2026

BigBlueButton is an open-source virtual classroom. In versions 3.0.19 and below, when first joining a session with the m

BigBlueButton is an open-source virtual classroom. In versions 3.0.21 and below, the official documentation for "Server

Metabase is an open-source data analytics platform. In versions prior to 0.57.13 and versions 0.58.x through 0.58.6, aut

ERP is a free and open source Enterprise Resource Planning tool. In versions up to 15.98.0 and 16.0.0-rc.1 and through 1

LinkAce is a self-hosted archive to collect website links. Versions 2.4.2 and below have a Stored Cross-site Scripting v

ASN.1 TypeScript ESM library, including codecs for Basic Encoding Rules (BER) and Distinguished Encoding Rules (DER). In

Zumba Json Serializer is a library to serialize PHP variables in JSON format. In versions 3.2.2 and below, the library a

A flaw has been found in feng_ha_ha/megagao ssm-erp and production_ssm up to 4288d53bd35757b27f2d070057aefb2c07bdd097. T

A vulnerability was detected in Foswiki up to 2.1.10. The affected element is an unknown function of the component Chang

Swiper is a free and mobile touch slider with hardware accelerated transitions and native behavior. Versions 6.5.1 throu

Cloud Hypervisor is a Virtual Machine Monitor for Cloud workloads. Versions 34.0 through 50.0 arevulnerable to arbitrary

Pannellum is a lightweight, free, and open source panorama viewer for the web. In versions 3.5.0 through 2.5.6, the hot

Flask is a web server gateway interface (WSGI) web application framework. In versions 3.1.2 and below, when the session

Werkzeug is a comprehensive WSGI web application library. Versions 3.1.5 and below, the safe_join function allows Window

Formwork is a flat file-based Content Management System (CMS). In versions 2.0.0 through 2.3.3, the application fails to

A denial-of-service vulnerability was identified in Moodle’s TeX formula editor. When rendering TeX content using mimete

A vulnerability was found in a Moodle TeX filter administrative setting where insufficient sanitization of configuration

A flaw was identified in Moodle’s backup restore functionality where specially crafted backup files were not properly va

A security vulnerability has been detected in feng_ha_ha/megagao ssm-erp and production_ssm up to 4288d53bd35757b27f2d07

Sentry is a developer-first error tracking and performance monitoring tool. Versions 21.12.0 through 26.1.0 have a criti

Statmatic is a Laravel and Git powered content management system (CMS). Versions 5.73.8 and below in addition to 6.0.0-a

D-Tale is a visualizer for pandas data structures. Versions prior to 3.20.0 are vulnerable to Remote Code Execution thro

Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. In versions 5.

Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. In versions 5.

Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. Versions 5.0.3

When a DAG failed during parsing, Airflow’s error-reporting in the UI could include the full kwargs passed to the operat

eBay API MCP Server is an open source local MCP server providing AI assistants with comprehensive access to eBay's Sell

GetSimple CMS is a content management system. All versions of GetSimple CMS have a flaw in the Uploaded Files feature th

OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. Versions 1.1.2-a

OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. In versions 1.1.

OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. Versions 1.1.2-a

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. A

GetSimple CMS is a content management system. All versions of GetSimple CMS rely on .htaccess files to restrict access t

GetSimple CMS is a content management system. All versions of GetSimple CMS are vulnerable to XSS through SVG file uploa

GetSimple CMS is a content management system. All versions of GetSimple CMS do not implement CSRF protection on the admi

Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. I

MLflow Use of Default Password Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass

TensorFlow HDF5 Library Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability al

RustDesk Client for Windows Transfer File Link Following Information Disclosure Vulnerability. This vulnerability allows

GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attacker

GIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote

GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attacker

GIMP PGM File Parsing Uninitialized Memory Remote Code Execution Vulnerability. This vulnerability allows remote attacke

Nagios Host esensors_websensor_configwizard_func Command Injection Remote Code Execution Vulnerability. This vulnerabili

Nagios Host monitoringwizard Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote att

Nagios Host zabbixagent_configwizard_func Command Injection Remote Code Execution Vulnerability. This vulnerability allo

PDF-XChange Editor TrackerUpdate Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnera

GFI Archiver MArc.Store Missing Authorization Authentication Bypass Vulnerability. This vulnerability allows remote atta

GFI Archiver MArc.Core Missing Authorization Authentication Bypass Vulnerability. This vulnerability allows remote attac

GFI Archiver MArc.Core Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows