2026

In the Linux kernel, the following vulnerability has been resolved: net: bonding: fix use-after-free in bond_xmit_broad

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: drop logically empty buckets in m

In the Linux kernel, the following vulnerability has been resolved: net/x25: Fix overflow when accumulating packets Ad

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_log: account for netlink heade

In the Linux kernel, the following vulnerability has been resolved: ipv6: avoid overflows in ip6_datagram_send_ctl() Y

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_expect: use expect->helper

Sourcecodester Cab Management System 1.0 is vulnerable to SQL Injection in the file /cms/admin/bookings/view_booking.php

Sourcecodester Cab Management System v1.0 is vulnerable to SQL injection in the file /cms/admin/categories/view_category

Sourcecodester Online Reviewer System v1.0 is vulnerable to SQL Injection in the file /system/system/admins/assessments/

Sourcecodester Online Reviewer System v1.0 is vulnerale to SQL Injection in the file /system/system/admins/assessments/e

Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/load_student.php.

Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/load_admin.php.

Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/load_book.php.

Server-Side Request Forgery via SW-URL Header vulnerability in Apache SkyWalking MCP. This issue affects Apache SkyWalk

LibreNMS versions before 26.3.0 are affected by an authenticated remote code execution vulnerability by abusing the Bina

LibreNMS versions before 26.3.0 are affected by an authenticated Cross-site Scripting vulnerability on the showconfig pa

Stored Cross-Site Scripting (XSS) via Unsanitized Topology Metadata in Apache Storm UI Versions Affected: before 2.8.6

Deserialization of Untrusted Data vulnerability in Apache Storm. Versions Affected: before 2.8.6. Description: When p

A vulnerability has been found in 1Panel-dev MaxKB up to 2.4.2. Impacted is an unknown function of the file ui/src/chat.

A Code Injection and Missing Authentication vulnerability in Google Agent Development Kit (ADK) versions 1.7.0 (and 2.0.

An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms duri

A certificate validation vulnerability in Palo Alto Networks Autonomous Digital Experience Manager on Windows allows an

A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows allows a local Windows admin

A flaw has been found in TOTOLINK A7000R up to 9.1.0u.6115. The affected element is the function setWiFiEasyGuestCfg of

A vulnerability was detected in code-projects Faculty Management System 1.0. Impacted is an unknown function of the file

A security vulnerability has been detected in code-projects Vehicle Showroom Management System 1.0. This issue affects s

An attacker can control a server-side HTTP request by supplying a crafted URL, causing the server to initiate requests t

Solstice::Session versions through 1440 for Perl generates session ids insecurely. The _generateSessionID method return

The ZTE ZXEDM iEMS product has a password reset vulnerability for any user.Because the management of the cloud EMS porta

The Product Filter for WooCommerce by WBW WordPress plugin before 3.1.3 does not sanitize and escape a parameter before

Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect av

Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect av

The Form Maker by 10Web WordPress plugin before 1.15.38 does not properly prepare SQL queries when the "MySQL Mapping"

A weakness has been identified in code-projects Vehicle Showroom Management System 1.0. This vulnerability affects unkno

A security flaw has been discovered in code-projects Lost and Found Thing Management 1.0. This affects an unknown part o

A vulnerability was identified in code-projects Lost and Found Thing Management 1.0. Affected by this issue is some unkn

Integer overflow or wraparound vulnerability in Samsung Open Source Escargot allows undefined behavior.This issue affect

Improper access control in Samsung Camera prior to version 16.5.00.28 allows local attacker to access location data. Use

Incorrect default permission in Galaxy Wearable prior to version 2.2.68.26 allows local attackers to access sensitive in

External control of file name in AODManager prior to SMR Apr-2026 Release 1 allows privileged local attacker to create f

Incorrect privilege assignment in Bluetooth in Maintenance mode prior to SMR Apr-2026 Release 1 allows physical attacker

Improper input validation in Retail Mode prior to SMR Apr-2026 Release 1 allows local attackers to trigger privileged fu

Improper check for exceptional conditions in Recents prior to SMR Apr-2026 Release 1 allows physical attacker to bypass

Exposure of sensitive information in S Share prior to SMR Apr-2026 Release 1 allows adjacent attacker to access sensitiv

Improper check for exceptional conditions in Device Care prior to SMR Apr-2026 Release 1 allows physical attackers to by

Improper access control in Samsung DeX prior to SMR Apr-2026 Release 1 allows physical attackers to access to hidden not

A vulnerability has been found in PHPGurukul Company Visitor Management System 2.0. This impacts an unknown function of

A vulnerability was determined in code-projects Simple ChatBox up to 1.0. This affects an unknown part of the file /chat

A vulnerability was found in code-projects Simple ChatBox 1.0. Affected by this issue is the function SimpleChatbox_PHP

A vulnerability has been found in code-projects Simple ChatBox up to 1.0. Affected by this vulnerability is an unknown f