2026

Unrestricted Upload of File with Dangerous Type vulnerability in WP Mailster WP Mailster wp-mailster allows Upload a Web

A segmentation violation in the GetESD function (/isomedia/track.c) of GPAC Project/MP4Box before 2.5 allows attackers t

A segmentation violation in the check_media_profile function (/mp4box/mp4box.c) of GPAC Project/MP4Box before 2.5 allows

A stack overflow in the gf_bifs_dec_node function (/bifs/field_decode.c) of GPAC Project/MP4Box before 2.5 allows attack

A heap use-after-free in the dasher_flush_segment function (/filters/dasher.c) of GPAC Project/MP4Box before 2.5 allows

A heap use-after-free in the gf_filter_pid_send_event_downstream function (/filter_core/filter_pid.c) of GPAC Project/MP

A segmentation violation in the gf_isom_get_esd function (/isomedia/isom_read.c) of GPAC Project/MP4Box before 2.5 allow

A use-after-free in the gf_filter_packet_destroy function (/filter_core/filter_pck.c) of GPAC Project/MP4Box before 2.5

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Copy BASE if service data matches E

In the Golang Chi web framework, the ClientIPFromXFF middleware skips any X-Forwarded-For entry in a configured trusted

A vulnerability was detected in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362

PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be cor

PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some co

WarehousePG (WHPG) 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability (

WarehousePG (WHPG) 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability (

WarehousePG (WHPG) 7.2.1 through 7.6.0 is affected by a missing authorization vulnerability (CWE-862) in the built-in fu

An out-of-bounds read in gf_odf_ac4_cfg_dsi_v1 (/odf/descriptors.c) in GPAC Project/MP4Box before v26.07.0 allows attack

A NULL pointer dereference in the dasher_insert_timeline_entry function (/filters/dasher.c) of GPAC Project/MP4Box befor

A NULL pointer dereference in the StatSFVec2f function (/scene_manager/scene_stats.c) of GPAC Project/MP4Box before 2.5

The system fails to invalidate existing access tokens associated with sub-organization users during sensitive account ma

When a WSO2 product is configured to use an external user store, the system fails to adequately obscure the existence or

The product failed to enforce validation constraints on user-supplied input in URL parameters, allowing sensitive data t

Due to an incomplete implementation, reCaptcha is not applied to certain authentication flows even when the reCaptcha op

The Authentication Endpoint accepts user-supplied input without sufficient encoding, allowing for the injection of malic

The callback URL parameter in WSO2 API Manager fails to validate user-supplied input, allowing it to be controlled by ma

A recursive BIND server that receives a query with recursion desired (RD=1) followed by a non-recursive query (RD=0) may

A BIND resolver that is configured with both a "redirect" zone and "qname-minimization strict" may abort with an asserti

Replaying GSS-TSIG signed UDP messages can result in memory corruption in "`named`". An attacker who can capture a prev

The MySQL client response parser in Apache bRPC dereferences a null pointer when the server peer sends a zero-payload-le

The Discovery naming-service reply parser in Apache bRPC (versions < 1.18.0) calls RapidJSON object-only accessors (Find

On a brpc::Server that sets both ServerOptions.auth and ServerOptions.internal_port, the HTTP built-in service exemption

External control of file name or path and uncontrolled resource consumption in Apache bRPC (version < 1.18.0) on all pla

Inconsistent interpretation of HTTP requests (HTTP request/response smuggling) in the bundled HTTP/1.1 parser of Apache

Improper authorization in Apache bRPC (versions < 1.18.0) on all platforms allows remote attackers to access builtin ser

Interpretation conflict in the HTTP protocol implementation in Apache bRPC (version < 1.18.0) on all platforms allows re

Use-after-free in the RTMP protocol implementation in Apache bRPC (version < 1.18.0) on all platforms allows a malicious

NULL pointer dereference in the RTMP protocol implementation in Apache bRPC (version < 1.18.0) on all platforms allows r

A data race in the RDMA transport of Apache bRPC (versions < 1.18.0) allows a remote client to crash the server process

A reachable assertion in Apache bRPC (version < 1.18.0) on all platforms allows a malicious remote peer to crash the pro

A Thrift client in Apache bRPC (version < 1.18.0, built with WITH_THRIFT which is off by default) can be crashed by the

Uncontrolled recursion in the mcpack2pb component in Apache bRPC (version < 1.18.0) on all platforms allows remote attac

Enforceable assertion in the streaming feature of Apache bRPC (version < 1.18.0) on all platforms allows a remote attack

In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additional processing, with

e107 CMS before 2.3.13 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to

Improper validation of array index vulnerability in Velneo vServer. This issue affects vServer: from 36.0 before 36.6 an

PHPOffice PHPPresentation 1.2.0 contains a cross-site scripting vulnerability in the HTML writer that allows attackers w

PHPOffice PHPPresentation through 1.2.0 contains an insecure deserialization vulnerability that allows attackers to inst

Trudesk through 1.2.11 contains a path traversal and authorization bypass vulnerability in accountsController.uploadImag

Trudesk through 1.2.11 contains a regular expression injection vulnerability that allows unauthenticated attackers to en

Trudesk through 1.2.11 contains a missing authentication vulnerability that allows unauthenticated attackers to download