Open Source Vulnerabilities
epiphany-browser, epiphany-browser, epiphany-browser
WHartTest 2.2.0 through 2.8.1 Missing Authorization via task_center Scheduled-Task APIs
WHartTest 2.2.0 through 2.8.1 Missing Authorization via task_center Scheduled-Task APIs
Tamery (Conar) 0.26.1 before 0.99.0 Authorization Bypass via chatsMessages.update
Tamery (Conar) 0.26.1 before 0.99.0 Authorization Bypass via chatsMessages.update
Tamery (Conar) 0.32.0 before 0.99.0 Broken Authorization via connectionsResources.create
Tamery (Conar) 0.32.0 before 0.99.0 Broken Authorization via connectionsResources.create
Songloft 2.9.0 before 2.13.6 Hardcoded Admin Credentials in Embedded Backend
Songloft 2.9.0 before 2.13.6 Hardcoded Admin Credentials in Embedded Backend
ShowDoc through 3.9.5 Authorization Bypass via paramDescLib deleteEntries
ShowDoc through 3.9.5 Authorization Bypass via paramDescLib deleteEntries
MuseBot before 2.0.0 Authentication Bypass via Hard-Coded Session Key
MuseBot before 2.0.0 Authentication Bypass via Hard-Coded Session Key
Blossom through 1.17.1 Authorization Bypass via Folder Endpoints
Blossom through 1.17.1 Authorization Bypass via Folder Endpoints
PowerDNS-Admin through 2026.08.1 Authorization Bypass via /domain/<domain_name>/update
PowerDNS-Admin through 2026.08.1 Authorization Bypass via /domain/<domain_name>/update
FilePress through 3.0.1 Missing Authorization in PicHome Library Folder Operations
FilePress through 3.0.1 Missing Authorization in PicHome Library Folder Operations
CoreShop through 1.5.5 SQL Injection via order Parameter in Agent/GetGoodsPageList
CoreShop through 1.5.5 SQL Injection via order Parameter in Agent/GetGoodsPageList
CoreShop through 1.5.5 SQL Injection via order Parameter in GetGoodsPageList
CoreShop through 1.5.5 SQL Injection via order Parameter in GetGoodsPageList
DataCap through 2025.1.1 Privilege Escalation via allocationRole Missing Authorization
DataCap through 2025.1.1 Privilege Escalation via allocationRole Missing Authorization
Nging through 5.3.5 Directory Listing Disclosure via /user/autocomplete_path
Nging through 5.3.5 Directory Listing Disclosure via /user/autocomplete_path
HuLa-Server through 3.0.7 IDOR via /user/friend/page Friend List Disclosure
HuLa-Server through 3.0.7 IDOR via /user/friend/page Friend List Disclosure
HuLa-Server through 3.0.7 IDOR via /feed/del Moment Deletion
HuLa-Server through 3.0.7 IDOR via /feed/del Moment Deletion
HuLa-Server through 3.0.7 IDOR via /privacy Endpoint in PrivacyController
HuLa-Server through 3.0.7 IDOR via /privacy Endpoint in PrivacyController
Orchard CMS 1.10.3 through 1.11 Improper Authorization via Media Library Folder Permission Check
Orchard CMS 1.10.3 through 1.11 Improper Authorization via Media Library Folder Permission Check
BlueKing CMDB through 3.14.6 Missing Authorization via /api/v3/hosts/search/asstdetail
BlueKing CMDB through 3.14.6 Missing Authorization via /api/v3/hosts/search/asstdetail
RuoYi-Vue-Plus through 6.0.0 Data-Scope Bypass via /system/user/list/dept/{deptId}
RuoYi-Vue-Plus through 6.0.0 Data-Scope Bypass via /system/user/list/dept/{deptId}
Open Web Analytics before 1.14.1 Cross-Site Data Disclosure via REST Report API
Open Web Analytics before 1.14.1 Cross-Site Data Disclosure via REST Report API
ZenTao PMS through 22.6 Missing Authorization via doc.ajaxGetDoc
ZenTao PMS through 22.6 Missing Authorization via doc.ajaxGetDoc
Blossom through 1.17.1 Authorization Bypass via Picture Delete and Star Endpoints
Blossom through 1.17.1 Authorization Bypass via Picture Delete and Star Endpoints
tcpflow, tcpflow, tcpflow, tcpflow, tcpflow, tcpflow, tcpflow, tcpflow
tcpflow/ tcpflow/ tcpflow/ tcpflow/ tcpflow/ tcpflow/ tcpflow/ tcpflow
afflib, afflib, afflib, afflib, afflib, afflib, afflib
afflib/ afflib/ afflib/ afflib/ afflib/ afflib/ afflib
epiphany-browser, epiphany-browser, epiphany-browser, epiphany-browser, epiphany-browser, epiphany-browser, epiphany-browser
epiphany-browser/ epiphany-browser/ epiphany-browser/ epiphany-browser/ epiphany-browser/ epiphany-browser/ epiphany-browser
gimp, gimp, gimp, gimp, gimp, gimp, gimp
clamav, libmspack, libmspack, libmspack, libmspack, libmspack, libmspack, libmspack, libmspack
clamav/ libmspack/ libmspack/ libmspack/ libmspack/ libmspack/ libmspack/ libmspack/ libmspack
opensearch-dashboards-2-fips-alerting-dashboards-plugin
commercial-gitlab-rails-ee-19.4
commercial-gitlab-rails-ee-19.4
commercial-gitlab-rails-ee-19.4
Campfire vulnerable to SSRF via incomplete private-network denylist in the link-unfurl guard
Campfire vulnerable to SSRF via incomplete private-network denylist in the link-unfurl guard
highcharts
TuxCare security update for highcharts (2 CVEs)
highcharts
TuxCare security update for highcharts (2 CVEs)
