Archive
21 September 2026
Vulnerabilities first published on this day (UTC), newest first.
130 results · Clear filters · Feed
-
Medium 6.5
web2py 3.2.2-stable (commit a7330a2bf21219fa77860b6665de927dd4f98e6d) is vulnerable to Directory Traversal in read_file…
-
Medium 4.8
A session invalidation flaw exists in x-ui 0.3.2. The full user object is stored in a client-side signed cookie, and au…
-
Medium 5.3
Stencil core 4.43.5 is vulnerable to Incorrect Access Control.
-
Medium 6.5
A Server-Side Request Forgery (SSRF) in the serverRequest function of nocobase v2.1.21 allows authenticated attackers t…
-
Medium 6.2
CRMEB Knowledge-Paid System crmeb_zzff_class 1.4.4 has a backend verification function that returns the wrong type of v…
-
Medium 5.3
Pagekit CMS <= 1.0.18 allows an unauthenticated attacker to perform SQL injection through the credentials array submitt…
-
Medium 6.1
EMLOG-Pro 2.6.29 contains a XSS vulnerability that enables attackers to upload a malicious shell.
-
Medium 5.3
An integer overflow in the _BulkInsert_ReadProperty component (/bulk_insert.c) of FalkorDB (Redis module) v4.20.1 allow…
-
Medium 6.5
FalkorDB (Redis module) v4.20.1 to v4.20.4 was discovered to contain a stack overflow in the _GetGroup() function (/ops…
-
Medium 5.5
An issue in Matter Standard Specification-Implementation gap v1.5.1 Matter Project Chip V1.5.1 allows a local attacker …