Browse CVEs

CRITICAL 9.9 CVE-2026-23885 Alchemy is an open source content management system engine written in Ruby on Rails. Prior to versions 7.4.12 and 8.0.3, the application uses the Rub… Alchemy Cms 7.4.12 / 8.0.3+ Fix from $2,3002026-01-19 CRITICAL 9.8 CVE-2026-1178 A security vulnerability has been detected in Yonyou KSOA 9.0. Affected by this issue is some unknown functionality of the file /kmf/select.jsp of th… Ksoa Mitigation only Fix from $2,3002026-01-19 CRITICAL 9.8 CVE-2026-1177 A weakness has been identified in Yonyou KSOA 9.0. Affected by this vulnerability is an unknown functionality of the file /kmf/save_folder.jsp of the… Ksoa Mitigation only Fix from $2,3002026-01-19 CRITICAL 9.8 CVE-2026-23837 MyTube is a self-hosted downloader and player for several video websites. A vulnerability present in version 1.7.65 and poetntially earlier versions … Mytube 1.7.66+ Fix from $2,3002026-01-19 CRITICAL 9.8 CVE-2026-1176 A security flaw has been discovered in itsourcecode School Management System 1.0. Affected is an unknown function of the file /subject/index.php. Per… School Management System Mitigation only Fix from $2,3002026-01-19 CRITICAL 9.6 CVE-2026-23852 SiYuan is a personal knowledge management system. Versions prior to 3.5.4 have a stored Cross-Site Scripting (XSS) vulnerability that allows an attac… Siyuan 3.5.4+ Fix from $2,3002026-01-19 CRITICAL 9.1 CVE-2026-23846 Tugtainer is a self-hosted app for automating updates of Docker containers. In versions prior to 1.16.1, the password authentication mechanism transm… Tugtainer 1.16.1+ Fix from $2,3002026-01-19 CRITICAL 9.8 CVE-2026-1173 A vulnerability was found in birkir prime up to 0.4.0.beta.0. The impacted element is an unknown function of the file /graphql of the component Graph… Prime after 0.4.0 Fix from $2,3002026-01-19 CRITICAL 9.8 CVE-2025-55252 HCL AION  version 2 is affected by a Weak Password Policy vulnerability. This can  allow the use of easily guessable passwords, potentially resulting… Aion Mitigation only Fix from $2,3002026-01-19 CRITICAL 9.8 CVE-2026-23884 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, offscreen bitmap deletion leaves `gdi->drawing` pointing to… Freerdp 3.21.0+ Fix from $2,3002026-01-19 CRITICAL 9.8 CVE-2026-23883 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, `xf_Pointer_New` frees `cursorPixels` on failure, then `poi… Freerdp 3.21.0+ Fix from $2,3002026-01-19 CRITICAL 9.8 CVE-2026-23534 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, a client-side heap buffer overflow occurs in the ClearCodec… Freerdp 3.21.0+ Fix from $2,3002026-01-19 CRITICAL 9.8 CVE-2026-23533 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, a client-side heap buffer overflow occurs in the RDPGFX Cle… Freerdp 3.21.0+ Fix from $2,3002026-01-19 CRITICAL 9.9 CVE-2026-22797 An issue was discovered in OpenStack keystonemiddleware 10.5 through 10.7 before 10.7.2, 10.8 and 10.9 before 10.9.1, and 10.10 through 10.12 before … Mitigation only Fix from $2,3002026-01-19 CRITICAL 9.8 CVE-2025-55251 HCL AION is affected by an Unrestricted File Upload vulnerability. This can allow malicious file uploads, potentially resulting in unauthorized code … Aion Mitigation only Fix from $2,3002026-01-19 CRITICAL 9.8 CVE-2025-52660 HCL AION is affected by an Unrestricted File Upload vulnerability. This can allow malicious file uploads, potentially resulting in unauthorized code … Aion Mitigation only Fix from $2,3002026-01-19 CRITICAL 9.8 CVE-2026-23532 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, a client-side heap buffer overflow occurs in the FreeRDP c… Freerdp 3.21.0+ Fix from $2,3002026-01-19 CRITICAL 9.8 CVE-2026-23531 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, in ClearCodec, when `glyphData` is present, `clear_decompre… Freerdp 3.21.0+ Fix from $2,3002026-01-19 CRITICAL 9.8 CVE-2026-23530 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0,`freerdp_bitmap_decompress_planar` does not validate `nSrcWi… Freerdp 3.21.0+ Fix from $2,3002026-01-19 CRITICAL 9.8 CVE-2026-1162 A flaw has been found in UTT HiPER 810 1.7.4-141218. The impacted element is the function strcpy of the file /goform/setSysAdm. This manipulation of … 810 Firmware Mitigation only Fix from $2,3002026-01-19 CRITICAL 9.8 CVE-2026-1160 A security vulnerability has been detected in PHPGurukul Directory Management System 1.0. Impacted is an unknown function of the file /index.php of t… Directory Management System Mitigation only Fix from $2,3002026-01-19 CRITICAL 9.8 CVE-2026-1159 A weakness has been identified in itsourcecode Online Frozen Foods Ordering System 1.0. This issue affects some unknown processing of the file /order… Online Frozen Foods Ordering System Mitigation only Fix from $2,3002026-01-19 CRITICAL 9.8 CVE-2026-0610 SQL Injection vulnerability in remote-sessions in Devolutions Server.This issue affects Devolutions Server 2025.3.1 through 2025.3.12 Devolutions Server 2025.3.14.0+ Fix from $2,3002026-01-19 CRITICAL 9.0 CVE-2026-1181 Altium 365 workspace endpoints were configured with an overly permissive Cross-Origin Resource Sharing (CORS) policy that allowed credentialed cross-… Mitigation only Fix from $2,3002026-01-19 CRITICAL 9.8 CVE-2026-1152 A security vulnerability has been detected in technical-laohu mpay up to 1.2.4. The impacted element is an unknown function of the component QR Code … Mpay after 1.2.4 Fix from $2,3002026-01-19 CRITICAL 9.8 CVE-2026-1133 A vulnerability was determined in Yonyou KSOA 9.0. The impacted element is an unknown function of the file /kmf/folder.jsp of the component HTTP GET … Ksoa Mitigation only Fix from $2,3002026-01-19 CRITICAL 9.8 CVE-2026-1132 A vulnerability was found in Yonyou KSOA 9.0. The affected element is an unknown function of the file /kmf/edit_folder.jsp of the component HTTP GET … Ksoa Mitigation only Fix from $2,3002026-01-19 CRITICAL 9.8 CVE-2026-1131 A vulnerability has been found in Yonyou KSOA 9.0. Impacted is an unknown function of the file /kmc/save_catalog.jsp of the component HTTP GET Parame… Ksoa Mitigation only Fix from $2,3002026-01-19 CRITICAL 9.8 CVE-2026-1130 A flaw has been found in Yonyou KSOA 9.0. This issue affects some unknown processing of the file /worksheet/worksadd_plan.jsp of the component HTTP G… Ksoa Mitigation only Fix from $2,3002026-01-19 CRITICAL 9.8 CVE-2026-1129 A vulnerability was detected in Yonyou KSOA 9.0. This vulnerability affects unknown code of the file /worksheet/worksadd.jsp of the component HTTP GE… Ksoa Mitigation only Fix from $2,3002026-01-19