2026

Improper Authentication (Authentication Bypass) exists in Neterbit NW-431F Router 20241014-IR03 and before. The router u

tarfile.data_filter could be bypassed using crafted link entries, including symlinks with empty or directory-like names,

Improper Access Control, Missing Authorization vulnerability in Kurt Software Studio WriteUp Mobile App allows Accessing

OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.0.17, `go.opentelemetry.io/otel/schema/v1

An issue was discovered in OpenStack oslo.messaging 1.0.0 through 17.3.0. The oslo.messaging RabbitMQ driver does not pe

Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Versions prior to 2.17.1 expose a public

Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Versions prior to 2.17.1 expose `configUp

Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Versions prior to 2.17.1 expose `log_js_e

OpenTelemetry-Go is the Go implementation of OpenTelemetry. Versions 1.41.0 and 1.43.0 removed raw-length rejection and

LIBPNG is a reference library for use in applications that process PNG (Portable Network Graphics) raster image files. I

bacnet_stack 1.3.1 contains an Out-of-bounds Read in bacnet_tag_number_decode which allows attackers to cause a denial o

GNCC GP5 v7.1.76 was discovered to utilize a weak hashing algorithm to protect the root password, possibly allowing atta

A mass assignment vulnerability exists in the MISP user edit functionality due to insufficient filtering of user-supplie

A vulnerability was found in LakshayD02 Hostel-Management-System-PHP up to f87e67c283bab6f718faf2fec6ae39a13bd7036b. Thi

A vulnerability has been found in milvus-io milvus up to 2.6.13. This vulnerability affects unknown code of the file int

A flaw has been found in LMCache up to 0.4.6. This affects the function hex_hash_to_int16 of the file lmcache/integratio

Strawberry GraphQL is a library for creating GraphQL APIs. In versions 0.172.0 through0.315.6, the MaxAliasesLimiter ext

Strawberry GraphQL is a library for creating GraphQL APIs. In versions 0.71.0 through 0.315.6, the QueryDepthLimiter ext

Strawberry GraphQL is a library for creating GraphQL APIs. In versions 0.288.4 through 0.315.3, Strawberry's bundled Gra

Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Versions prior to 2.17.1 are vulnerable t

A lack of runtime integrity in GNCC GP5 v7.1.76 allows physically-proximate attackers to bypass file system read-only pr

The factory reset functionality in GNCC GP5 v7.1.76 fails to clear sensitive cryptographic material in the JFFS2 configu

GNCC GP5 v7.1.76 was discovered to store pre-signed Backblaze B2 upload URLs (PUT requests) in plaintext to the serial c

An issue in the U-Boot component of GNCC GP5 v7.1.76 allows physically-proximate attackers to bypass authentication and

GNCC GP5 v7.1.76 was discovered to store sensitive wireless network information in plaintext during routine operations t

An undocumented debug CGI endpoint in T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03 allows unauthenticated at

T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, and T7281 v1.0.03 were discovered to contain a hardcoded passw

Incorrect access control in the web management interface of T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, an

SolarWinds Serv-U is susceptible to specially crafted POST requests that crash the Serv-U service without authentication

A vulnerability in the MISP dashboard widgets allowed an authenticated user to manipulate the fields option and influenc

A security issue was fixed in the correlations over-correlation endpoint where the order query parameter was accepted fr

A logic error in the MISP CRUD component delete handler allowed validation failures to be bypassed when requests used th

A vulnerability was detected in zilliztech GPTCache up to 0.1.44. Affected by this issue is the function BufferedReader.

A security vulnerability has been detected in itsourcecode Fees Management System 1.0. Affected by this vulnerability is

OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an un-authenticated atta

This vulnerability exists in GX Earth 2022 ONT models due to the presence of hardcoded RSA private key within the device

FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.0, the password reset conf

Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to version 2.17.1, a path traversal

An open redirect vulnerability existed in MISP UsersController::routeafterlogin() because the value stored in the pre_lo

A URL validation flaw in the MISP dashboard button widget allowed a crafted relative-looking URL to be accepted as a loc

An authorization flaw existed in the MISP Event Template Importer overwrite workflow. When importing an event template i

A visibility control issue in the event template creation workflow allowed non-site-admin users to access private galaxi

A weakness has been identified in itsourcecode Fees Management System up to 1.0. Affected is an unknown function of the

A security flaw has been discovered in itsourcecode Fees Management System 1.0. This impacts an unknown function of the

A vulnerability was identified in itsourcecode Fees Management System 1.0. This affects an unknown function of the file

A vulnerability was determined in mjperpinosa stumasy. The impacted element is an unknown function of the file applicati

A vulnerability was found in mjperpinosa stumasy. The affected element is an unknown function of the file application/PH

HCL BigFix Cloud Lifecycle Management is affected by lack of input validation.  This low-level flaw allows unauthorized

HCL Hive Telco Observability is affected by  a Required directives missing from the CSP issue is detected in keycloak co

Dell BSAFE SSL-J contains an allocation of resources without limits or throttling vulnerability. An unauthenticated remo