2026

Online Store System CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate

SAT CFDI 3.3 contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting S

School Management System CMS 1.0 contains an SQL injection vulnerability in the admin login functionality that allows at

Wecodex Hotel CMS 1.0 contains an SQL injection vulnerability in the admin login functionality that allows unauthenticat

Wecodex Restaurant CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate d

Shipping System CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authenti

plank/laravel-mediable through version 6.4.0 can allow upload of a dangerous file type when an application using the pac

Mattermost versions 11.2.x <= 11.2.2, 10.11.x <= 10.11.10, 11.4.x <= 11.4.0, 11.3.x <= 11.3.1 fail to restrict team-leve

The VSL privileged helper does utilize NSXPC for IPC. The implementation of the "shouldAcceptNewConnection" function, wh

In the Linux kernel, the following vulnerability has been resolved: icmp: fix NULL pointer dereference in icmp_tag_vali

In the Linux kernel, the following vulnerability has been resolved: nfnetlink_osf: validate individual option lengths i

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix NULL deref in mesh_matches_loca

A security vulnerability has been detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This issue affects the functio

Vulnerability of incorrect authorization in HiJiffy Chatbot allows an attacker to download private messages from other u

Vulnerability of incorrect authorization in HiJiffy Chatbot allows an attacker to download private messages from other u

A weakness has been identified in Wavlink WL-NU516U1 260227. This vulnerability affects the function ftext of the file /

A security flaw has been discovered in 648540858 wvp-GB28181-pro up to 2.7.4. This affects the function GenericFastJsonR

A flaw was found in Keycloak. An authenticated attacker can perform Server-Side Request Forgery (SSRF) by manipulating t

A security flaw has been discovered in code-projects Simple Laundry System 1.0. Affected is an unknown function of the f

A vulnerability was identified in code-projects Simple Laundry System 1.0. This impacts an unknown function of the file

A vulnerability was determined in dameng100 muucmf 1.9.5.20260309. This affects an unknown function of the file /admin/e

A vulnerability was found in dameng100 muucmf 1.9.5.20260309. The impacted element is an unknown function of the file /a

Each RPCSEC_GSS data packet is validated by a routine which checks a signature in the packet. This routine copies a por

On a system exposing an NVMe/TCP target, a remote client can trigger a kernel panic by sending a CONNECT command for an

When a challenge ACK is to be sent tcp_respond() constructs and sends the challenge ACK and consumes the mbuf that is pa

The installer of RATOC RAID Monitoring Manager for Windows allows to customize the installation folder. If the installat

The installer of RATOC RAID Monitoring Manager for Windows searches the current directory to load certain DLLs. If a use

The LeadConnector WordPress plugin before 3.0.22 does not have authorization in a REST route, allowing unauthenticated u

The WP Lightbox 2 WordPress plugin before 3.0.7 does not sanitise and escape some of its settings, which could allow hig

The Responsive Plus WordPress plugin before 3.4.3 is vulnerable to arbitrary shortcode execution due to the software al

The Shared Files WordPress plugin before 1.7.58 allows users with a role as low as Contributor to download any file on

A vulnerability has been found in dameng100 muucmf 1.9.5.20260309. The affected element is an unknown function of the fi

A flaw has been found in dameng100 muucmf 1.9.5.20260309. Impacted is an unknown function of the file /admin/Member/inde

The Elementor Website Builder plugin for WordPress is vulnerable to Incorrect Authorization to Sensitive Information Exp

A vulnerability was detected in code-projects Online Food Ordering System 1.0. This issue affects some unknown processin

A security vulnerability has been detected in itsourcecode Online Enrollment System 1.0. This vulnerability affects unkn

A weakness has been identified in code-projects Online Food Ordering System 1.0. This affects an unknown part of the fil

A security flaw has been discovered in Netcore Power 15AX up to 3.0.0.6938. Affected by this issue is the function setTo

The DSGVO snippet for Leaflet Map and its Extensions plugin for WordPress is vulnerable to Stored Cross-Site Scripting v

The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to unauthorized data loss in all

The Blackhole for Bad Bots plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the User-Agent HTTP hea

The FormLift for Infusionsoft Web Forms plugin for WordPress is vulnerable to Missing Authorization in all versions up t

The Simple Download Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sdc_menu' shortco

Digital Photo Frame GH-WDF10A provided by GREEN HOUSE CO., LTD. contains an active debug code vulnerability. If this vul

The Amelia Booking plugin for WordPress is vulnerable to Insecure Direct Object References in versions up to, and includ

A vulnerability has been found in SourceCodester Food Ordering System 1.0. This affects an unknown function of the file

A flaw has been found in SourceCodester Malawi Online Market 1.0. The impacted element is an unknown function of the fil

The ShortPixel Image Optimizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the attachment post

The BWL Advanced FAQ Manager Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'baf_sbox' s

The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to PHP Object Injection via deserialization of the '