2026

Talishar is a fan-made Flesh and Blood project. Prior to commit 6be3871a14c192d1fb8146cdbc76f29f27c1cf48, the Talishar a

Dell Wyse Management Suite, versions prior to WMS 5.5, contain a Client-Side Enforcement of Server-Side Security vulnera

A vulnerability was determined in MuYuCMS 2.7. Affected is the function delete_dir_file of the file application/admin/co

A flaw has been found in horilla-opensource horilla up to 1.0.2. Impacted is an unknown function of the file static/asse

A security vulnerability has been detected in xingfuggz BaykeShop up to 1.3.20. Impacted is an unknown function of the f

A vulnerability was identified in AliasVault App up to 0.25.3 on Android/iOS. This vulnerability affects unknown code of

A vulnerability was determined in a466350665 Smart-SSO up to 2.1.1. This affects the function Save of the file smart-sso

A vulnerability was detected in Cesanta Mongoose up to 7.20. This impacts the function mg_chacha20_poly1305_decrypt of t

A security vulnerability has been detected in Cesanta Mongoose up to 7.20. This affects the function getpeer of the file

A weakness has been identified in Cesanta Mongoose up to 7.20. The impacted element is the function mg_sendnsreq of the

A security flaw has been discovered in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 1.2.9. The affected element is an unknown

A vulnerability was detected in rymcu forest up to 0.0.5. This affects the function updateUserInfo of the file - src/mai

A security vulnerability has been detected in rymcu forest up to 0.0.5. Affected by this issue is the function XssUtils.

A vulnerability was found in itsourcecode Student Management System 1.0. The impacted element is an unknown function of

A security vulnerability has been detected in YiFang CMS up to 2.0.5. This impacts the function update of the file app/d

A weakness has been identified in YiFang CMS up to 2.0.5. This affects the function update of the file app/db/admin/D_ad

A security flaw has been discovered in YiFang CMS up to 2.0.5. The impacted element is the function update of the file a

A vulnerability was determined in libvips up to 8.19.0. The affected element is the function vips_source_read_to_memory

A flaw has been found in skvadrik re2c up to 4.4. Impacted is the function check_and_merge_special_rules of the file src

A security vulnerability has been detected in funadmin up to 7.1.0-rc4. This vulnerability affects unknown code of the f

A security flaw has been discovered in funadmin up to 7.1.0-rc4. Affected by this issue is the function repass of the fi

A vulnerability was detected in CCExtractor up to 0.96.5. Affected is the function processmp4 in the library src/lib_ccx

A security vulnerability has been detected in aardappel lobster up to 2025.4. This impacts the function lobster::TypeNam

A vulnerability was identified in janet-lang janet up to 1.40.1. Affected by this vulnerability is the function janetc_v

BigBlueButton is an open-source virtual classroom. In versions 3.0.19 and below, when first joining a session with the m

A vulnerability was identified in wren-lang wren up to 0.4.0. This affects the function peekChar of the file src/vm/wren

A weakness has been identified in detronetdip E-commerce 1.0.0. This affects the function get_safe_value of the file uti

A vulnerability exists in EnOcean SmartServer IoT version 4.60.009 and prior, which would allow remote attackers, in th

HCL Connections is vulnerable to information disclosure. In a very specific user navigation scenario, this could allow

A vulnerability has been found in rachelos WeRSS we-mp-rss up to 1.4.8. This impacts the function fix_html of the file t

OpenClaw is a personal AI assistant. Prior to version 2026.2.15, `normalizeForHash` in `src/agents/sandbox/config-hash.t

Windmill is an open-source developer platform for internal code: APIs, background jobs, workflows and UIs. Versions 1.63

Cosign provides code signing and transparency for containers and binaries. In versions 3.0.4 and below, an issuing certi

Missing Authorization vulnerability in creativeinteractivemedia Real 3D FlipBook real3d-flipbook-lite allows Exploiting

A flaw was identified in the Docker v2 authentication endpoint of Keycloak, where tokens continue to be issued even afte

A flaw has been found in busy up to 2.5.5. The affected element is an unknown function of the file source-code/busy-mast

A weakness has been identified in xlnt-community xlnt up to 1.6.1. Impacted is the function xlnt::detail::decode_base64

A security flaw has been discovered in Beetel 777VR1 up to 01.00.09. This issue affects some unknown processing of the c

Gogs is an open source self-hosted Git service. In versions 0.13.4 and below, the DeleteComment API does not verify that

OpenClaw (formerly Clawdbot) is a personal AI assistant users run on their own devices. In versions 2026.2.2 and below,

The OneClick Chat to Order plugin for WordPress is vulnerable to authorization bypass in versions up to, and including,

A flaw was found in QEMU in the uefi-vars virtual device. When the guest writes to register UEFI_VARS_REG_BUFFER_SIZE, t

A flaw was found in FFmpeg’s TensorFlow backend within the libavfilter/dnn_backend_tf.c source file. The issue occurs in

A weakness has been identified in FascinatedBox lily up to 2.3. This vulnerability affects the function count_transforms

A security flaw has been discovered in Squirrel up to 3.2. This affects the function SQObjectPtr::operator in the librar

A vulnerability was identified in FascinatedBox lily up to 2.3. Affected by this issue is the function shorthash_for_nam

A vulnerability was determined in Squirrel up to 3.2. Affected by this vulnerability is the function SQFuncState::PopTar

In Splunk Enterprise versions below 10.2.0, 10.0.3, 9.4.5, 9.3.7, and 9.2.9, and Splunk Cloud Platform versions below 10

A vulnerability has been found in wren-lang wren up to 0.4.0. This impacts the function printError of the file src/vm/wr

A flaw has been found in ChaiScript up to 6.1.0. This affects the function chaiscript::Type_Info::bare_equal of the file