2026

Routinator exits on any error when accepting incoming HTTP or RTR connections, including ones it can recover from such a

Unexpected Status Code or Return Value vulnerability in ninenines gun (gun_http module) allows a malicious HTTP server t

Uncontrolled Resource Consumption vulnerability in ninenines gun (gun_http module) allows a malicious server to exhaust

Origin Validation Error vulnerability in ninenines gun (gun_http2 module) allows cross-origin cookie injection via unval

Shenzhen Tenda Technology Co., Ltd Tenda AC1206 v15.03.06.23 was discovered to contain multiple stack overflows in the f

QloApps through 1.7.0 contains a stored cross-site scripting vulnerability in the admin file manager that allows authent

A security vulnerability has been detected in Mohammed-eid35 bank-management-system-springboot up to 7b9bcc65ad7df3db29a

A weakness has been identified in SourceCodester Inventory System 1.0. Affected by this issue is some unknown functional

A security flaw has been discovered in SourceCodester Inventory System 1.0. Affected by this vulnerability is an unknown

A vulnerability was identified in SourceCodester Inventory System 1.0. Affected is an unknown function of the file /user

A vulnerability was determined in UTT HiPER 2610G up to 3.0.0-171107. This impacts the function strcpy of the file /gofo

A vulnerability was found in UTT HiPER 2610G up to 3.0.0-171107. This affects the function strcpy of the file /goform/fo

Stored cross-site scripting in the service discovery active check output in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and

Improper neutralization of HTML-encoded characters in the URL validation function in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0

Stored cross-site scripting in the global settings change log in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 v

Incorrect authorization in the User Messages dashboard widget in Checkmk <2.5.0p5 causes the message-fetching endpoints

Stored cross-site scripting in the URL dashboard widget in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 version

A vulnerability has been found in SourceCodester Barangay Resident Profiling and Information Management System 1.0. The

A flaw has been found in itsourcecode Hospital Management System 1.0. The affected element is an unknown function of the

A vulnerability was detected in itsourcecode Hospital Management System 1.0. Impacted is an unknown function of the file

A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. This issue affects some unkno

A weakness has been identified in Bolt CMS up to 3.7.5. This vulnerability affects unknown code of the file src/Storage/

A weakness in the certificate validation logic of the deprecated IKEv1 key exchange may allow an unauthenticated attacke

A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows

## Summary The iOS implementation of `cordova-plugin-inappbrowser` passes the `id` field from a `WKScriptMessage` body

The Recipe Card Blocks Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the recipe block's 'su

A flaw was found in Quay. The filedrop endpoint accepts any mime type without validation, allowing an authenticated user

A security flaw has been discovered in CodeAstro Leave Management System 1.0. This affects an unknown part of the file /

A vulnerability was identified in CodeAstro Leave Management System 1.0. Affected by this issue is some unknown function

A vulnerability was determined in CodeAstro Leave Management System 1.0. Affected by this vulnerability is an unknown fu

A vulnerability was found in CodeAstro Leave Management System 1.0. Affected is an unknown function of the file /admin/d

A vulnerability has been found in CodeAstro Leave Management System 1.0. This impacts an unknown function of the file /a

A flaw has been found in GL.iNet A1300, AX1800, AXT1800, MT2500, MT3000, MT6000, X3000 and XE3000 4.8.x. This affects an

A vulnerability was detected in Tenda CX12L 16.03.53.12. The impacted element is the function setSchedWifi of the file /

This vulnerability exists in Bagisto due to improper validation of user-supplied input in the ImageCacheController compo

A security vulnerability has been detected in Tenda CX12L 16.03.53.12. The affected element is the function form_fast_se

A weakness has been identified in JeecgBoot up to 3.9.2. Impacted is the function HttpServletResponse.sendRedirect of th

A security flaw has been discovered in SourceCodester Hospitals Patient Records Management System 1.0. This issue affect

A vulnerability was identified in Weaviate up to 1.37.7. This vulnerability affects the function validateConfig of the f

VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with

VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with

VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with

A flaw was found in Samba’s WINS server component when running as an Active Directory Domain Controller. The WINS protoc

A vulnerability was determined in Tenda HG7HG9 and HG10 300001138_en_xpon. This affects the function formDOMAINBLK of th

A vulnerability was found in Tenda HG7HG9 and HG10 300001138_en_xpon. Affected by this issue is the function asp_voip_Ot

A vulnerability has been found in D-Link DCS-5615 1.01.00. Affected by this vulnerability is an unknown functionality of

A vulnerability was detected in CodeAstro Ingredients Stock Management System 1.0. This impacts an unknown function of t

A security vulnerability has been detected in TOTOLINK AC1200 T8 4.1.5cu.8611. This affects an unknown function of the f

A weakness has been identified in Tenda AC15 15.03.05.19. The impacted element is an unknown function of the file /etc_r

A security flaw has been discovered in D-Link DIR-823G 1.0.2B05. The affected element is an unknown function of the file