Submit #838874: Databend Labs Databend main branch commit 21377cd76bb1e84f92bfc9da1acc881b8841f1de; affected versions unknown CWE-639 Authorization Bypass Through User-Controlled Key [Accepted]
Submit #838874 / VDB-374520
Vuldb Submit
Submit #838873: VoltAgent 2.1.17 Improper Authorization [Accepted]
Submit #838873 / VDB-374519
Submit #838842: Sim Studio / simstudioai sim Affected at least commit 7b572f1f61a8bbcee31fd7389097814a71f8f094; still present in origin/main commit e532e0a6da6fd22eee98310ba Improper Verification of Cryptographic Signature (CWE-347), Use [Accepted]
Submit #838842 / VDB-374518
Submit #838838: RAGapp ragapp 0.1.5 and earlier; verified on commit f7f88892a92c110853dfa019f2c4a605a4a7b6f5 CWE-22 Improper Limitation of a Pathname to a Restricted Directo [Accepted]
Submit #838838 / VDB-374517
Submit #838812: Khoj AI Khoj Source commit e8631261400e0a04c5063e91e498b549976ffc53; affected released versions are unknown. CWE-863: Incorrect Authorization [Accepted]
Submit #838812 / VDB-374516
Submit #838791: ByteDance / Volcengine OpenViking Commit 55a0c0ea15d55dca231fc3a1654474032478bcd8 (2026-03-25); affected released versions unknown CWE-345 Insufficient Verification of Data Authenticity [Accepted]
Submit #838791 / VDB-374515
Submit #838683: code-projects Project Management System 1.0 Cross Site Scripting [Accepted]
Submit #838683 / VDB-374499
Submit #838685: antlr ANTLR4 4.13.2 Unsafe Java Deserialization Maven Plugin [Accepted]
Submit #838685 / VDB-374498
Submit #838686: antlr ANTLR4 4.13.2 Path Traversal tokenVocab File Read [Accepted]
Submit #838686 / VDB-374497
Submit #838569: antlr ANTLR4 4.13.2 Command Injection [Accepted]
Submit #838569 / VDB-374496
Submit #838568: antlr ANTLR4 4.13.2 Code Injection [Accepted]
Submit #838568 / VDB-374495
Submit #838560: yashpokharna2555 restaurent-management-system 1 Cross Site Scripting [Accepted]
Submit #838560 / VDB-374494
Submit #838559: yashpokharna2555 restaurent-management-system 1 SQL Injection [Accepted]
Submit #838559 / VDB-374493
Submit #838502: itsourcecode Hospital Management System V1.0 SQL Injection [Accepted]
Submit #838502 / VDB-374492
Submit #838501: itsourcecode Hospital Management System V1.0 SQL Injection [Accepted]
Submit #838501 / VDB-374491
Submit #838500: itsourcecode Hospital Management System V1.0 SQL Injection [Duplicate]
Submit #838500 / VDB-203090
Submit #838499: itsourcecode Hospital Management System V1.0 SQL Injection [Accepted]
Submit #838499 / VDB-374490
Submit #838497: AIDC-AI ComfyUI-Copilot 2.0.28 Insecure Direct Object Reference (IDOR) / Cross-Tenant Data Expo [Accepted]
Submit #838497 / VDB-374489
Submit #838439: 78 xiaozhi-esp32 2aeecd4e014780ac15cfa4866906cca16267010d Denial of Service [Accepted]
Submit #838439 / VDB-374488
Submit #838225: glpi-project glpi 11.0.5 - 11.0.7 Authorization Bypass [Accepted]
Submit #838225 / VDB-374487
Submit