2026

The WP Photo Album Plus plugin for WordPress is vulnerable to Remote Code Execution in all versions via the wppa_image_m

The Asset CleanUp: Page Speed Booster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Cont

SiYuan through 3.8.4 fails to escape heading style attributes when rendering outline and bookmark dock HTML, allowing st

SiYuan through 3.8.4 renders notebook names as raw HTML in the Daily Note picker dialog without escaping, allowing store

Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges locally.

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Fr

Acode is a powerful text and code editor for Android. From 1.11.6 until 1.12.7, com.foxdebug.acode.rk.exec.terminal.Term

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Fr

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Fr

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Fr

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Fr

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Fr

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Pr

Cotonti 1.0.0 passes the base64-decoded cb parameter to unserialize() without allowed_classes restriction in the comment

Cotonti through 1.0.0 derives password recovery validation tokens from md5(microtime()) in users.passrecover.php, creati

The WP Cloud Plugins Use-your-Drive, Out-of-the-Box, Share-one-Drive, and Lets-Box plugins for WordPress are vulnerable

Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for the

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to improper authoriz

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive information due to imp

IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary code due to improper neutralization

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive information due to imp

IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege man

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper

IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary OS commands due to improper neutral

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to a cross-site requ

IBM Guardium Data Protection 12.2 is vulnerable to local privilege escalation via the SUID-root nmap_wrapper binary on t

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to improper certific

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to a cross-site requ

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to bypass security restrictions due to imp

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper

IBM Guardium Data Protection 12.2 is vulnerable to OS command injection in the Universal Connector plugin upload functio

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to bypass security restrictions due to imp

IBM Guardium Data Protection 12.2 is vulnerable to a hardcoded credentials vulnerability in the hardware_assess/obstore

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to traverse directories on the system due

IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege man

IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary commands due to improper neutraliza

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary commands due to impro

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to gain elevated privileges due to missing

IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the import remotelog_config file

IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the Analytic Grid Service Handler. A

IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the create csr wildcard CLI comm

IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the New Query Builder REST Processor

IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the Load Balancer Groups component.

In libsmpp35 from 0.1.0 through 1.8.0 out of bound read issue was found in the at smpp34_unpack() function via attacker

pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, drop_partition_id()

pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, inherit_template_pro

pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, when pg_jobmon is in

pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, undo_partition() rea