CVE-2026-18613 | Critical | 9.8 | 2026-08-03 | A vulnerability has been found in GL-iNet GL-MT3000 up to 4.4.5. This issue affects the function plugins.set_config of the file /cgi-bin/glc of the component p… |
CVE-2026-4249 | High | 8.6 | 2026-07-06 | The throttling event handling mechanism in multiple WSO2 products accepts user-supplied JSON payloads without sufficient validation of their structure and cont… |
CVE-2026-11457 | High | 7.3 | 2026-06-07 | A security flaw has been discovered in erzhongxmu JeeWMS up to 141740afb2ba14d441c82a833d0a418d07ca2d69. This vulnerability affects unknown code of the file /b… |
CVE-2026-10661 | Medium | 4.3 | 2026-06-02 | A vulnerability has been found in ahujasid blender-mcp up to 7636d13bded82eca58eb93c3f4cd8708dfdfbe8b. Impacted is the function Open of the file src/blender_mc… |
CVE-2026-10223 | Medium | 6.3 | 2026-06-01 | A weakness has been identified in NousResearch hermes-agent up to 2026.4.30. This affects the function _scan_memory_content of the file tools/memory_tool.py. T… |
CVE-2026-10222 | Medium | 5.6 | 2026-06-01 | A security flaw has been discovered in NousResearch hermes-agent up to 2026.4.30. Affected by this issue is the function _sanitize_env_lines of the file hermes… |
CVE-2026-10221 | High | 7.3 | 2026-06-01 | A vulnerability was identified in NousResearch hermes-agent up to 0.12.0. Affected by this vulnerability is the function _compress_context of the file run_agen… |
CVE-2026-10220 | High | 7.3 | 2026-06-01 | A vulnerability was determined in NousResearch hermes-agent up to 2026.4.30. Affected is the function _serve_plugin_skill/skill_view of the file tools/skills_t… |
CVE-2026-10210 | Medium | 6.3 | 2026-06-01 | A vulnerability was found in AstrBotDevs AstrBot 4.23.6. Affected by this vulnerability is the function _sanitize_prompt_description of the file astrbot/core/s… |
CVE-2026-9422 | High | 7.3 | 2026-05-25 | A vulnerability was identified in KLiK SocialMediaWebsite 1.0. This issue affects some unknown processing of the component HTTP POST Request Parameter Handler… |
CVE-2026-9420 | Medium | 6.3 | 2026-05-25 | A vulnerability was found in KLiK SocialMediaWebsite 1.0. This affects an unknown part of the component HTTP GET Request Parameter Handler. The manipulation re… |
CVE-2026-9366 | High | 7.3 | 2026-05-24 | A vulnerability was found in NousResearch hermes-agent 2026.4.23. The impacted element is the function _scan_context_content of the file agent/prompt_builder.p… |
CVE-2026-9353 | High | 7.3 | 2026-05-24 | A security vulnerability has been detected in NousResearch hermes-agent up to 2026.4.23. Impacted is an unknown function of the file agent/skills_guard.py of t… |
CVE-2026-7045 | Medium | 6.3 | 2026-04-26 | A vulnerability was determined in baomidou dynamic-datasource 2.5.0. Affected by this vulnerability is the function DsSpelExpressionProcessor#doDetermineDataso… |
CVE-2026-6994 | Medium | 6.3 | 2026-04-25 | A weakness has been identified in Envoy up to 1.33.0. Affected is the function params.add of the file source/extensions/filters/http/header_mutation/header_mut… |
CVE-2026-6599 | Medium | 6.3 | 2026-04-20 | A vulnerability was detected in langflow-ai langflow up to 1.8.3. The impacted element is the function get_client_ip/install_mcp_config of the file src/backend… |
CVE-2026-5561 | Medium | 6.3 | 2026-04-05 | A vulnerability was determined in Campcodes Complete POS Management and Inventory System up to 4.0.6. This affects an unknown function of the file app/Http/Con… |
CVE-2026-5002 | High | 7.3 | 2026-03-28 | A vulnerability has been found in PromtEngineer localGPT up to 4d41c7d1713b16b216d8e062e51a5dd88b20b054. The impacted element is the function _route_using_over… |
CVE-2026-4516 | Medium | 6.3 | 2026-03-21 | A vulnerability was found in Foundation Agents MetaGPT up to 0.8.1. This vulnerability affects unknown code of the file metagpt/actions/di/write_analysis_code… |
CVE-2026-4511 | Medium | 6.3 | 2026-03-21 | A security vulnerability has been detected in vanna-ai vanna up to 2.0.2. Affected is the function exec of the file /src/vanna/legacy. Such manipulation leads… |
CVE-2026-4500 | Medium | 6.3 | 2026-03-20 | A vulnerability was identified in bagofwords1 bagofwords up to 0.0.297. This impacts the function generate_df of the file backend/app/ai/code_execution/code_ex… |
CVE-2026-3992 | Medium | 6.3 | 2026-03-12 | A weakness has been identified in CodeGenieApp serverless-express up to 4.17.1. This affects an unknown part of the file utils/dynamodb.ts of the component Use… |
CVE-2026-3813 | Medium | 6.3 | 2026-03-09 | A vulnerability was identified in opencc JFlow up to 5badc00db382d7cb82dad231e6a866b18e0addfe. Affected by this vulnerability is the function Calculate of the… |
CVE-2026-2954 | Medium | 6.3 | 2026-02-22 | A vulnerability was found in Dromara UJCMS 10.0.2. Impacted is the function importChanel of the file /api/backend/ext/import-data/import-channel of the compone… |
CVE-2025-14674 | Medium | 6.3 | 2025-12-14 | A vulnerability was found in aizuda snail-job up to 1.6.0. Affected by this vulnerability is the function QLExpressEngine.doEval of the file snail-job-common/s… |
CVE-2025-66545 | Low | 3.5 | 2025-12-05 | Nextcloud Groupfolders provides admin-configured folders shared by everyone in a group or team. Prior to 14.0.11, 15.3.12, 16.0.15, 17.0.14, 18.1.8, 19.1.8, an… |
CVE-2025-13268 | Medium | 6.3 | 2025-11-17 | A flaw has been found in Dromara dataCompare up to 1.0.1. The affected element is the function DbConfig of the file src/main/java/com/vince/xq/project/system/d… |
CVE-2025-27712 | Medium | 5.7 | 2025-11-11 | Improper neutralization for some Intel(R) Neural Compressor software before version v3.4 within Ring 3: User Applications may allow an escalation of privilege… |
CVE-2025-11445 | Medium | 6.3 | 2025-10-08 | A vulnerability was detected in Kilo Code up to 4.86.0. Affected is the function ClineProvider of the file src/core/webview/ClineProvider.ts of the component P… |
CVE-2025-9797 | Low | 2.4 | 2025-09-01 | A vulnerability was determined in mrvautin expressCart up to b31302f4e99c3293bd742c6d076a721e168118b0. This impacts an unknown function of the file /admin/prod… |
CVE-2025-24921 | Medium | 6.6 | 2025-08-12 | Improper neutralization for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge Platform may allow an unauthenticated user to po… |
CVE-2025-3805 | Medium | 5.3 | 2025-04-19 | A vulnerability classified as critical was found in sarrionandia tournatrack up to 4c13a23f43da5317eea4614870a7a8510fc540ec. Affected by this vulnerability is… |
CVE-2025-3804 | Medium | 5.3 | 2025-04-19 | A vulnerability classified as critical has been found in thautwarm vscode-diana 0.0.1. Affected is an unknown function of the file Gen.py of the component Jinj… |
CVE-2025-26633 | High | 7.0 | 2025-03-11 | Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally. |
CVE-2025-1611 | Medium | 4.7 | 2025-02-24 | A vulnerability was found in ShopXO up to 6.4.0. It has been classified as problematic. This affects an unknown part of the file app/service/ThemeAdminService… |
CVE-2025-0697 | Medium | 5.3 | 2025-01-24 | A vulnerability, which was classified as problematic, was found in Telstra Smart Modem Gen 2 up to 20250115. This affects an unknown part of the component HTTP… |
CVE-2024-10915 | High | 8.1 | 2024-11-06 | A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been rated as critical. Affected by this issue is the funct… |
CVE-2024-10914 | High | 8.1 | 2024-11-06 | A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been declared as critical. Affected by this vulnerability i… |
CVE-2024-10845 | High | 7.3 | 2024-11-05 | A vulnerability has been found in 1000 Projects Bookstore Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file… |
CVE-2024-10844 | High | 7.3 | 2024-11-05 | A vulnerability, which was classified as critical, was found in 1000 Projects Bookstore Management System 1.0. This affects an unknown part of the file search… |
CVE-2024-10842 | Low | 2.4 | 2024-11-05 | A vulnerability, which was classified as problematic, has been found in romadebrian WEB-Sekolah 1.0. Affected by this issue is some unknown functionality of th… |
CVE-2024-10841 | Medium | 5.5 | 2024-11-05 | A vulnerability classified as critical was found in romadebrian WEB-Sekolah 1.0. Affected by this vulnerability is an unknown functionality of the file /Proses… |
CVE-2024-10840 | Low | 2.4 | 2024-11-05 | A vulnerability classified as problematic has been found in romadebrian WEB-Sekolah 1.0. Affected is an unknown function of the file /Admin/akun_edit.php of th… |
CVE-2024-10810 | Medium | 6.3 | 2024-11-05 | A vulnerability was found in code-projects E-Health Care System 1.0. It has been classified as critical. Affected is an unknown function of the file Doctor/app… |
CVE-2024-10809 | Medium | 6.3 | 2024-11-05 | A vulnerability was found in code-projects E-Health Care System 1.0 and classified as critical. This issue affects some unknown processing of the file /Doctor/… |
CVE-2024-10808 | Medium | 6.3 | 2024-11-05 | A vulnerability has been found in code-projects E-Health Care System 1.0 and classified as critical. This vulnerability affects unknown code of the file Admin/… |
CVE-2024-10807 | Low | 2.4 | 2024-11-05 | A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been rated as problematic. This issue affects some unknown processing of the fil… |
CVE-2024-10806 | Low | 2.4 | 2024-11-05 | A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been declared as problematic. This vulnerability affects unknown code of the fil… |
CVE-2024-10805 | Medium | 6.3 | 2024-11-04 | A vulnerability was found in code-projects University Event Management System 1.0. It has been classified as critical. This affects an unknown part of the file… |
CVE-2024-10791 | High | 7.3 | 2024-11-04 | A vulnerability, which was classified as critical, has been found in Codezips Hospital Appointment System 1.0. This issue affects some unknown processing of th… |
CVE-2024-10768 | Low | 3.5 | 2024-11-04 | A vulnerability classified as problematic was found in PHPGurukul Online Shopping Portal 2.0. This vulnerability affects unknown code of the file /admin/assets… |
CVE-2024-10752 | High | 7.3 | 2024-11-04 | A vulnerability was found in Codezips Pet Shop Management System 1.0. It has been classified as critical. This affects an unknown part of the file /productsadd… |
CVE-2024-10700 | Medium | 6.3 | 2024-11-02 | A vulnerability was found in code-projects University Event Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of… |
CVE-2024-43572 | High | 7.8 | 2024-10-08 | Microsoft Management Console Remote Code Execution Vulnerability |
CVE-2024-9324 | Medium | 6.3 | 2024-09-29 | A vulnerability was found in Intelbras InControl up to 2.21.57. It has been rated as critical. Affected by this issue is some unknown functionality of the file… |
CVE-2024-21864 | High | 7.8 | 2024-05-16 | Improper neutralization in some Intel(R) Arc(TM) & Iris(R) Xe Graphics software before version 31.0.101.5081 may allow an unauthenticated user to potentially e… |
CVE-2023-46689 | High | 8.8 | 2024-05-16 | Improper neutralization in Intel(R) Power Gadget software for macOS all versions may allow an authenticated user to potentially enable escalation of privilege… |
CVE-2023-45315 | Medium | 5.5 | 2024-05-16 | Improper initialization in some Intel(R) Power Gadget software for Windwos all versions may allow an authenticated user to potentially enable denial of service… |
CVE-2023-42773 | High | 8.8 | 2024-05-16 | Improper neutralization in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to potentially enable escalation of privileg… |
CVE-2023-6123 | High | 7.5 | 2024-02-15 | Improper Neutralization vulnerability affects OpenText ALM Octane version 16.2.100 and above. The vulnerability could result in a remote code execution attack. |
CVE-2022-4730 | Low | 3.5 | 2022-12-27 | A vulnerability was found in Graphite Web. It has been classified as problematic. Affected is an unknown function of the component Absolute Time Range Handler… |
CVE-2022-4729 | Low | 3.5 | 2022-12-27 | A vulnerability was found in Graphite Web and classified as problematic. This issue affects some unknown processing of the component Template Name Handler. The… |
CVE-2022-4728 | Low | 3.5 | 2022-12-27 | A vulnerability has been found in Graphite Web and classified as problematic. This vulnerability affects unknown code of the component Cookie Handler. The mani… |
CVE-2022-4727 | Low | 3.5 | 2022-12-27 | A vulnerability, which was classified as problematic, was found in OpenMRS Appointment Scheduling Module up to 1.16.x. This affects the function getNotes of th… |
CVE-2022-4726 | Medium | 6.3 | 2022-12-27 | A vulnerability classified as critical was found in SourceCodester Sanitization Management System 1.0. Affected by this vulnerability is an unknown functionali… |
CVE-2020-36626 | Medium | 5.5 | 2022-12-27 | A vulnerability classified as critical has been found in Modern Tribe Panel Builder Plugin. Affected is the function add_post_content_filtered_to_search_sql of… |
CVE-2022-4642 | Low | 3.5 | 2022-12-21 | A vulnerability was found in tatoeba2. It has been classified as problematic. This affects an unknown part of the component Profile Name Handler. The manipulat… |
CVE-2022-4640 | Low | 3.5 | 2022-12-21 | A vulnerability has been found in Mingsoft MCMS 5.2.9 and classified as problematic. Affected by this vulnerability is the function save of the component Artic… |
CVE-2022-4638 | Low | 3.5 | 2022-12-21 | A vulnerability classified as problematic was found in collective.contact.widget up to 1.12. This vulnerability affects the function title of the file src/coll… |
CVE-2022-4631 | Low | 3.5 | 2022-12-21 | A vulnerability, which was classified as problematic, was found in WP-Ban. Affected is an unknown function of the file ban-options.php. The manipulation leads… |
CVE-2021-4274 | Low | 3.5 | 2022-12-21 | A vulnerability, which was classified as problematic, has been found in sileht bird-lg. This issue affects some unknown processing of the file templates/layout… |
CVE-2021-4273 | Medium | 4.3 | 2022-12-21 | A vulnerability classified as problematic was found in studygolang. This vulnerability affects the function Search of the file http/controller/search.go. The m… |
CVE-2021-4272 | Low | 3.5 | 2022-12-21 | A vulnerability classified as problematic has been found in studygolang. This affects an unknown part of the file static/js/topics.js. The manipulation of the… |
CVE-2021-4271 | Low | 3.5 | 2022-12-21 | A vulnerability was found in panicsteve w2wiki. It has been rated as problematic. Affected by this issue is the function toHTML of the file index.php of the co… |
CVE-2021-4270 | Low | 3.5 | 2022-12-21 | A vulnerability was found in Imprint CMS. It has been classified as problematic. Affected is the function SearchForm of the file ImprintCMS/Models/ViewHelpers… |
CVE-2021-4269 | Low | 3.5 | 2022-12-21 | A vulnerability has been found in SimpleRisk and classified as problematic. This vulnerability affects the function checkAndSetValidation of the file simpleris… |
CVE-2021-4267 | Low | 3.5 | 2022-12-21 | A vulnerability classified as problematic was found in tad_discuss. Affected by this vulnerability is an unknown functionality. The manipulation of the argumen… |
CVE-2021-4266 | Low | 3.5 | 2022-12-21 | A vulnerability classified as problematic has been found in Webdetails cpf up to 9.5.0.0-80. Affected is an unknown function of the file core/src/main/java/pt/… |
CVE-2021-4265 | Low | 3.5 | 2022-12-21 | A vulnerability was found in siwapp-ror. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to cross site scr… |
CVE-2020-36621 | Low | 3.5 | 2022-12-21 | A vulnerability, which was classified as problematic, has been found in chedabob whatismyudid. Affected by this issue is the function exports.enrollment of the… |
CVE-2021-4262 | Medium | 5.5 | 2022-12-19 | A vulnerability classified as critical was found in laravel-jqgrid. Affected by this vulnerability is the function getRows of the file src/Mgallegos/LaravelJqg… |
CVE-2021-4261 | Medium | 6.3 | 2022-12-19 | A vulnerability classified as critical has been found in pacman-canvas up to 1.0.5. Affected is the function addHighscore of the file data/db-handler.php. The… |
CVE-2022-3877 | Low | 3.5 | 2022-12-19 | A vulnerability, which was classified as problematic, was found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome. Affected is an unkno… |
CVE-2021-4257 | Low | 3.5 | 2022-12-18 | A vulnerability was found in ctrlo lenio. It has been declared as problematic. This vulnerability affects unknown code of the file views/task.tt of the compone… |
CVE-2021-4256 | Low | 3.5 | 2022-12-18 | A vulnerability was found in ctrlo lenio. It has been classified as problematic. This affects an unknown part of the file views/index.tt. The manipulation of t… |
CVE-2021-4255 | Low | 3.5 | 2022-12-18 | A vulnerability was found in ctrlo lenio and classified as problematic. Affected by this issue is some unknown functionality of the file views/contractor.tt. T… |
CVE-2021-4254 | Low | 3.5 | 2022-12-18 | A vulnerability has been found in ctrlo lenio and classified as problematic. Affected by this vulnerability is an unknown functionality of the file views/layou… |
CVE-2021-4253 | Low | 3.5 | 2022-12-18 | A vulnerability, which was classified as problematic, was found in ctrlo lenio. Affected is an unknown function in the library lib/Lenio.pm of the component Ti… |
CVE-2021-4252 | Low | 3.5 | 2022-12-18 | A vulnerability, which was classified as problematic, has been found in WP-Ban. This issue affects the function toggle_checkbox of the file ban-options.php. Th… |
CVE-2021-4251 | Low | 3.5 | 2022-12-18 | A vulnerability classified as problematic was found in as. This vulnerability affects the function getFullURL of the file include.cdn.php. The manipulation lea… |
CVE-2022-4602 | Low | 3.5 | 2022-12-18 | A vulnerability was found in Shoplazza LifeStyle 1.1. It has been rated as problematic. This issue affects some unknown processing of the file /admin/api/theme… |
CVE-2022-4601 | Low | 3.5 | 2022-12-18 | A vulnerability was found in Shoplazza LifeStyle 1.1. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/api/theme… |
CVE-2022-4600 | Low | 3.5 | 2022-12-18 | A vulnerability was found in Shoplazza LifeStyle 1.1. It has been classified as problematic. This affects an unknown part of the file /admin/api/theme-edit/ of… |
CVE-2022-4599 | Low | 3.5 | 2022-12-18 | A vulnerability was found in Shoplazza LifeStyle 1.1 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/api… |
CVE-2022-4598 | Low | 3.5 | 2022-12-18 | A vulnerability has been found in Shoplazza LifeStyle 1.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file… |
CVE-2022-4597 | Low | 3.5 | 2022-12-18 | A vulnerability, which was classified as problematic, was found in Shoplazza LifeStyle 1.1. Affected is an unknown function of the file /admin/api/admin/v2_pro… |
CVE-2022-4596 | Low | 3.5 | 2022-12-18 | A vulnerability, which was classified as problematic, has been found in Shoplazza 1.1. This issue affects some unknown processing of the file /admin/api/admin/… |
CVE-2022-4595 | Low | 3.5 | 2022-12-18 | A vulnerability classified as problematic has been found in django-openipam. This affects an unknown part of the file openipam/report/templates/report/exposed_… |
CVE-2022-4593 | Low | 3.5 | 2022-12-18 | A vulnerability was found in retra-system. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross site scripti… |
CVE-2022-4592 | Medium | 6.3 | 2022-12-18 | A vulnerability was found in luckyshot CRMx and classified as critical. This issue affects the function get/save/delete/comment/commentdelete of the file index… |