2026

Chamilo is a learning management system. Prior to version 1.11.28, the OpenId function allows anyone to send requests to

Chamilo is a learning management system. Chamillo is affected by a post-authentication phar unserialize which leads to a

code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/modal_edit.php.

code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/recordteacher_view.php?te

Mattermost Desktop App versions <=5.13.3 fail to attach listeners restricting navigation to external sites within the Ma

On SimStudio version below to 0.5.74, the `/api/auth/oauth/token` endpoint contains a code path that bypasses all author

On SimStudio version below to 0.5.74, the MongoDB tool endpoints accept arbitrary connection parameters from the caller

DobryCMS's upload file functionality allows an unauthenticated remote attacker to upload files of any type and extension

A Blind SQL injection vulnerability has been identified in DobryCMS.  A remote unauthenticated attacker is able to injec

The CGM CLININET application respond without essential security HTTP headers, exposing users to client‑side attacks such

The CGM CLININET application does not implement any mechanisms that prevent clickjacking attacks, neither HTTP security

The CGM CLININET application uses direct, sequential object identifiers "MessageID" without proper authorization checks.

In the "CheckUnitCodeAndKey.pl" service, the "validateOrgUnit" function is vulnerable to SQL injection.

In the endpoints "/cgi-bin/CliniNET.prd/utils/usrlogstat_simple.pl", "/cgi-bin/CliniNET.prd/utils/usrlogstat.pl", "/cgi-

The CGM CLININET system provides smart card authentication; however, authentication is conducted locally on the client d

The vulnerability enables an attacker to fully bypass authentication in CGM CLININET and gain access to any active user

SQL Injection vulnerability in "imageserver" module when processing C-FIND queries in CGM NETRAAD software allows attack

A critical SQL Injection (SQLi) vulnerability has been identified in the authentication module of the system. An unauthe

In MDDP, there is a possible system crash due to a race condition. This could lead to local denial of service if a malic

In display, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privileg

In display, there is a possible system crash due to use after free. This could lead to local denial of service if a mali

In MAE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

In MAE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

In imgsys, there is a possible system crash due to use after free. This could lead to local denial of service if a malic

In MAE, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privileg

In MAE, there is a possible system crash due to use after free. This could lead to local denial of service if a maliciou

In wlan STA driver, there is a possible escalation of privilege due to a missing bounds check. This could lead to local

In preloader, there is a possible read of device unique identifiers due to a logic error. This could lead to local infor

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of

In wlan AP FW, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (prox

In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local information d

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o

In display, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalati

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o

In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local information d

In wlan STA driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local esca

In pcie, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p

U-Office Force developed by e-Excellence has a Insecure Deserialization vulnerability, allowing unauthenticated remote a

A flaw has been found in itsourcecode University Management System 1.0. This vulnerability affects unknown code of the f

IDExpert Windows Logon Agent developed by Changing has a Remote Code Execution vulnerability, allowing unauthenticated r

IDExpert Windows Logon Agent developed by Changing has a Remote Code Execution vulnerability, allowing unauthenticated r

A vulnerability has been found in Dataease SQLBot up to 1.4.0. This affects an unknown function of the file backend/apps

A vulnerability was detected in itsourcecode University Management System 1.0. This affects an unknown part of the file

A security vulnerability has been detected in itsourcecode University Management System 1.0. Affected by this issue is s

A weakness has been identified in itsourcecode Society Management System 1.0. Affected by this vulnerability is an unkno

A security flaw has been discovered in eosphoros-ai db-gpt 0.7.5. Affected is the function importlib.machinery.SourceFil

A vulnerability was identified in Open Babel up to 3.1.1. This impacts the function OBAtom::GetExplicitValence of the fi

A vulnerability was determined in YosysHQ yosys up to 0.62. This affects the function Yosys::RTLIL::Const::set of the fi