2026

A vulnerability was detected in Tenda F456 1.0.0.5. This affects the function fromexeCommand of the file /goform/exeComm

A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Affected by this issue is the funct

A weakness has been identified in Totolink A3002MU B20211125.1046. Affected by this vulnerability is the function sub_41

Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a memo

jq is a command-line JSON processor. An integer overflow vulnerability exists through version 1.8.1 within the jvp_strin

simple-git enables running native Git commands from JavaScript. Versions up to and including 3.31.1 allow execution of a

A vulnerability exists in the command handling of the IEC 61850 communication stack included in the product revisions li

A security flaw has been discovered in PHPGurukul Daily Expense Tracking System 1.1. Affected is an unknown function of

A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the function opj_pi_initialise_encode in

A vulnerability was determined in itsourcecode Construction Management System 1.0. This affects an unknown function of t

A vulnerability was found in itsourcecode Construction Management System 1.0. The impacted element is an unknown functio

A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. The affected element is an unk

ChurchCRM is an open-source church management system. Prior to 7.0.0, it was possible in many places across the ChurchCR

Sourcecodester Online Thesis Archiving System v1.0 is vulnerable to SQL injection in the file /otas/admin/curriculum/man

Sourcecodester Online Thesis Archiving System v1.0 is vulnerable to SQL injection in /otas/projects_per_department.php.

Sourcecodester Online Thesis Archiving System v1.0 is vulnerale to SQL injection in the file /otas/view_archive.php.

An issue was discovered in HAProxy before 3.3.6. The HTTP/3 parser does not check that the received body length matches

Decidim is a participatory democracy framework. In versions below 0.30.5 and 0.31.0.rc1 through 0.31.0, a stored code ex

The bson_validate function may return early on specific inputs and incorrectly report success. This behavior could resul

A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. Impacted is an unknown function of the

A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0. This issue affects some unknown

A security vulnerability has been detected in UTT HiPER 1200GW up to 2.5.3-170306. This vulnerability affects the functi

A weakness has been identified in code-projects Simple Content Management System 1.0. This affects an unknown part of th

Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in /orms/admin/rooms/view_room.php.

Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in /orms/admin/reservations/view_deta

Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via Event Re

Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via custom fields.

Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via module search.

Improper Neutralization of Input During Web Page Generation vulnerability allows Stored Cross-Site Scripting via event c

Missing Authorization vulnerability allows Exposure of Sensitive Information via configuration endpoint. This issue affe

Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via WebServe

Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via Network

Unrestricted Upload of File with Dangerous Type vulnerability allows Remote Code Execution via file upload. This issue a

Nitro PDF Pro for Windows 14.41.1.4 contains a heap use-after-free vulnerability in the implementation of the JavaScript

Nitro PDF Pro before 14.43 for Windows contains a NULL pointer dereference vulnerability in the JavaScript implementatio

A NULL pointer dereference in Nitro PDF Pro for Windows v14.41.1.4 allows attackers to cause a Denial of Service (DoS) v

Cross-Site Scripting vulnerability in the Snipe-IT web-based asset management system v8.3.0 to up and including v8.3.1 a

Rate Limiting for attempting a user login is not being properly enforced, making HCL DevOps Velocity susceptible to brut

A security flaw has been discovered in code-projects Simple Content Management System 1.0. Affected by this issue is som

A vulnerability was identified in code-projects Simple Content Management System 1.0. Affected by this vulnerability is

Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL injection in the file /rsms/a

Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerale to SQL injection in the file/rsms/adm

Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL injection in the file /rsms/a

Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in the file /orms/admin/activities/ma

Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL Injection in the file /orms/admin/rooms/manage_

Dag Authors, who normally should not be able to execute code in the webserver context could craft XCom payload causing t

In Totara LMS v19.1.5 and before, the forgot password API does not implement rate limiting for the target email address.

Totara LMS v19.1.5 and before is vulnerable to Incorrect Access Control. The login page code can be manipulated to revea

Totara LMS v19.1.5 and before is vulnerable to HTML Injection. An attacker can inject malicious HTML code in a message a

A heap buffer overflow in the av_bprint_finalize() function of FFmpeg v8.0.1 allows attackers to cause a Denial of Servi