2026

A Stored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Industry Innovat

A weakness has been identified in Nothings stb up to 2.30. This impacts the function stbi__load_gif_main of the file stb

A security flaw has been discovered in Nothings stb_image up to 2.30. This affects the function stbi__gif_load_next of t

A vulnerability was identified in TRENDnet TEW-713RE up to 1.02. The impacted element is an unknown function of the file

The Performance Monitor WordPress plugin through 1.0.6 does not validate a parameter before making a request to it, whic

A vulnerability was determined in TRENDnet TEW-713RE up to 1.02. The affected element is the function sub_421494 of the

A vulnerability was found in SourceCodester Teacher Record System 1.0. Impacted is an unknown function of the file Teach

OpenStack Glance before 29.1.1, 30.x before 30.1.1, and 31.0.0 is affected by Server-Side Request Forgery (SSRF). By use

The Auto Post Scheduler plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and incl

The Ibtana – WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin'

A vulnerability has been found in SourceCodester Simple Doctors Appointment System up to 1.0. This issue affects some un

A flaw has been found in SourceCodester Simple Doctors Appointment System 1.0. This vulnerability affects unknown code o

A vulnerability was detected in SourceCodester Simple Doctors Appointment System 1.0. This affects an unknown part of th

The Loco Translate plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘update_href’ parameter

The Appointment Booking and Scheduler Plugin – Truebooker plugin for WordPress is vulnerable to Sensitive Information Ex

The WooPayments: Integrated WooCommerce Payments plugin for WordPress is vulnerable to unauthorized modification of data

A security vulnerability has been detected in Totolink A3300R 17.0.0cu.557_b20221024. Affected by this issue is the func

A weakness has been identified in Totolink A3300R 17.0.0cu.557_b20221024. Affected by this vulnerability is the function

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to version

LangChain is a framework for building agents and LLM-powered applications. Prior to version 1.2.22, multiple functions i

Ruby LSP is an implementation of the language server protocol for Ruby. Prior to Shopify.ruby-lsp version 0.10.2 and rub

vcpkg is a free and open-source C/C++ package manager. Prior to version 3.6.1#3, vcpkg's Windows builds of OpenSSL set o

Serialize JavaScript to a superset of JSON that includes regular expressions and functions. Prior to version 7.0.5, ther

act is a project which allows for local running of github actions. Prior to version 0.2.86, act's built in actions/cache

act is a project which allows for local running of github actions. Prior to version 0.2.86, act unconditionally processe

Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that all

Dolibarr is an enterprise resource planning (ERP) and customer relationship management (CRM) software package. In versio

Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that all

SciTokens is a reference library for generating and using SciTokens. Prior to version 1.9.7, the Enforcer is vulnerable

SciTokens is a reference library for generating and using SciTokens. Prior to version 1.9.6, the Enforcer incorrectly va

SciTokens is a reference library for generating and using SciTokens. Prior to version 1.9.6, the KeyCache class in scito

A security flaw has been discovered in Totolink A3300R 17.0.0cu.557_b20221024. Affected is the function setSyslogCfg of

The Gravity SMTP plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and includi

The Everest Forms Pro plugin for WordPress is vulnerable to Remote Code Execution via PHP Code Injection in all versions

The PaperCut NG/MF (specifically, the embedded application for Konica Minolta devices) is vulnerable to session hijackin

Multiple cross-site scripting (XSS) vulnerabilities in PaperCut NG/MF before 25.0.10 allow authenticated administrator u

baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has DOM-based cross-site scripting in tag

baserCMS is a website development framework. Prior to version 5.2.3, a path traversal vulnerability exists in the theme

baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has an OS command injection vulnerability

baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has a cross-site scripting vulnerability i

baserCMS is a website development framework. Prior to version 5.2.3, a public mail submission API allows unauthenticated

baserCMS is a website development framework. Prior to version 5.2.3, there is an OS command injection vulnerability in t

baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has a SQL injection vulnerability in blog

baserCMS is a website development framework. Prior to version 5.2.3, baserCMS contains an OS command injection vulnerabi

baserCMS is a website development framework. Prior to version 5.2.3, the application's restore function allows users to

A vulnerability was identified in code-projects Online Food Ordering System 1.0. Affected is an unknown function of the

A vulnerability was determined in Tenda CH22 1.0.0.1. This impacts the function formQuickIndex of the file /goform/Quick

A vulnerability was found in Tenda CH22 1.0.0.1. This affects the function fromAdvSetWan of the file /goform/AdvSetWan o

A vulnerability has been found in Tenda CH22 1.0.0.1/1.If. The impacted element is the function fromSetCfm of the file /

The Debugger & Troubleshooter plugin for WordPress was vulnerable to Unauthenticated Privilege Escalation in versions up