2026

A vulnerability was found in gougucms 4.08.18. This impacts an unknown function of the file \gougucms-master\app\admin\v

Addressed a potential insecure direct object reference (IDOR) vulnerability in the signing invitation acceptance process

Improper Restriction of XML External Entity Reference vulnerability in RTI Connext Professional (Recording Service,Routi

The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to unauthorized access of d

The application's installer runs with elevated privileges but resolves system executables and DLLs using untrusted searc

The application's list box calculate array logic keeps stale references to page or form objects after they are deleted o

The application does not detect or guard against cyclic PDF object references while handling JavaScript in PDF. When pag

The application does not properly validate the lifetime and validity of internal view cache pointers after JavaScript ch

The application does not validate the presence of required appearance (AP) data before accessing stamp annotation resour

The application's update service, when checking for updates, loads certain system libraries from a search path that incl

The application allows PDF JavaScript and document/print actions (such as WillPrint/DidPrint) to update form fields, ann

A vulnerability has been found in gougucms 4.08.18. This affects the function reg_submit of the file gougucms-master\app

XenForo before 2.3.10 and before 2.2.19 is vulnerable to stored cross-site scripting (XSS) in structured text mentions,

XenForo before 2.3.9 and before 2.2.18 allows remote code execution (RCE) by authenticated, but malicious, admin users.

XenForo before 2.3.9 and before 2.2.18 is vulnerable to cross-site scripting (XSS) related to lightbox usage in posts. A

XenForo before 2.3.9 is vulnerable to stored cross-site scripting (XSS) related to BB code rendering. An attacker can in

Buffer Over-read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers. This issue affects

XenForo before 2.3.7 discloses filesystem paths through exception messages triggered by open_basedir restrictions. This

XenForo before 2.3.7 does not properly restrict methods callable from within templates. A loose prefix match was used in

XenForo before 2.3.7 allows information disclosure via local account page caching on shared systems. On systems where mu

XenForo before 2.3.7 contains a security issue affecting Passkeys that have been added to user accounts. An attacker may

XenForo before 2.3.5 allows OAuth2 client applications to request unauthorized scopes. This affects any customer using O

IBM Storage Protect Server 8.2.0 IBM Storage Protect Plus Server is vulnerable to SQL injection. A remote attacker could

XenForo before 2.2.17 and 2.3.1 allows open redirect via a specially crafted URL. The getDynamicRedirect() function does

A security vulnerability has been detected in code-projects BloodBank Managing System 1.0. This affects an unknown part

A weakness has been identified in itsourcecode Payroll Management System 1.0. Affected by this issue is some unknown fun

The Booking for Appointments and Events Calendar - Amelia plugin for WordPress is vulnerable to SQL Injection via the `s

A security flaw has been discovered in itsourcecode Payroll Management System 1.0. Affected by this vulnerability is an

A vulnerability was identified in Axiomatic Bento4 up to 1.6.0-641. Affected is the function AP4_BitReader::SkipBits of

A vulnerability was determined in Axiomatic Bento4 up to 1.6.0-641. This impacts the function AP4_BitReader::ReadCache o

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, t

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, t

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, t

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, t

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, t

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, t

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, t

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a

The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the

A vulnerability was identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, D

A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-32

SiYuan is a personal knowledge management system. From version 3.6.0 to before version 3.6.2, the SanitizeSVG function i

SiYuan is a personal knowledge management system. Prior to version 3.6.2, a vulnerability allows crafted block attribute

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a