2026

A vulnerability was determined in Acrel Electric Unet Web Service up to 20260814. This vulnerability affects unknown cod

A security vulnerability has been detected in dbgate up to 7.3.1. Affected by this vulnerability is the function files o

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Enocta Educational

Zscaler MCP Server versions 0.7.0 and 0.7.1 has an issue where HMAC confirmation tokens were not bound to the target res

A weakness has been identified in dbgate up to 7.3.1. Affected is the function exportModelSql of the file packages/api/s

A security flaw has been discovered in dbgate up to 7.3.1. This impacts the function zipJsonLinesData of the file packag

A security flaw has been discovered in Thinkware U3000 up to 1.02.04. Affected by this vulnerability is the function GET

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Rolantis Informati

A path traversal vulnerability was discovered in the Kubernetes kubectl client's kubectl cp command on Windows. When cop

A vulnerability was identified in Thinkware U3000 up to 1.02.04. Affected is the function get_file of the file /tmp/wpa_

A security flaw has been discovered in Ricoh SP 330DN, SP 221, SP C252SF and Aficio SP 3500SF up to 20260813. This affec

A vulnerability has been found in FLB-Music FLB-Music-Player 1.1.8/1.1.9/1.2.0/1.2.1. This impacts the function path.joi

A flaw has been found in aligungr UERANSIM up to 3.3.0. This affects the function DecodePlainMmMessage in the library sr

A vulnerability was determined in dayrui XunruiCMS up to 4.7.2. This issue affects the function group_all_edit of the fi

A denial of service via unsigned underflow in libXpm's write path in libXpm before 3.5.19 could be used by local attacke

An out-of-bounds read in libX11's byte-oriented codeset parser in libX11 before 1.8.14 could be used by malicious X serv

An out-of-bounds read vulnerability in libX11's XIM trigger-key registration parser in libX11 before 1.8.14 could be use

An out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser in libX11 before 1.8.14 could be u

An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by maliciou

Improper neutralization of input in Apache Roller 6.1.5 allows an anonymous remote attacker to store a crafted comment-a

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Bimser Solution So

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Bimser Solution Software

A vulnerability was found in Trusted Domain Project OpenDMARC up to 1.4.2. This vulnerability affects the function strca

A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarc_poli

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows a rem

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows an an

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows an un

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows a use

Exposure of Sensitive Information to an Unauthorized Actor in Apache Roller 6.1.5 allows a weblog administrator to read

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows a rem

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows a use

A security flaw has been discovered in aaPanel BaoTa up to 11.8.0. This affects the function get_domain_status of the fi

A vulnerability was identified in aaPanel BaoTa up to 11.8.0. The impacted element is the function getData of the file /

The SPS-Suite WordPress plugin through 1.4.0 does not sanitise the search query before using it in a SQL query when its

The Verge3D WordPress plugin from 4.1.0 through 4.13.0 does not verify with the payment provider that a payment was actu

The Paymattic WordPress plugin from 4.6.20 before 4.6.26 does not verify that a confirmed Stripe payment belongs to the

The Post Voting System WordPress plugin through 1.0 does not properly sanitize and escape a parameter before using it in

The WP Verify API WordPress plugin through 1.0.0 does not have any authorisation check in one of its REST routes, allowi

The Blacklist Manager for WooCommerce WordPress plugin from 1.3.0 to 2.3.1 does not enforce its user blocking on every a

The Bookly WordPress plugin before 28.3 does not validate client-supplied booking quantity values on the server before c

The WPForms Lite WordPress plugin from 1.5.0.1 to 2.0.2 does not remove shortcode delimiters from submitted field values

A flaw has been found in Frappe HR up to 16.15.0. This vulnerability affects the function get_expense_claims/get_shift_r

Joomla Extension - regularlabs.com - Privileged stored XSS via data-rlta-url attributes in Tabs & Accordions (Pro) 2.3.0

A security vulnerability has been detected in notionnext-org NotionNext up to 4.10.10. Affected by this issue is the fun

A weakness has been identified in Cesanta Mongoose up to 7.21. Affected by this vulnerability is the function fn of the

A flaw has been found in Eyeplus 57.0.0.0308. The impacted element is an unknown function of the file /snapshot of the c

A vulnerability was detected in Eyeplus 57.0.0.0308. The affected element is the function GetUsers of the file /onvif/De

A vulnerability was identified in ООО НПО Ритм GEOritm up to 2.45.1. This affects an unknown part of the file /restapi/o

A vulnerability was determined in Barco ClickShare CX-20 Gen2 up to 02.26.00.0007. Affected by this issue is some unknow

A vulnerability has been found in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/v2.0.0-beta1. Affected is the f