2026

nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus a

jq is a command-line JSON processor. Commits before 6374ae0bcdfe33a18eb0ae6db28493b1f34a0a5b contain a vulnerability whe

SAP BusinessObjects Business Intelligence application allows an authenticated attacker to inject malicious JavaScript pa

Due to missing authorization checks in the SAP S/4HANA frontend OData Service (Manage Reference Structures), an attacker

Due to missing authorization checks in the SAP S/4HANA backend OData Service (Manage Reference Structures), an attacker

Due to missing authorization checks in the SAP S/4HANA OData Service (Manage Reference Equipment), an attacker could upd

Due to missing authorization checks in the SAP S/4HANA OData Service (Manage Technical Object Structures), an attacker c

Due to a Code Injection vulnerability in SAP NetWeaver Application Server Java (Web Dynpro Java), an unauthenticated att

Due to a missing authorization check, SAP S/4HANA (Private Cloud and On-Premise) allows an authenticated user to delete

The Material Master application does not enforce authorization checks for authenticated users when executing reports, re

Due to an Insecure session management vulnerability in SAP Business Objects Business Intelligence Platform, an unauthent

Due to a Cross-Site Scripting (XSS) vulnerability in the SAP Supplier Relationship Management (SICF Handler in SRM Catal

The User Registration & Membership plugin for WordPress is vulnerable to Open Redirect in versions up to and including 5

jq is a command-line JSON processor. In commits before 2f09060afab23fe9390cce7cb860b10416e1bf5f, the jv_parse_sized() AP

jq is a command-line JSON processor. In commits after 69785bf77f86e2ea1b4a20ca86775916889e91c9, the _strindices builtin

A vulnerability was identified in HummerRisk up to 1.5.0. This vulnerability affects the function ServerService.addServe

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-1

ImageMagick is free and open-source software used for editing and manipulating digital images. Versions below 7.1.2-19 a

ImageMagick is free and open-source software used for editing and manipulating digital images. Versions below both 7.1.2

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-1

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-1

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.

jq is a command-line JSON processor. In versions 1.8.1 and below, functions jv_setpath(), jv_getpath(), and delpaths_sor

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.

A vulnerability was determined in aandrew-me ytDownloader up to 3.20.2. This affects the function child_process.exec of

A vulnerability was found in aandrew-me ytDownloader up to 3.20.2. Affected by this issue is the function createTextNode

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-1

EspoCRM is an open source customer relationship management application. In versions 9.3.3 and below, the POST /api/v1/Em

An issue in the Bluetooth RFCOMM service of Parani M10 Motorcycle Intercom v2.1.3 allows unauthorized attackers to cause

A HTML Injection vulnerability exists in the Dashboard module of Vtiger CRM 8.4.0. The application fails to properly neu

Vtiger CRM 8.4.0 contains a reflected cross-site scripting (XSS) vulnerability in the MailManager module. Improper handl

A weakness has been identified in DbGate up to 7.1.4. The impacted element is the function apiServerUrl1 of the file pac

A security flaw has been discovered in code-projects Easy Blog Site 1.0. This affects an unknown function of the file po

A vulnerability was identified in CodeAstro Online Job Portal 1.0. The impacted element is an unknown function of the fi

EspoCRM is an open source customer relationship management application. Versions 9.3.3 and below have a stored HTML inje

EspoCRM is an open source customer relationship management application. Versions 9.3.3 and below have an authenticated S

Pachno 1.0.6 contains an authentication bypass vulnerability in the runSwitchUser() action that allows authenticated low

Pachno 1.0.6 contains a cross-site request forgery vulnerability that allows attackers to perform arbitrary actions in a

Pachno 1.0.6 contains an open redirection vulnerability that allows attackers to redirect users to arbitrary external we

A vulnerability exists in the command handling of the IEC 61850 communication stack included in the product revisions li

A vulnerability was determined in itsourcecode Construction Management System 1.0. This affects an unknown function of t

A vulnerability was found in itsourcecode Construction Management System 1.0. The impacted element is an unknown functio

An issue was discovered in HAProxy before 3.3.6. The HTTP/3 parser does not check that the received body length matches

The bson_validate function may return early on specific inputs and incorrectly report success. This behavior could resul

Improper Neutralization of Input During Web Page Generation vulnerability allows Stored Cross-Site Scripting via event c

Missing Authorization vulnerability allows Exposure of Sensitive Information via configuration endpoint. This issue affe

Cross-Site Scripting vulnerability in the Snipe-IT web-based asset management system v8.3.0 to up and including v8.3.1 a

Rate Limiting for attempting a user login is not being properly enforced, making HCL DevOps Velocity susceptible to brut