2026

A vulnerability was found in Albert Sağlık Hizmetleri ve Ticaret Albert Health up to 1.7.3 on Android. Affected is an un

Missing Authorization vulnerability in Saad Iqbal WP EasyPay wp-easy-pay allows Exploiting Incorrectly Configured Access

Missing Authorization vulnerability in Webnus Inc. Modern Events Calendar allows Exploiting Incorrectly Configured Acces

A local, non-privileged attacker can abuse a vulnerable IOCTL interface exposed by the OpenEDR 2.5.1.0 kernel driver to

A local attacker can bypass OpenEDR's 2.5.1.0 self-defense mechanism by renaming a malicious executable to match a trust

Boolean-Based SQL Injection is a type of blind SQL injection where an attacker manipulates SQL queries by injecting Bool

Cross Site scripting vulnerability (XSS) in NetBox 4.3.5 "comment" field on object forms. An attacker can inject arbitra

A weakness has been identified in La Nacion App 10.2.25 on Android. This impacts an unknown function of the file source/

A security flaw has been discovered in BabyChakra Pregnancy & Parenting App up to 5.4.3.0 on Android. This affects an un

Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to canonicalize IPv4-mapped IPv6 addres

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in flexmls Flexmls® I

Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly enforce read permissions in

Mattermost versions 10.11.x <= 10.11.10 fail to validate user's authentication method when processing account auth type

Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to use consistent error responses when

HCL AION is affected by a vulnerability where certain identifiers may be predictable in nature. Predictable identifiers

HCL AION is affected by a vulnerability where certain offering configurations may permit execution of potentially harmfu

HCL AION is affected by a vulnerability where model packaging and distribution mechanisms may not include sufficient aut

HCL AION is affected by a vulnerability where certain user actions are not adequately audited or logged. The absence of

HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isola

HCL AION is affected by a vulnerability where internal filesystem paths may be exposed through application responses or

HCL AION is affected by a vulnerability related to the handling of upload size limits. Improper control or validation of

Improper Neutralization of Input During Web Page Generation in Forcepoint Web Security (On-Prem) on Windows allows Store

Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to validate team-specific upload_file p

A DLL search order hijacking vulnerability in Thermalright TR-VISION HOME on Windows (64-bit) allows a local attacker to

A vulnerability was identified in itsourcecode College Management System 1.0. The impacted element is an unknown functio

A vulnerability was determined in Open5GS up to 2.7.6. The affected element is the function smf_gx_cca_cb/smf_gy_cca_cb/

A vulnerability was found in Lagom WHMCS Template up to 2.3.7. Impacted is an unknown function of the component Datatabl

A vulnerability has been found in itsourcecode College Management System 1.0. This issue affects some unknown processing

A flaw has been found in itsourcecode Free Hotel Reservation System 1.0. This vulnerability affects unknown code of the

A security vulnerability has been detected in itsourcecode Online Enrollment System 1.0. Impacted is an unknown function

A weakness has been identified in itsourcecode Online Enrollment System 1.0. This issue affects some unknown processing

A security flaw has been discovered in SSCMS 7.4.0. This vulnerability affects unknown code of the file SitesAddControll

A vulnerability was identified in ThingsGateway 12. This affects an unknown part of the file /api/file/download. The man

A vulnerability was determined in Tiandy Integrated Management Platform 7.17.0. Affected by this issue is some unknown f

A vulnerability was found in vanna-ai vanna up to 2.0.2. Affected by this vulnerability is the function update_sql/run_s

A vulnerability has been found in vanna-ai vanna up to 2.0.2. Affected is the function update_sql of the file src/vanna/

A flaw has been found in vanna-ai vanna up to 2.0.2. This impacts the function remove_training_data of the file src/vann

A vulnerability was detected in LB-LINK BL-WR9000 2.4.9. This affects the function sub_458754 of the file /goform/set_wi

A security vulnerability has been detected in LB-LINK BL-WR9000 2.4.9. The impacted element is the function sub_44D844 o

A weakness has been identified in LB-LINK BL-WR9000 2.4.9. The affected element is the function sub_44E8D0 of the file /

A security flaw has been discovered in CMS Made Simple up to 2.2.21. Impacted is an unknown function of the file admin/l

A vulnerability was identified in itsourcecode Payroll Management System 1.0. This issue affects some unknown processing

A vulnerability was determined in SSCMS up to 7.4.0. This vulnerability affects the function PathUtils.RemoveParentPath

A vulnerability was found in Tiandy Easy7 Integrated Management Platform 7.17.0. This affects an unknown part of the fil

A vulnerability has been found in Technologies Integrated Management Platform 7.17.0. Affected by this issue is some unk

A flaw has been found in INDEX Conferences & Exhibitions Organization YWF BPOF APGCS App up to 1.0.2 on Android. Affecte

A vulnerability was detected in myAEDES App up to 1.18.4 on Android. Affected is an unknown function of the file aedes/m

A security vulnerability has been detected in XREAL Nebula App up to 3.2.1 on Android. This impacts an unknown function

A weakness has been identified in i-SENS SmartLog App up to 2.6.8 on Android. This affects an unknown function of the co

A security flaw has been discovered in FlowCI flow-core-x up to 1.23.01. The impacted element is the function Save of th