2026

An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote

An Internal Asset Exposed to Unsafe Debug Access Level or State vulnerability [CWE-1244] vulnerability in Fortinet Forti

Logseq exposes an IPC handler that allows the renderer process to execute shell commands. While an allowlist restricts t

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Netcad Software In

In the Linux kernel, the following vulnerability has been resolved: media: rockchip: rkcif: fix off by one bugs Change

In the Linux kernel, the following vulnerability has been resolved: 9p: fix access mode flags being ORed instead of rep

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: disallow non-power of two min_region

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix nvkm_device leak on aperture remov

Uncontrolled Resource Consumption vulnerability in the Elixir standard library's Version module allows an attacker who c

Logseq is vulnerable to a sandbox escape flaw where plugins running in sandboxed iframes can inject arbitrary HTML attri

Logseq is vulnerable to a stored cross-site scripting (XSS). A malicious plugin can include a JavaScript payload in the

The Electron preload script in Logseq exposes an API method that allows the renderer process to invoke IPC handlers with

In the Linux kernel, the following vulnerability has been resolved: greybus: gb-beagleplay: bound bootloader receive bu

In the Linux kernel, the following vulnerability has been resolved: Revert "net/smc: Introduce TCP ULP support" This r

In the Linux kernel, the following vulnerability has been resolved: erofs: handle end of filesystem properly for file-b

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix rlimit for posix cpu timers Posix cp

In the Linux kernel, the following vulnerability has been resolved: dm: fix unlocked test for dm_suspended_md The func

In the Linux kernel, the following vulnerability has been resolved: iio: pressure: mprls0025pa: fix spi_transfer struct

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix iova-to-va conversion for MR page siz

A stack buffer overflow flaw was found in 389 Directory Server. The checkPrefix() function in pw.c copies an attacker-co

A heap buffer overflow flaw was found in 389 Directory Server. When audit logging is enabled, the create_masked_entry_st

A flaw was found in 389 Directory Server. The PBKDF2-SHA256 password storage plugin does not enforce an upper bound on t

A flaw was found in 389 Directory Server. The SMD5 password storage plugin performs unsigned integer underflow when comp

A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before us

A flaw was found in 389 Directory Server. The ldap_utf8prev() function reads bytes before the start of a buffer without

A flaw was found in 389 Directory Server. The LDIF parser reads past the end of a heap buffer when processing attribute

A flaw was found in 389 Directory Server. A type confusion in the SSO token extended operation handler causes partial st

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: use list_del_rcu for netlink

In the Linux kernel, the following vulnerability has been resolved: net: gro: don't merge zcopy skbs skb_gro_receive()

In the Linux kernel, the following vulnerability has been resolved: tun: free page on build_skb failure in tun_xdp_one(

In the Linux kernel, the following vulnerability has been resolved: tun: free page on short-frame rejection in tun_xdp_

In the Linux kernel, the following vulnerability has been resolved: tap: free page on error paths in tap_get_user_xdp()

In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: Only release RCU read lock after

In the Linux kernel, the following vulnerability has been resolved: Revert "mm/hugetlbfs: update hugetlbfs to use mmap_

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Reassign nested_mmus array behind mmu_l

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Drop the translation cache re

A vulnerability in the quarantine and restore workflow of the X-VPN macOS website versions 77.0 through 77.5 allow a loc

When creating an export of all reusable media, the secrets of connected gift cards were included in the export even if

WordPress Insert PHP plugin versions before 3.3.1 contain a PHP code injection vulnerability that allows unauthenticated

Mac Photo Gallery 3.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrar

Apptha Slider Gallery 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbit

Apptha Slider Gallery 1.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbi

WordPress Plugin PICA Photo Gallery 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to

KittyCatfish 2.2 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to r

Wow Viral Signups 2.1 WordPress plugin contains an SQL injection vulnerability that allows unauthenticated attackers to

Wow Forms WordPress Plugin version 2.1 contains an SQL injection vulnerability that allows unauthenticated attackers to

WordPress Car Park Booking Plugin version 13 October 17 contains a time-based SQL injection vulnerability that allows un

Product Catalog 8 1.2 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers

WP Vault 0.8.6.6 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary f

Single Personal Message 1.0.3 contains an SQL injection vulnerability that allows authenticated users to execute arbitra