2026

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy plugin for WordPr

node-tar,a Tar for Node.js, has a race condition vulnerability in versions up to and including 7.5.3. This is due to an

jaraco.context, an open-source software package that provides some useful decorators and context managers, has a Zip Sli

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-1

A security flaw has been discovered in CRMEB up to 5.6.3. The affected element is the function appleLogin of the file cr

Chainlit versions prior to 2.9.4 contain a server-side request forgery (SSRF) vulnerability in the /project/element upda

A vulnerability was determined in Tosei Online Store Management System ネット店舗管理システム 1.01. The affected element is an unkn

A vulnerability was detected in Yonyou KSOA 9.0. This affects an unknown part of the file /kmf/user_popedom.jsp of the c

A security vulnerability has been detected in Yonyou KSOA 9.0. Affected by this issue is some unknown functionality of t

A weakness has been identified in Yonyou KSOA 9.0. Affected by this vulnerability is an unknown functionality of the fil

OnboardLite is a comprehensive membership lifecycle platform built for student organizations at the University of Centra

A security flaw has been discovered in itsourcecode School Management System 1.0. Affected is an unknown function of the

SiYuan is a personal knowledge management system. In versions prior to 3.5.4, the markdown feature allows unrestricted s

Tugtainer is a self-hosted app for automating updates of Docker containers. In versions prior to 1.16.1, the password au

teklifolustur_app is a web-based PHP application that allows users to create, manage, and track quotes for their clients

ChatterBot is a machine learning, conversational dialog engine for creating chat bots. ChatterBot versions up to 1.2.10

ESPHome is a system to control microcontrollers remotely through Home Automation systems. In versions 2025.9.0 through 2

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, FastGlyph parsing trusts `cbDa

OpenProject is an open-source, web-based project management software. Versions 16.3.0 through 16.6.4 are affected by a s

Koko Analytics is an open-source analytics plugin for WordPress. Versions prior to 2.1.3 are vulnerable to arbitrary SQL

The @fastify/express plugin adds full Express compatibility to Fastify. A security vulnerability exists in @fastify/expr

@fastify/middie is the plugin that adds middleware support on steroids to Fastify. A security vulnerability exists in @f

A security vulnerability has been detected in PHPGurukul Directory Management System 1.0. Impacted is an unknown functio

WeasyPrint helps web developers to create PDF documents. Prior to version 68.0, a server-side request forgery (SSRF) pro

Quicly, an IETF QUIC protocol implementation, is susceptible to a denial-of-service attack prior to commit d9d3df6a8530a

An Improper Certificate Validation vulnerability in the OPC-UA client and ANSL over TLS client used in Automation Studio

A weakness has been identified in itsourcecode Online Frozen Foods Ordering System 1.0. This issue affects some unknown

A security flaw has been discovered in Totolink LR350 9.3.5u.6369_B20220309. This vulnerability affects the function set

Incorrect Authorization vulnerability in virtual gateway component in Devolutions Server allows attackers to bypass deny

A vulnerability was identified in Totolink LR350 9.3.5u.6369_B20220309. This affects the function setWiFiEasyCfg of the

A vulnerability was determined in Totolink LR350 9.3.5u.6369_B20220309. Affected by this issue is the function setWiFiBa

A vulnerability was found in Totolink LR350 9.3.5u.6369_B20220309. Affected by this vulnerability is the function setWiF

A vulnerability in Apache Linkis. Problem Description When using the JDBC engine and da When using the JDBC engine and

A weakness has been identified in TOTOLINK A3700R 9.1.2u.5822_B20200513. This affects the function setWiFiEasyGuestCfg o

A vulnerability was found in UTT 进取 520W 1.7.7-180627. This issue affects the function strcpy of the file /goform/Config

A vulnerability has been found in UTT 进取 520W 1.7.7-180627. This vulnerability affects the function strcpy of the file /

A flaw has been found in UTT 进取 520W 1.7.7-180627. This affects the function strcpy of the file /goform/ConfigExceptQQ.

A vulnerability was detected in UTT 进取 520W 1.7.7-180627. Affected by this issue is the function strcpy of the file /gof

HarfBuzz::Shaper versions before 0.032 for Perl contains a bundled library with a null pointer dereference vulnerability

A vulnerability was determined in Yonyou KSOA 9.0. The impacted element is an unknown function of the file /kmf/folder.j

A vulnerability was found in Yonyou KSOA 9.0. The affected element is an unknown function of the file /kmf/edit_folder.j

A vulnerability has been found in Yonyou KSOA 9.0. Impacted is an unknown function of the file /kmc/save_catalog.jsp of

A flaw has been found in Yonyou KSOA 9.0. This issue affects some unknown processing of the file /worksheet/worksadd_pla

A vulnerability was detected in Yonyou KSOA 9.0. This vulnerability affects unknown code of the file /worksheet/worksadd

esm.sh is a no-build content delivery network (CDN) for web development. Prior to Go pseeudoversion 0.0.0-20260116051925

A weakness has been identified in D-Link DIR-823X 250416. Affected by this issue is the function sub_412E7C of the file

A security flaw has been discovered in Yonyou KSOA 9.0. Affected by this vulnerability is an unknown functionality of th

Using string formatting and exception handling, an attacker may bypass n8n's python-task-executor sandbox restrictions a

A vulnerability was identified in Yonyou KSOA 9.0. Affected is an unknown function of the file /worksheet/work_mod.jsp o

A vulnerability was determined in Yonyou KSOA 9.0. This impacts an unknown function of the file /worksheet/work_info.jsp