2026

Insecure Direct Object Reference (IDOR) vulnerability in 1millionbot Millie chat that allows private conversations of ot

Prompt injection vulnerability in 1millionbot Millie chatbot that occurs when a user manages to evade chat restrictions

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Extend Themes Kubi

Business::OnlinePayment::StoredTransaction versions through 0.01 for Perl uses an insecure secret key. Business::Online

A vulnerability was found in code-projects Student Membership System 1.0. The affected element is an unknown function of

SQL inyection (SQLi) vulnerability in Umami Software web application through an improperly sanitized parameter, which co

A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loade

A vulnerability has been found in code-projects Student Membership System 1.0. Impacted is an unknown function of the fi

A flaw has been found in code-projects Student Membership System 1.0. This issue affects some unknown processing of the

Stored Cross-Site Scripting (XSS) in Teampass versions prior to 3.1.5.16, affecting the password manager's password impo

Blind Cross-Site Scripting (XSS) in Teampass, versions prior to 3.1.5.16, within the password manager login functionalit

Reflected Cross-Site Scripting (XSS) vulnerability in Anon Proxy Server v0.104. This vulnerability allows an attacker to

Reflected Cross-Site Scripting (XSS) vulnerability in Anon Proxy Server v0.104. This vulnerability allows an attacker to

Reflected Cross-Site Scripting (XSS) vulnerability in Anon Proxy Server v0.104. This vulnerability allows an attacker t

A Path Traversal vulnerability affecting Factory Resource Management in DELMIA Factory Resource Manager from Release 3DE

A Stored Cross-site Scripting (XSS) vulnerability affecting Factory Resource Management in DELMIA Factory Resource Manag

A Stored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Industry Innovat

A weakness has been identified in Nothings stb up to 2.30. This impacts the function stbi__load_gif_main of the file stb

A security flaw has been discovered in Nothings stb_image up to 2.30. This affects the function stbi__gif_load_next of t

A vulnerability was identified in TRENDnet TEW-713RE up to 1.02. The impacted element is an unknown function of the file

The Performance Monitor WordPress plugin through 1.0.6 does not validate a parameter before making a request to it, whic

A vulnerability was determined in TRENDnet TEW-713RE up to 1.02. The affected element is the function sub_421494 of the

A vulnerability was found in SourceCodester Teacher Record System 1.0. Impacted is an unknown function of the file Teach

OpenStack Glance before 29.1.1, 30.x before 30.1.1, and 31.0.0 is affected by Server-Side Request Forgery (SSRF). By use

The Auto Post Scheduler plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and incl

The Ibtana – WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin'

A vulnerability has been found in SourceCodester Simple Doctors Appointment System up to 1.0. This issue affects some un

A flaw has been found in SourceCodester Simple Doctors Appointment System 1.0. This vulnerability affects unknown code o

A vulnerability was detected in SourceCodester Simple Doctors Appointment System 1.0. This affects an unknown part of th

The Loco Translate plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘update_href’ parameter

The Appointment Booking and Scheduler Plugin – Truebooker plugin for WordPress is vulnerable to Sensitive Information Ex

The WooPayments: Integrated WooCommerce Payments plugin for WordPress is vulnerable to unauthorized modification of data

A security vulnerability has been detected in Totolink A3300R 17.0.0cu.557_b20221024. Affected by this issue is the func

A weakness has been identified in Totolink A3300R 17.0.0cu.557_b20221024. Affected by this vulnerability is the function

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to version

LangChain is a framework for building agents and LLM-powered applications. Prior to version 1.2.22, multiple functions i

Ruby LSP is an implementation of the language server protocol for Ruby. Prior to Shopify.ruby-lsp version 0.10.2 and rub

vcpkg is a free and open-source C/C++ package manager. Prior to version 3.6.1#3, vcpkg's Windows builds of OpenSSL set o

Serialize JavaScript to a superset of JSON that includes regular expressions and functions. Prior to version 7.0.5, ther

act is a project which allows for local running of github actions. Prior to version 0.2.86, act's built in actions/cache

act is a project which allows for local running of github actions. Prior to version 0.2.86, act unconditionally processe

Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that all

Dolibarr is an enterprise resource planning (ERP) and customer relationship management (CRM) software package. In versio

Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that all

SciTokens is a reference library for generating and using SciTokens. Prior to version 1.9.7, the Enforcer is vulnerable

SciTokens is a reference library for generating and using SciTokens. Prior to version 1.9.6, the Enforcer incorrectly va

SciTokens is a reference library for generating and using SciTokens. Prior to version 1.9.6, the KeyCache class in scito

A security flaw has been discovered in Totolink A3300R 17.0.0cu.557_b20221024. Affected is the function setSyslogCfg of

The Gravity SMTP plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and includi

The Everest Forms Pro plugin for WordPress is vulnerable to Remote Code Execution via PHP Code Injection in all versions