2026

A weakness has been identified in NousResearch hermes-agent up to 2026.4.23. This issue affects the function _make_run_e

A vulnerability in the `GitHubRepository` block of the `prefect-github` integration in Prefect version 3.6.18 allows an

A security flaw has been discovered in NousResearch hermes-agent up to 2026.4.16. This vulnerability affects the functio

A vulnerability was identified in NousResearch hermes-agent up to 2026.4.16. This affects the function check_all_command

A vulnerability was determined in calcom cal.diy up to 4.9.4. Affected by this issue is the function getServerSideProps

A vulnerability was found in Edimax EW-7438RPn up to 1.31. Affected by this vulnerability is an unknown functionality of

In GNU SASL before 2.2.3, DIGEST-MD5 has a NULL pointer dereference affecting both clients and servers, via a known toke

A vulnerability has been found in Edimax EW-7438RPn up to 1.31. Affected is the function formWizSurvey of the file /gofo

A flaw has been found in Edimax EW-7438RPn up to 1.31. This impacts the function formWirelessTbl of the file /goform/for

A vulnerability was detected in Edimax EW-7438RPn up to 1.31. This affects the function formWizSurvey of the file /gofor

A security vulnerability has been detected in Edimax EW-7438RPn up to 1.31. The impacted element is an unknown function

A weakness has been identified in Edimax EW-7438RPn up to 1.31. The affected element is the function formWpsStart of the

A security flaw has been discovered in SourceCodester Hospitals Patient Records Management System 1.0. Impacted is an un

D-Link DIR601 2.02NA contains a credential disclosure vulnerability that allows unauthenticated attackers to retrieve se

Dolibarr ERP CRM 7.0.3 contains a remote code execution vulnerability that allows unauthenticated attackers to execute a

SIPp 3.6 and earlier contains a local buffer overflow vulnerability in command-line argument handling that allows local

Audiograbber 1.83 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by expl

Joomla Component jomres 9.11.2 contains a cross-site request forgery vulnerability that allows attackers to modify user

Redaxo CMS Mediapool Addon 5.5.1 and older contains an arbitrary file upload vulnerability that allows authenticated use

WordPress Ultimate Form Builder Lite plugin version 1.3.7 and below contains an SQL injection vulnerability that allows

Joomla! Component EkRishta 2.10 contains an error-based SQL injection vulnerability that allows unauthenticated attacker

userSpice 4.3.24 contains a username enumeration vulnerability that allows unauthenticated attackers to discover valid u

userSpice 4.3.24 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts through

Joomla! Component Ek Rishta 2.10 contains an SQL injection vulnerability that allows unauthenticated attackers to manipu

WordPress Contact Form Maker Plugin 1.12.20 contains SQL injection vulnerabilities that allow authenticated attackers to

WordPress Form Maker Plugin 1.12.24 and below contains SQL injection vulnerabilities that allow authenticated attackers

10-Strike Network Scanner 3.0 contains a local buffer overflow vulnerability in the host name field that allows attacker

10-Strike Network Inventory Explorer 8.54 contains a stack-based buffer overflow vulnerability in the registration key i

Smartshop 1 contains a cross-site request forgery vulnerability that allows attackers to modify user profiles by trickin

Smartshop 1 contains a time-based blind SQL injection vulnerability that allows unauthenticated attackers to manipulate

Smartshop 1 contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL querie

Smartshop 1 contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL querie

A security vulnerability has been detected in QuantumNous new-api up to 0.12.1. This affects the function RelayMidjourne

A weakness has been identified in QuantumNous new-api up to 0.12.1. The impacted element is the function SearchUserTopUp

A security flaw has been discovered in calcom cal.diy up to 4.9.4. The affected element is the function validateUrlForSS

A vulnerability was identified in calcom cal.diy up to 4.9.4. Impacted is an unknown function. The manipulation leads to

A vulnerability was determined in 546669204 vps-inventory-monitoring up to 98c00b370668c96ae75e91c15548d9ea113652d9. Thi

A vulnerability was found in omec-project amf up to 2.1.1. This vulnerability affects unknown code of the component NGRe

A vulnerability has been found in omec-project amf up to 2.1.1. This affects an unknown part of the component NGSetupReq

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coa

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagate shared-frag marker through f

A flaw has been found in omec-project amf up to 2.1.1. Affected by this issue is the function PDUSessionResourceModifyIn

A vulnerability was detected in omec-project amf up to 2.1.1. Affected by this vulnerability is an unknown functionality

A security vulnerability has been detected in Edimax BR-6428NS 1.10. Affected is the function formWlbasic of the file /g

A weakness has been identified in Edimax BR-6428NS 1.10. This impacts the function system of the file /goform/formWlanM

A security flaw has been discovered in Edimax BR-6428NS 1.10. This affects the function formWirelessTbl of the file /gof

A vulnerability was identified in Edimax BR-6428NS 1.10. The impacted element is the function formWanTcpipSetup of the f

The WooCommerce PayPal Payments plugin for WordPress is vulnerable to unauthorized order manipulation and information di

The Wishlist Member plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability

The Wishlist Member plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability