2026

Improper Authentication vulnerability in Apache Tomcat. When Jakarta Authentication was configured with SimpleAuthConfig

ZohoCorp ManageEngine OpManager and Network Configuration Manager versions before 12.8.671 were vulnerable to an unautho

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.669 and below were vulnerable to an SQL Injection vu

ZohoCorp ManageEngine OpManager, NetFlow Analyzer, and Network Configuration Manager versions 12.8.667 and below were vu

The Reachy Mini daemon exposes an HTTP API for managing the robot. Its app installation endpoint, POST /apps/install in

A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends oth

Pake turns a website into a desktop application built on Tauri. Every application it generates inherits two settings fro

When a Tauri application uses the dialog plugin's file or folder picker, an attacker with JavaScript execution (XSS) can

Tauri's Content Security Policy hardening, which injects a random nonce to restrict script execution, provides zero prot

A vulnerability in Apache Sling Security Bundle: the ReferrerFilter accepts weaker-than-orgin evidence. This issue af

The Rename wp-login.php to anything you want plugin for WordPress is vulnerable to time-based SQL Injection via 'log' (U

NULL pointer dereference vulnerability in ASR Crane，Falcon on Linux (as_rrc module) allows Pointer Manipulation. This v

An Improper Authentication vulnerability in the Apache Doris Frontend (FE) meta service allows an unauthenticated remote

CGServiSign developed by Changing has a OS Command Injection vulnerability. Unauthenticated remote attackers can induce

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s JavaScript handling of PDF annotations. Reentrant pag

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of PDF annotations. Reentrant annotation del

Foxit PDF Editor/Reader does not perform sufficient verification of the JPEG2000 image metadata in the PDF file, which l

A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows an update package to be replaced between download a

A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows man-in-the-middle attackers to bypass certificate v

A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s PRC parser due to insufficient valida

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed PDF form fields. Improper valid

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of PDF form fields. Embedded JavaScript may

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s PDF page-tree handling. A specially crafted PDF can t

A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s rendering of Circle annotations with

A local privilege escalation vulnerability exists in the updater of Foxit PDF Editor/Reader due to unsafe loading of dyn

A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s WebP image decoding due to improper h

A path traversal vulnerability exists in Foxit PDF Editor/Reader's handling of embedded PDF resources. Insufficient vali

A local privilege escalation vulnerability exists in the installer of Foxit PDF Editor for macOS due to insufficient val

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of JavaScript array objects. A specially cra

A local privilege escalation vulnerability exists in the update daemon of Foxit PDF Editor/Reader due to an insecure per

Foxit PDF Editor/Reader failed to validate the directory traversal path in the attachment file name, resulting in malici

Foxit PDF Editor/Reader's FileOpen plugin did not adequately validate certain encryption metadata in specially crafted P

An out-of-bounds write vulnerability exists in the PDF rendering process of Foxit PDF Editor/Reader due to insufficient

When opening a specially crafted PDF, Foxit PDF Editor/Reader executes scripts that modify annotation rich-text attribut

When processing a specially crafted PDF, Foxit PDF Editor/Reader may perform reentrant zoom and layout operations throug

When processing a specially crafted PDF file, Foxit PDF Editor/Reader may encounter a reentrant execution condition invo

When rendering the page image, Foxit PDF Editor/Reader fails to perform validation on image objects whose optional conte

Foxit PDF Editor/Reader’s U3D/GIF texture decoding path contained insufficient validation of image dimensions and relate

The WC Fields Factory WordPress plugin before 4.1.11 does not properly restrict access to its field-management AJAX acti

The WP Recipe Maker WordPress plugin before 10.8.2 does not have any authorisation check in one of its REST routes, nor

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ABB Mint Workbench I. T

The divi-dash WordPress plugin before 1.0.7 does not validate the source of the client IP address it uses for rate limit

The jet-form-builder-stripe-gateway WordPress plugin before 1.1.0 does not sanitise and escape a payment token before us

Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of th

TypeDeserializerBase._findDeserializer() in FasterXML jackson-databind caches the resolved deserializer under the raw, a

UTF8DataInputJsonParser._reportInvalidToken() in FasterXML jackson-core builds the offending-token text for its error me

A vulnerability was identified in SourceCodester Online Reviewer Management System 1.0. This affects an unknown function

A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. The impacted element is an unkno

ClipBucket v5 before 5.5.3-#182 contains a blind SQL injection vulnerability in the photo search endpoint where the quer

Photoview through 2.4.0 contains an authorization bypass vulnerability in the shareAlbum GraphQL mutation that allows au