Skip to content
OpenAdvisories

Archive

21 September 2026

Vulnerabilities first published on this day (UTC), newest first.

130 results · Clear filters · Feed

  • Medium 6.5

    web2py 3.2.2-stable (commit a7330a2bf21219fa77860b6665de927dd4f98e6d) is vulnerable to Directory Traversal in read_file…

  • Medium 4.8

    A session invalidation flaw exists in x-ui 0.3.2. The full user object is stored in a client-side signed cookie, and au…

  • Medium 5.3

    Stencil core 4.43.5 is vulnerable to Incorrect Access Control.

  • Medium 6.5

    A Server-Side Request Forgery (SSRF) in the serverRequest function of nocobase v2.1.21 allows authenticated attackers t…

  • Medium 6.2

    CRMEB Knowledge-Paid System crmeb_zzff_class 1.4.4 has a backend verification function that returns the wrong type of v…

  • Medium 5.3

    Pagekit CMS <= 1.0.18 allows an unauthenticated attacker to perform SQL injection through the credentials array submitt…

  • Medium 6.1

    EMLOG-Pro 2.6.29 contains a XSS vulnerability that enables attackers to upload a malicious shell.

  • Medium 5.3

    An integer overflow in the _BulkInsert_ReadProperty component (/bulk_insert.c) of FalkorDB (Redis module) v4.20.1 allow…

  • Medium 6.5

    FalkorDB (Redis module) v4.20.1 to v4.20.4 was discovered to contain a stack overflow in the _GetGroup() function (/ops…

  • Medium 5.5

    An issue in Matter Standard Specification-Implementation gap v1.5.1 Matter Project Chip V1.5.1 allows a local attacker …