CVE-2026-10241 - A security flaw has been discovered in jeecgboot The server processes these URLs up to 3.9.1. This a

CVE-2026-10240 - A vulnerability was identified in JeecgBoot up to 3.9.2. The impacted element is an unknown function

CVE-2026-10239 - A vulnerability was determined in JeecgBoot up to 3.9.2. The affected element is the function WordUt

CVE-2026-10237 - A vulnerability was found in SourceCodester Water Billing Management System 1.0. Impacted is an unkn

CVE-2026-10236 - A vulnerability has been found in SourceCodester Water Billing Management System 1.0. This issue aff

CVE-2026-45192 - A bug in the GET `/api/v2/connections/{connection_id}` REST API endpoint in Apache Airflow allowed a

CVE-2026-35563 - It was identified that the LDAP client implementation in version 2.1.7 does not verify if the server

CVE-2026-10235 - A flaw has been found in CodeAstro Ingredients Stock Management System 1.0. This vulnerability affec

CVE-2026-10234 - A vulnerability was detected in Mettle sendportal up to 3.0.1. This affects an unknown part of the f

CVE-2026-10233 - A security vulnerability has been detected in Assimp up to 6.0.4. Affected by this issue is the func

CVE-2026-10232 - A weakness has been identified in Assimp up to 6.0.4. Affected by this vulnerability is the function

CVE-2026-10231 - A security flaw has been discovered in Assimp up to 6.0.4. Affected is the function HL1MDLLoader::ex

CVE-2026-10230 - A vulnerability was identified in Assimp up to 6.0.4. This impacts the function Assimp::MDL::HalfLif

CVE-2026-10229 - A vulnerability was determined in Assimp up to 6.0.4. This affects the function HL1MDLLoader::read_m

CVE-2026-10228 - A vulnerability was found in raisulislamg4 student_management_system_by_php up to 310d950e09013d5133

CVE-2026-10227 - A vulnerability has been found in raisulislamg4 student_management_system_by_php up to 310d950e09013

CVE-2026-10226 - A flaw has been found in raisulislamg4 student_management_system_by_php up to 310d950e09013d5133c6b9

CVE-2026-10225 - A vulnerability was detected in raisulislamg4 student_management_system_by_php up to 310d950e09013d5

CVE-2026-10224 - A security vulnerability has been detected in NousResearch hermes-agent up to 2026.4.30. This vulner

CVE-2026-10223 - A weakness has been identified in NousResearch hermes-agent up to 2026.4.30. This affects the functi

CVE-2026-10222 - A security flaw has been discovered in NousResearch hermes-agent up to 2026.4.30. Affected by this i

CVE-2026-48209 - An improper neutralization of user-controllable input in OTRS or ((OTRS)) Community Edition ticket h

CVE-2026-48208 - An improper neutralization of active SVG content in OTRS or ((OTRS)) Community Edition ticket articl

CVE-2026-48191 - An incorrect handling of permissions in STORM powered by OTRS and in OTRS (2026.x and above) Documen

CVE-2026-48190 - An incorrect handling of permissions in OTRS External Interface and the ConfigItem List module allow

CVE-2026-48189 - An improper Input Validation vulnerability in OTRS Customer Backend module allows to access customer

CVE-2026-48188 - An improper Input Validation vulnerability in OTRS or ((OTRS)) Community Edition database layer modu

CVE-2026-48187 - An uncontrolled allocation of resources without limits or throttling in the e-mail handling in OTRS

CVE-2026-20456 - In wlan STA driver, there is a possible system crash due to a missing bounds check. This could lead

CVE-2026-20455 - In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead

CVE-2026-20454 - In geniezone, there is a possible out of bounds write due to a race condition. This could lead to lo

CVE-2026-20453 - In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead

CVE-2026-20452 - In wlan AP driver, there is a possible memory corruption due to a heap buffer overflow. This could l

CVE-2026-10221 - A vulnerability was identified in NousResearch hermes-agent up to 0.12.0. Affected by this vulnerabi

CVE-2026-10220 - A vulnerability was determined in NousResearch hermes-agent up to 2026.4.30. Affected is the functio

CVE-2026-10219 - A vulnerability was found in nextlevelbuilder GoClaw up to 3.11.3. This impacts the function FsBridg

CVE-2026-10218 - A vulnerability has been found in nextlevelbuilder GoClaw up to 3.11.3. This affects the function au

CVE-2026-10217 - A flaw has been found in nextlevelbuilder GoClaw up to 3.11.3. The impacted element is the function

CVE-2026-10216 - A vulnerability was detected in unitedbyai droidclaw up to 0.5.3. The affected element is an unknown

CVE-2026-10215 - A security vulnerability has been detected in Dolibarr ERP CRM up to 23.0.1. Impacted is the functio

CVE-2026-10214 - A weakness has been identified in zhayujie chatgpt-on-wechat up to 2.0.8. This issue affects the fun

CVE-2026-10213 - A security flaw has been discovered in AstrBotDevs AstrBot 4.23.6. This vulnerability affects unknow

CVE-2026-10212 - A vulnerability was identified in AstrBotDevs AstrBot 4.24.2. This affects the function astr_main_ag

CVE-2026-10211 - A vulnerability was determined in AstrBotDevs AstrBot 4.23.6. Affected by this issue is the function

CVE-2026-10210 - A vulnerability was found in AstrBotDevs AstrBot 4.23.6. Affected by this vulnerability is the funct

CVE-2026-10209 - A vulnerability has been found in code-projects Online Hospital Management System 1.0. Affected is a

CVE-2026-10208 - A flaw has been found in code-projects Online Hospital Management System 1.php. This impacts the fun

CVE-2026-10206 - A vulnerability was detected in D-Link DI-8400 up to 16.07.26A1. This affects an unknown function of

CVE-2026-10205 - A security vulnerability has been detected in Metasoft 美特软件 MetaCRM 6.4.0. The impacted element is a

CVE-2026-10204 - A weakness has been identified in OFCMS 1.1.3. The affected element is the function Query of the fil

CVE-2026-10203 - A security flaw has been discovered in OFCMS 1.1.3. Impacted is the function Query of the file \ofcm

CVE-2026-10202 - A vulnerability was identified in OFCMS 1.1.3. This issue affects the function Query of the file \of

CVE-2026-10201 - A vulnerability was determined in Assimp up to 6.0.4. This vulnerability affects the function FBXExp

CVE-2026-10200 - A vulnerability was found in Assimp up to 6.0.4. This affects the function glTFCommon::CopyValue in

CVE-2026-10199 - A vulnerability has been found in Assimp up to 6.0.4. Affected by this issue is the function glTF2::

CVE-2026-10198 - A flaw has been found in Assimp up to 6.0.4. Affected by this vulnerability is the function Assimp::

CVE-2026-48210 - An improper default configuration in OTRS 2026.3.1 causes ticket article forwarding actions to enfor

CVE-2026-10197 - A vulnerability was detected in Assimp up to 6.0.4. Affected is the function glTF2Importer::ImportEm

CVE-2026-8796 - Sereal::Decoder versions before 5.005 for Perl allow heap out-of-bounds read via crafted input. In

CVE-2026-10194 - A weakness has been identified in OFFIS DCMTK 3.7.0. This affects the function DcmQueryRetrieveIndex

CVE-2026-10193 - A security flaw has been discovered in OFCMS up to 1.1.3. The impacted element is the function Query

CVE-2026-10192 - A vulnerability was identified in Tenda W12 3.0.0.7(4763). The affected element is the function set_

CVE-2026-10191 - A vulnerability was determined in Tenda W12 3.0.0.7(4763). Impacted is the function cgiWifiMacFilter

CVE-2026-10190 - A vulnerability was found in Tenda W12 3.0.0.7(4763). This issue affects the function cgiSysWebTimeo

CVE-2026-10189 - A vulnerability has been found in Tenda W12 3.0.0.7(4763). This vulnerability affects the function c

CVE-2026-10188 - A flaw has been found in Tenda W12 3.0.0.7(4763). This affects the function cgistaKickOff of the fil

CVE-2026-10187 - A vulnerability was detected in Totolink N300RH 6.1c.1353_B20190305. Affected by this issue is the f

CVE-2026-10186 - A security vulnerability has been detected in code-projects Online Hospital Management System 1.0. A

CVE-2026-10185 - A weakness has been identified in SourceCodester Hospitals Patient Records Management System 1.0. Af

CVE-2026-10184 - A security flaw has been discovered in SourceCodester Hospitals Patient Records Management System 1.

CVE-2026-10183 - A vulnerability was identified in TRENDnet TEW-432BRP 3.10B20. This affects the function formWlanSet

CVE-2026-10182 - A vulnerability was determined in TRENDnet TEW-432BRP 3.10B20. The impacted element is the function

CVE-2026-49490 - OpenCATS from version 0.9.1a contains an SQL injection vulnerability in DataGrid filter handling tha

CVE-2026-49489 - OpenCATS through 0.9.7.4 contains a sql injection vulnerability in the sortDirection parameter of th

CVE-2026-10181 - A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. The affected element is the function formS

CVE-2026-10180 - A vulnerability has been found in TRENDnet TEW-432BRP 3.10B20. Impacted is the function formSysCmd o

CVE-2026-10179 - A flaw has been found in TRENDnet TEW-432BRP 3.10B20. This issue affects the function formSetWlanEnc

CVE-2026-10178 - A vulnerability was detected in code-projects Online Music Site 1.0. This vulnerability affects unkn

CVE-2026-10177 - A security vulnerability has been detected in Aider-AI Aider 0.86.3. This affects the function reque

CVE-2026-10176 - A weakness has been identified in Aider-AI Aider 0.86.3. Affected by this issue is some unknown func

CVE-2026-10175 - A security flaw has been discovered in Aider-AI Aider 0.86.3. Affected by this vulnerability is the

CVE-2026-10174 - A vulnerability was identified in Aider-AI Aider 0.86.3. Affected is an unknown function of the file

CVE-2026-10173 - A weakness has been identified in Orthanc Explorer 2 up to 1.12.0. The impacted element is an unknow

CVE-2026-10172 - A security flaw has been discovered in Bdtask Multi-Store Inventory Management System 1.0. The affec

CVE-2026-10171 - A vulnerability has been found in code-projects Online Music Site 1.0. This affects an unknown part

CVE-2026-10170 - A flaw has been found in code-projects Visitor Management System 1.0. Affected by this issue is some

CVE-2026-10169 - A vulnerability was detected in OUSL-GROUP-BrinaryBrains School Student Management System up to 1e70

CVE-2026-10168 - A security vulnerability has been detected in OUSL-GROUP-BrinaryBrains School Student Management Sys

CVE-2026-10167 - A weakness has been identified in OUSL-GROUP-BrinaryBrains School Student Management System up to 1e

CVE-2026-8382 - The Advanced Custom Fields (ACF®) plugin for WordPress is vulnerable to authorization bypass in all

CVE-2026-10166 - A vulnerability was determined in Edimax BR-6478AC 1.23. The affected element is the function formWl

CVE-2026-10165 - A vulnerability was identified in Edimax BR-6478AC 1.23. The impacted element is the function formWa

CVE-2026-10164 - A vulnerability was found in Edimax BR-6478AC 1.23. Impacted is the function formUSBFolder of the fi

CVE-2026-10163 - A vulnerability has been found in Edimax BR-6478AC 1.23. This issue affects the function formUSBAcco

CVE-2026-10162 - A flaw has been found in TRENDnet TEW-432BRP 3.10B20. This vulnerability affects the function formSe

CVE-2026-10161 - A vulnerability was detected in TRENDnet TEW-432BRP 3.10B20. This affects the function formResetStat

CVE-2026-10160 - A security vulnerability has been detected in TRENDnet TEW-432BRP 3.10B20. Affected by this issue is

CVE-2026-10159 - A weakness has been identified in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the

CVE-2026-10158 - A security flaw has been discovered in TRENDnet TEW-432BRP 3.10B20. Affected is the function formPor

CVE-2026-10157 - A vulnerability was identified in Open5GS up to 2.7.6. This impacts an unknown function of the file

CVE-2026-10156 - A vulnerability was determined in Open5GS up to 2.7.7. This affects the function handle_amf_info in

CVE-2026-10155 - A vulnerability was found in Bdtask Multi-Store Inventory Management System 1.0. The impacted elemen

CVE-2026-10154 - A vulnerability has been found in Dolibarr ERP CRM 23.0.0/23.0.1/23.0.2. The affected element is an

CVE-2026-10153 - A flaw has been found in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Impacted

CVE-2026-10152 - A vulnerability was detected in TaleLin lin-cms-spring-boot up to 0.2.1. This issue affects some unk

CVE-2026-10127 - A weakness has been identified in Edimax BR-6478AC 1.23. This affects the function formStaDrvSetup o

CVE-2026-10126 - A security flaw has been discovered in Edimax BR-6478AC 1.23. Affected by this issue is the function

CVE-2026-8594 - Text::LineFold versions through 2019.001 for Perl duplicate the output based on the number of specia

CVE-2026-10125 - A vulnerability was identified in Edimax BR-6478AC 1.23. Affected by this vulnerability is the funct

CVE-2026-10124 - A vulnerability was determined in Shibby Tomato up to 1.28. Affected is the function rip_zebra_read_

CVE-2026-10123 - A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. This impacts the function formSetDomainFil

CVE-2026-10122 - A vulnerability has been found in TRENDnet TEW-432BRP 3.10B20. This affects the function formSetProt

CVE-2026-10121 - A flaw has been found in TRENDnet TEW-432BRP 3.10B20. The impacted element is the function formSetUr

CVE-2018-25426 - WinMTR 0.91 contains a denial of service vulnerability that allows attackers to crash the applicatio

CVE-2018-25425 - Yot CMS 3.3.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execu

CVE-2018-25424 - Gate Pass Management System 2.1 contains an SQL injection vulnerability that allows unauthenticated

CVE-2018-25423 - Arm Whois 3.11 contains a buffer overflow vulnerability that allows local attackers to crash the app

CVE-2018-25422 - MOGG web simulator Script contains an SQL injection vulnerability that allows unauthenticated attack

CVE-2018-25421 - Open STA Manager 2.3 contains a path traversal vulnerability that allows authenticated users to down

CVE-2018-25420 - AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to

CVE-2018-25419 - AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to

CVE-2018-25418 - AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to

CVE-2018-25417 - AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to

CVE-2018-25416 - AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to

CVE-2018-25415 - AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to

CVE-2018-25414 - AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to

CVE-2018-25413 - AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to

CVE-2018-25412 - Delta Sql 1.8.2 contains an arbitrary file upload vulnerability that allows unauthenticated attacker

CVE-2018-25411 - MGB OpenSource Guestbook 0.7.0.2 contains an SQL injection vulnerability that allows unauthenticated

CVE-2018-25410 - SIM-PKH 2.4.1 contains an SQL injection vulnerability that allows authenticated attackers to execute

CVE-2018-25409 - SIM-PKH 2.4.1 contains an arbitrary file upload vulnerability that allows authenticated attackers to

CVE-2018-25408 - The Open ISES Project 3.30A contains a path traversal vulnerability in the ajax/download.php endpoin

CVE-2018-25407 - eNdonesia Portal 8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated atta

CVE-2018-25406 - eNdonesia Portal 8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated atta

CVE-2018-25405 - eNdonesia Portal 8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated atta

CVE-2026-10120 - A vulnerability was detected in TRENDnet TEW-432BRP 3.10B20. The affected element is the function fo

CVE-2026-10119 - A security vulnerability has been detected in TRENDnet TEW-432BRP 3.10B20. Impacted is the function

CVE-2026-46242 - In the Linux kernel, the following vulnerability has been resolved: eventpoll: fix ep_remove struct

CVE-2026-10117 - A weakness has been identified in Open5GS up to 2.7.7. This issue affects the function ogs_pool_id_c

CVE-2026-10116 - A security flaw has been discovered in Open5GS up to 2.7.7. This vulnerability affects the function

CVE-2026-10115 - A vulnerability was identified in Open5GS up to 2.7.7. This affects an unknown part in the library l

CVE-2026-10114 - A vulnerability was determined in Open5GS up to 2.7.7. Affected by this issue is the function handle

CVE-2026-9757 - The GEO my WP plugin for WordPress is vulnerable to SQL Injection via the 'swlatlng' and 'nelatlng'

CVE-2026-7465 - The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerab

CVE-2026-7459 - The Simple History – Track, Log, and Audit WordPress Changes plugin for WordPress is vulnerable to a

CVE-2026-10113 - A vulnerability was found in Open5GS up to 2.7.7. Affected by this vulnerability is an unknown funct

CVE-2026-5071 - The SocketCAN implementation validates the length of a user-provided buffer containing a socketcan_f

CVE-2026-10112 - A vulnerability has been found in sambitraj STUDENT-MANAGEMENT-SYSTEM 1.0. Affected is an unknown fu

CVE-2026-10111 - A flaw has been found in sambitraj STUDENT-MANAGEMENT-SYSTEM 1.0. This impacts an unknown function o

CVE-2026-10110 - A vulnerability was detected in code-projects Student Details Management System 1.0. This affects an

CVE-2026-48840 - Exim 4.88 before 4.99.4, in some proxy configurations, mishandles certain short payloads, leading to

CVE-2026-9831 - A race condition in the shared Extreme Platform ONE IAM Gateway API-key authentication path could, u

CVE-2026-4387 - StrongDM Desktop Application before 23.74.0 (Desktop Client before 53.77.0) on Microsoft Windows sto

CVE-2026-48811 - FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to 1.8.221,

CVE-2026-48810 - FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to 1.8.221,

CVE-2026-48557 - Spatie Laravel Media Library before version 11.23.0 contains a file upload restriction bypass in Fil

CVE-2026-48555 - Spatie Laravel Media Library before version 11.23.0 contains a server-side request forgery vulnerabi

CVE-2026-47266 - Formie is a Craft CMS plugin for creating forms. Prior to 2.2.21 and 3.1.26, unauthenticated users c

CVE-2026-47123 - FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to 1.8.220,

CVE-2026-46599 - The TIFF decoder does not place a limit on the size of PackBits-compressed data. A maliciously-craft

CVE-2026-46527 - cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.44.0, W

CVE-2026-46385 - iskorotkov/avro is a fast Go Avro codec. Prior to 2.33.0, the Avro array and map decoders looped ove

CVE-2026-46384 - iskorotkov/avro is a fast Go Avro codec. Prior to 2.33.0, several Avro decoder paths read attacker-c

CVE-2026-45700 - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's planar b

CVE-2026-45697 - Formie is a Craft CMS plugin for creating forms. Prior to 2.2.20 and 3.1.24, unauthenticated users c

CVE-2026-45613 - Rizin is a UNIX-like reverse engineering framework and command-line toolset. There is a heap-buffer-

CVE-2026-45372 - cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.44.0, w

CVE-2026-45352 - cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.43.4, n

CVE-2026-45324 - Rizin is a UNIX-like reverse engineering framework and command-line toolset. There is a double free

CVE-2026-45294 - FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to 1.8.219,

CVE-2026-45151 - NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform. In 0.24.8 and earlier, quic_st

CVE-2026-45149 - The brace-expansion library generates arbitrary strings containing a common prefix and suffix. From

CVE-2026-44640 - NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform. Prior to 0.24.14, aio->prov_da

CVE-2026-44422 - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's RDPEAR N

CVE-2026-44421 - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, a malicious RDP se

CVE-2026-44420 - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, a malicious RDP cl

CVE-2026-44287 - FastGPT is an AI Agent building platform. Prior to 4.15.0-beta1, the JavaScript sandbox worker at pr

CVE-2026-44285 - FastGPT is an AI Agent building platform. Prior to 4.15.0-beta1, a Server-Side Request Forgery (SSRF

CVE-2026-42500 - Decoding a paletted BMP file with an out-of-range palette index results in a panic when accessing pi

CVE-2026-34127 - A stored cross-site scripting (XSS) vulnerability has been identified in the web management interfac

CVE-2026-9051 - There is an authentication bypass vulnerability in the NI SystemLink Enterprise Dashboard applicatio

CVE-2026-49386 - In JetBrains YouTrack before 2026.1.13570 improper access control allowed enumeration of restricted

CVE-2026-49385 - In JetBrains YouTrack before 2026.1.13570 improper access control allowed low-privileged users to mo

CVE-2026-49384 - In JetBrains PyCharm before 2025.3.4 stored XSS in Jupyter notebook Markdown cells was possible

CVE-2026-49383 - In JetBrains IntelliJ IDEA before 2026.1 xXE in the UI Designer form parser was possible

CVE-2026-49382 - In JetBrains IntelliJ IDEA before 2026.1 code execution was possible via template injection in the C

CVE-2026-49381 - In JetBrains TeamCity before 2026.1 stored XSS on the SAML login page was possible

CVE-2026-49380 - In JetBrains TeamCity before 2026.1 open redirect in the SAML plugin was possible

CVE-2026-49379 - In JetBrains TeamCity before 2026.1 credentials could be exposed in thread names

CVE-2026-49378 - In JetBrains TeamCity before 2026.1 credentials parameters were exposed via parameter autocompletion

CVE-2026-49377 - In JetBrains TeamCity before 2025.11.2 exposure of sensitive data via default agent parameters

CVE-2026-49376 - In JetBrains TeamCity before 2026.1 insufficient username validation in the SAML plugin

CVE-2026-49375 - In JetBrains TeamCity before 2026.1, 2025.11.5 reflected XSS was possible on the repository downloa

CVE-2026-49374 - In JetBrains TeamCity before 2026.1 improper permission checks exposed build configuration parameter

CVE-2026-49373 - In JetBrains TeamCity before 2026.1 remote code execution was possible via Perforce connection setti

CVE-2026-49372 - In JetBrains TeamCity before 2026.1, 2025.11.5 unauthenticated SSRF via build status was possible

CVE-2026-49371 - In JetBrains TeamCity before 2026.1.1 reflected XSS in the keyword filter was possible

CVE-2026-49370 - In JetBrains YouTrack before 2026.1.13162 information disclosure was possible on fetchApp requests

CVE-2026-49369 - In JetBrains YouTrack before 2026.1.13162 information disclosure was possible on Users and Groups pa

CVE-2026-49368 - In JetBrains YouTrack before 2026.1.13162 stored XSS in project notification templates was possible

CVE-2026-49367 - In JetBrains IntelliJ IDEA before 2026.1.1 command execution was possible via the guest user account

CVE-2026-49366 - In JetBrains IntelliJ IDEA before 2026.1.1 command injection was possible via filename completion

CVE-2026-47745 - Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, the admin tables for PaymentMethods, C

CVE-2026-47744 - Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, two distinct authorization defects in

CVE-2026-47742 - Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, Sub-form Livewire components used in t

CVE-2026-47741 - Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, CreateOrderFromCartAction::execute pre

CVE-2026-47740 - Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, Multiple Filament actions on the admin

CVE-2026-46372 - SillyTavern is a locally installed user interface that allows users to interact with text generation

CVE-2026-46344 - liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptogra

CVE-2026-44652 - SillyTavern is a locally installed user interface that allows users to interact with text generation

CVE-2026-44651 - SillyTavern is a locally installed user interface that allows users to interact with text generation

CVE-2026-44650 - SillyTavern is a locally installed user interface that allows users to interact with text generation

CVE-2026-44649 - SillyTavern is a locally installed user interface that allows users to interact with text generation

CVE-2026-44648 - SillyTavern is a locally installed user interface that allows users to interact with text generation

CVE-2026-44611 - Danelec MacGregor Voyage Data Recorder passwords are stored with a hashing method which limits passw

CVE-2026-44518 - liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptogra

CVE-2026-42951 - An authenticated user can download a backup of the Danelec MacGregor Voyage Data Recorder device w

CVE-2026-42941 - The Danelec MacGregor Voyage Data Recorder device includes a default username and password, with no

CVE-2026-42929 - Danelec MacGregor Voyage Data Recorder includes default accounts with hard-coded credentials.

CVE-2026-40425 - The administrator account for the Danelec MacGregor Voyage Data Recorder web interface can directly

CVE-2026-7786 - Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter device firmwa

CVE-2026-6824 - A stored cross-site scripting (XSS) vulnerability exists in certain 1xxx series NVR devices due to i

CVE-2026-5768 - The Frontier X2 device allows unauthenticated BLE read/write access to critical GATT characteristics

CVE-2026-5386 - The affected KMW CCTV Security Cameras are vulnerable to a critical unauthenticated password reset.

CVE-2026-47179 - Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 1.19.

CVE-2026-47125 - Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 1.19.

CVE-2026-45668 - Trilium Notes is a cross-platform, hierarchical note taking application focused on building large pe

CVE-2026-45661 - Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.26.5 and earlier, a critical pat

CVE-2026-45660 - Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.73.22 and 6.18.1,

CVE-2026-45633 - Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.26.6 and earlier, Dokploy contai

CVE-2026-45632 - Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.26.7 and earlier, the schedule r

CVE-2026-45631 - Dokploy is a free, self-hostable Platform as a Service (PaaS). From 0.27.0 to before 0.29.3, a hardc

CVE-2026-45630 - Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.28.8 and earlier, authenticated

CVE-2026-45629 - Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.28.8 and earlier, authenticated

CVE-2026-45628 - Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.29.2 and earlier, Dokploy constr

CVE-2026-45627 - Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 1.19.

CVE-2026-45626 - Arcane is an interface for managing Docker containers, images, networks, and volumes. In 1.18.1 and

CVE-2026-45625 - Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 1.19.

CVE-2026-45577 - Neotoma provides versioned records that persist across agent runs. From 0.6.0 to before 0.11.1, Neot

CVE-2026-44697 - Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.17, a remote, una

CVE-2026-43917 - Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.19.0 and earlier, the protectedP

CVE-2026-10108 - xiaomusic v0.5.7 contains an unauthenticated path traversal vulnerability in the GET /music/{file_pa

CVE-2026-10107 - MoviePilot v2 contains a server-side request forgery vulnerability in the image proxy endpoint that

CVE-2026-10105 - agno 2.6.5 contains a SQL injection vulnerability in the ClickHouse vector database backend that all

CVE-2026-10070 - A vulnerability was found in macrozheng mall up to 1.0.3. This affects an unknown function of the fi

CVE-2026-9194 - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in

CVE-2026-48501 - GitHub CLI (gh) is GitHub’s official command line tool. Prior to 2.93.0, GitHub CLI incorrectly incl

CVE-2026-45663 - Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.29.1 and earlier, a command inje

CVE-2026-45662 - Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.29.0 and earlier, the deleteRegi

CVE-2026-44962 - Plesk contains an XPath injection vulnerability in the APS Application Catalog search functionality,