2026

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, users with

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, the `ip_a

A security flaw has been discovered in atjiu pybbs 6.0.0. This impacts the function create of the file src/main/java/co/

A vulnerability was identified in atjiu pybbs 6.0.0. This affects the function create of the file src/main/java/co/yiiu/

The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for cer

Traefik is an HTTP reverse proxy and load balancer. Versions 2.11.40 and below, 3.0.0-beta1 through 3.6.11, and 3.7.0-ea

FileRise is a self-hosted web file manager / WebDAV server. In versions prior to 3.8.0, a missing-authentication vulnera

A vulnerability was determined in Yi Technology YI Home Camera 2 2.1.1_20171024151200. This affects an unknown function

A flaw has been found in itsourcecode University Management System 1.0. Impacted is an unknown function of the file /adm

Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. In versions 2.15.1 and below,

Discourse is an open-source discussion platform. Versions prior to 2026.3.0-latest.1, 2026.2.1, and 2026.1.2 allow a mod

Spring MVC and WebFlux applications are vulnerable to stream corruption when using Server-Sent Events (SSE). This issue

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, moderators

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to versi

1-byte OOB heap read in wc_PKCS7_DecodeEnvelopedData via zero-length encrypted content. A vulnerability existed in wolfS

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, the Post E

OpenClaw versions prior to 2026.2.22 contain a path traversal vulnerability in the static file handler that follows symb

OpenClaw versions prior to 2026.2.19 contain a race condition vulnerability in concurrent updateRegistry and removeRegis

OpenClaw versions prior to 2026.2.26 contain an authorization bypass vulnerability where DM pairing-store identities are

Missing required cryptographic step in the TLS 1.3 client HelloRetryRequest handshake logic in wolfSSL could lead to a c

OpenClaw versions prior to 2026.2.26 contain an authorization bypass vulnerability where Signal group allowlist policy i

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-a

Memray is a memory profiler for Python. Prior to Memray 1.19.2, Memray rendered the command line of the tracked process

StudioCMS is a server-side-rendered, Astro native, headless content management system. Prior to 0.4.4, the REST API `get

A flaw has been found in itsourcecode University Management System 1.0. Affected is an unknown function of the file /add

A vulnerability was detected in Portabilis i-Educar 2.11. This impacts an unknown function of the file /intranet/educar_

A vulnerability was identified in TRENDnet TEW-824DRU 1.010B01/1.04B01. The impacted element is the function sub_420A78

A compromised third party cloud server or man-in-the-middle attacker could send a malformed HTTP response and cause a cr

The GL-iNet Comet (GL-RM1) KVM connects to a GL-iNet site during boot-up to provision client and CA certificates. The GL

HCL Sametime is vulnerable to broken server-side validation. While the application performs client-side input checks, th

A flaw was found in libsoup. An attacker controlling the value used to set the Content-Type header can inject a Carriage

A flaw was found in libsoup. A remote attacker, by controlling the method parameter of the `soup_message_new()` function

A flaw was found in libsoup, a library used by applications to send network requests. This vulnerability occurs because

A vulnerability was identified in taoofagi easegen-admin up to 8f87936ac774065b92fb20aab55b274a6ea76433. Impacted is the

Mattermost versions 10.11.x <= 10.11.10 fail to properly validate permission requirements in the team member roles API e

A vulnerability was determined in CityData CityChat up to 0.12.6 on Android. Affected by this vulnerability is an unknow

A vulnerability was found in Albert Sağlık Hizmetleri ve Ticaret Albert Health up to 1.7.3 on Android. Affected is an un

A weakness has been identified in La Nacion App 10.2.25 on Android. This impacts an unknown function of the file source/

A security flaw has been discovered in BabyChakra Pregnancy & Parenting App up to 5.4.3.0 on Android. This affects an un

Mattermost versions 10.11.x <= 10.11.10 fail to validate user's authentication method when processing account auth type

HCL AION is affected by a vulnerability where certain identifiers may be predictable in nature. Predictable identifiers

HCL AION is affected by a vulnerability where certain offering configurations may permit execution of potentially harmfu

HCL AION is affected by a vulnerability where model packaging and distribution mechanisms may not include sufficient aut

HCL AION is affected by a vulnerability where internal filesystem paths may be exposed through application responses or

HCL AION is affected by a vulnerability related to the handling of upload size limits. Improper control or validation of

A vulnerability was found in Lagom WHMCS Template up to 2.3.7. Impacted is an unknown function of the component Datatabl

A security flaw has been discovered in CMS Made Simple up to 2.2.21. Impacted is an unknown function of the file admin/l

A vulnerability was determined in SSCMS up to 7.4.0. This vulnerability affects the function PathUtils.RemoveParentPath

A flaw has been found in INDEX Conferences & Exhibitions Organization YWF BPOF APGCS App up to 1.0.2 on Android. Affecte

A vulnerability was detected in myAEDES App up to 1.18.4 on Android. Affected is an unknown function of the file aedes/m