2026

A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user with

A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an attacker who had code executio

A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user to cause

osTicket versions v1.18.3 and v1.17.7 contain a Broken Object Level Authorization (BOLA) leading to Insecure Direct Obje

HTTP::Date versions before 6.08 for Perl allow CPU exhaustion via polynomial regex backtracking in parse_date. parse_da

Missing Authorization in Google Cloud Firebase Studio versions prior to 2026-04-15 on Google Cloud Platform allows an at

SigNoz before 0.134.0 contains an open redirect vulnerability in the SSO authentication flow that allows unauthenticated

Cursor for Windows version 3.2.16 contains a binary planting vulnerability that allows remote attackers to achieve arbit

Incorrect access control in Proxmox Virtual Environment (PVE) 9.x qemu-server before 9.1.8 and 8.x before 8.4.8 allows u

A race condition between the vncproxy and vncwebsocket API calls in Proxmox Virtual Environment (PVE) 9.x pve-manager be

A cross-site scripting (XSS) vulnerability in Proxmox Virtual Environment (PVE) 9.x 5.1.8 and Proxmox Virtual Environmen

A flaw was found in the keycloak-services component of Red Hat Build of Keycloak. The issue occurs because OAuth 2.0 aut

A security flaw has been discovered in mosaxiv clawlet up to 0.2.10. Impacted is the function list/remove of the file to

Missing support for integrity check vulnerability in ABB KNX Update Tool (ABB), ABB KNX Update Tool (BJE). This issue a

SEPPmail Secure Email Gateway & SEPPmail Cloud before version 15.0.4.2 allows an attacker to replay & hijack a user sess

Insertion of sensitive information into sent data vulnerability in IKAS Technology Inc. E-Commerce allows Retrieve Embed

libpvestorage-perl v9.1.1 and libpve-storage-perl v8.3.7 were discovered to contain an XML External Entity (XXE) vulnera

A flaw was found in the organization management component of Keycloak. A delegated administrator with permission to mana

A vulnerability was identified in poco-ai poco-claw up to 0.5.4. This issue affects the function run_task of the file ex

A vulnerability was determined in poco-ai poco-claw up to 0.5.4. This vulnerability affects the function create_task of

AhnLab EPP Management v1.0.14.32-6249 was discovered to contain a NoSQL injection vulnerability via the eventlog/agentEv

HCL Aftermarket EPC is vulnerable to attack since HTTP OPTIONS method is enabled on this web server. The OPTIONS method

HCL Aftermarket EPC is vulnerable to attack as the application implements an HTML5 cross-origin resource sharing (CORS)

HCL Aftermarket EPC is vulnerable since the application does not have a validation for HOST header and accepts arbitrary

HCL Aftermarket EPC is vulnerable to attack since the application returns detailed error messages that leak information

HCL Aftermarket EPC is vulnerable to attack since It was found that a malicious actor can use brute-force techniques to

HCL Aftermarket EPC is vulnerable to attack since the Application is vulnerable to Lucky 13. that makes the SS LLUCKY13

HCL Aftermarket EPC is vulnerable to attack as cookie appears to contain a session token, which may increase the risk as

HCL Aftermarket EPC is vulnerable to attack since the application does not have an appropriate caching policy specifying

HCL Aftermarket EPC is affected by clickjacking vulnerability Cross-Frame Scripting is an attack technique where an atta

HCL Aftermarket EPC is vulnerable to attack since the server is not configured with “X-XSS-Protection" header

HCL Aftermarket EPC is vulnerable to attacks since the server software version used by the application is revealed by th

HCL Aftermarket EPC is affected by Sensitive Information in GET method & in URL which allows application to pass sensiti

HCL Aftermarket EPC is vulnerable to brute force attacks since application doesn’t have captcha implemented. It can lead

HCL Aftermarket EPC is vulnerable to email flooding as the application does not have a proper mail limitation mechanism

HCL Aftermarket EPC is affected by Business Logic Vulnerability using which a non valid user of the application can obta

Improper restriction of XML external entity reference vulnerability in Netcad Software Inc. NetGIS allows Serialized Dat

Insertion of sensitive information into sent data vulnerability in Proliz Software Ltd. Co. Proliz's OBS allows Accessin

A vulnerability was found in code-projects Hospital Bed Management System 1.0. This affects an unknown part of the compo

Dancer::Plugin::Auth::Google versions before 0.08 for Perl have TLS verification disabled. The default user agent is in

GD::SecurityImage versions through 1.75 for Perl use rand to generate secrets. The random method creates the challenge

A vulnerability has been found in liftoff-sr CIPster up to 632336d414ef708a542377c1aa8d6fdb7c70a760. Affected by this is

A vulnerability was detected in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file

A flaw was found in the Keycloak keycloak-services component, which handles the management of identity providers. The is

Mattermost Desktop App versions <=6.2 6.0.2 5.6.13.0 fail to validate payloads sent from the Mattermost Web App to the D

Mattermost Desktop App versions <=6.2 5.5.13 6.0.2.0 fail to properly null check when checking for headers in the Matter

Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to drain the f

Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the

Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to drain the f

A security vulnerability has been detected in sagold json-schema-library 11.5.0/11.5.1. This impacts the function parseP