TypeBot is a chatbot builder tool. In versions prior to 3.16.0, the Typebot viewer (packages/embeds/js) renders anchor t

HP ENVY 5000 series printers VERBASPP1N003.2237A.00 do not properly manage concurrent TCP connections to port 9100 (JetD

Directory Traversal vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and e

Cross Site Scripting vulnerability in Advantech WebAccess/SCADA 8.0-2015.08.16 allows a remote attacker to obtain sensit

Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to validate the OAuth

Typebot is a chatbot builder tool. In versions 3.15.2 and prior, the getResultLogs API endpoint authorizes the caller ag

Missing authorization in the entry status management feature in Devolutions Server allows a non-administrator authentica

Improper access control in the entry documentation and attachment features in Devolutions Server allows an authenticated

Improper input validation in the external authentication provider flow in Devolutions Server allows an unauthenticated r