Submit #857939: awesto django-shop 13d9a77aff7eede74a5f363c1d540e005d88dbcd CWE-362 Concurrent Execution using Shared Resource with Improper [Accepted]
Submit #857939 / VDB-380028
Vuldb Submit
Please support the site operations by clicking ads.
Submit #857935: allegro ralph bcf65b994ef29fb3fc2e10b660e6288723d5209e CWE-362 Concurrent Execution using Shared Resource with Improper [Accepted]
Submit #857935 / VDB-380027
Submit #857934: wger-project wger 2.6.0-alpha2 / master branch at commit ea7844731f7e3fe5865c327c1f93f5f4a76dde75 CWE-352 Cross-Site Request Forgery / CWE-749 Exposed Dangerous M [Duplicate]
Submit #857934 / VDB-236497
Submit #857933: wger-project wger 2.6.0-alpha2 / master branch at commit ea7844731f7e3fe5865c327c1f93f5f4a76dde75 CWE-352 Cross-Site Request Forgery / CWE-749 Exposed Dangerous M [Duplicate]
Submit #857933 / VDB-236497
Submit #857929: newpanjing simpleui 2026.01.13 at commit 85b887022217b4e46c9a34d227dbf38fef1e7a92 CWE-862 Missing Authorization / CWE-863 Incorrect Authorization [Accepted]
Submit #857929 / VDB-380026
Submit #857926: Gerapy 0.9.13 / master branch at commit 7c4eda875563f5d0342a3650959e0502bc279d77 CWE-862 Missing Authorization / CWE-434 Unrestricted Upload of F [Accepted]
Submit #857926 / VDB-380025
Submit #857925: django-tastypie 0.15.1 at commit 03c4746f0a0f88628be5264bc8d4a19a0529b2f4 CWE-362 Concurrent Execution using Shared Resource with Improper [Accepted]
Submit #857925 / VDB-380024
Submit #857924: django-tastypie 0.15.1 at commit 03c4746f0a0f88628be5264bc8d4a19a0529b2f4 CWE-598 Use of GET Request Method With Sensitive Query Strings [Accepted]
Submit #857924 / VDB-380023
Submit #857923: django-oauth django-oauth-toolkit 3.3.0 at commit ddec25b491e52d7f4a1e2cf13a436ffddcf6c782 CWE-613 Insufficient Session Expiration / CWE-287 Improper Authe [Duplicate]
Submit #857923 / VDB-380022
Submit #857897: django-oauth django-oauth-toolkit 3.3.0 at commit ddec25b491e52d7f4a1e2cf13a436ffddcf6c782 CWE-613 Insufficient Session Expiration [Accepted]
Submit #857897 / VDB-380022
Submit #857799: pluck pluck-cms <= 4.7.21-dev Cross-Site Request Forgery [Duplicate]
Submit #857799 / VDB-60279
Submit #857798: pluck pluck-cms <= 4.7.21 dev Improper Neutralization of Alternate XSS Syntax [Accepted]
Submit #857798 / VDB-380021
Submit #857797: pluck pluck-cms 4.7.20 Unrestricted Upload [Duplicate]
Submit #857797 / VDB-131138
Submit #857784: zevorn rt-claw 36d128f72afa0b9d40a21bcd6069b0c193a58f82 (unreleased main, post-v0.2.0) Remote Code Execution via Unsafe Tool Auto-Approval (CWE-94) [Accepted]
Submit #857784 / VDB-380020
Submit #857766: sourcecodester Class and Exam Timetabling System V1.0 cross site scripting [Accepted]
Submit #857766 / VDB-380019
Submit #857765: sourcecodester Class and Exam Timetabling System V1.0 cross site scripting [Accepted]
Submit #857765 / VDB-380018
Submit #857623: zevorn rt-claw 36d128f72afa0b9d40a21bcd6069b0c193a58f82 (unreleased main, post-v0.2.0) Local File Disclosure via `file://` Scheme (CWE-200) [Accepted]
Submit #857623 / VDB-380017
Submit #857622: zevorn rt-claw 36d128f72afa0b9d40a21bcd6069b0c193a58f82 (unreleased main, post-v0.2.0) Incorrect Authorization leading to Remote Code Execution (CWE-863) [Accepted]
Submit #857622 / VDB-380016
Submit #857621: nextlevelbuilder GoClaw 3.13.3-beta.3 Authorization Bypass (CWE-285) [Accepted]
Submit #857621 / VDB-380015
Submit #852965: Sipeed PicoClaw <= v0.2.9 Authentication Bypass Using an Alternate Path or Channel (CWE-288) [Accepted]
Submit #852965 / VDB-380014
Submit