2026

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in JFrog Artif

A weakness has been identified in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the func

Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains a broken access control vulnerability that allows auth

Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an information disclosure vulnerability that allows un

Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an information disclosure vulnerability that allows un

Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an authentication bypass vulnerability that allows una

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatti

Insufficiently Protected Credentials vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Signature Spoo

listmonk is a standalone, self-hosted, newsletter and mailing list manager. Prior to version 6.0.0, lower-privileged use

A security flaw has been discovered in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected by this

libtpms, a library that provides software emulation of a Trusted Platform Module, has a flaw in versions 0.10.0 and 0.10

Emlog is an open source website building system. Version 2.5.23 has a stored cross-site scripting vulnerability that can

Emlog is an open source website building system. Version 2.5.23 has a stored cross-site scripting vulnerability in the `

Emlog is an open source website building system. In version 2.5.23, the admin can set controls which makes users unable

A security vulnerability has been detected in code-projects Content Management System 1.0. Impacted is an unknown functi

In the plex.tv backend for Plex Media Server (PMS) through 2025-12-31, a non-server device token can retrieve share toke

In the plex.tv backend for Plex Media Server (PMS) through 2025-12-31, a non-server device token can retrieve other toke

CasaOS versions up to and including 0.4.15 expose multiple unauthenticated endpoints that allow remote attackers to retr

A vulnerability was identified in Daptin 0.10.3. Affected by this vulnerability is the function goqu.L of the file serve

Plane is an an open-source project management tool. In plane.io, a guest user doesn't have a permission to access https[

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker

A buffer overflow vulnerability has been reported to affect License Center. If a remote attacker gains an administrator

An out-of-bounds read vulnerability has been reported to affect License Center. If a remote attacker gains a user accoun

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker

A cross-site scripting (XSS) vulnerability has been reported to affect QuMagie. The remote attackers can then exploit th

An allocation of resources without limits or throttling vulnerability has been reported to affect several QNAP operating

An out-of-bounds read vulnerability has been reported to affect several QNAP operating system versions. If a remote atta

An out-of-bounds read vulnerability has been reported to affect several QNAP operating system versions. If a remote atta

An out-of-bounds read vulnerability has been reported to affect several QNAP operating system versions. If a remote atta

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system ver

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote

An allocation of resources without limits or throttling vulnerability has been reported to affect several QNAP operating

A cross-site scripting (XSS) vulnerability in mccutchen httpbin v2.17.1 allows attackers to execute arbitrary web script

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote

A vulnerability was determined in PluXml up to 5.8.22. Affected is the function FileCookieJar::__destruct of the file co

REDCap 14.3.13 allows an attacker to enumerate usernames due to an observable discrepancy between login attempts.

A vulnerability was found in PHPGurukul Online Course Registration up to 3.1. This issue affects some unknown processing

A vulnerability has been found in yeqifu carRental up to 3fabb7eae93d209426638863980301d6f99866b3. This vulnerability af

The Ninja Forms WordPress plugin before 3.13.3 allows unauthenticated attackers to generate valid access tokens via the