2026

A flaw was found in Keycloak. A remote attacker can exploit differential error messages during the identity-first login

A vulnerability was detected in Shenzhen HCC Technology MPOS M6 PLUS 1V.31-N. Affected by this issue is some unknown fun

XML External Entity (XXE) vulnerability in esaml (and its forks) allows an attacker to cause the system to read local fi

A security vulnerability has been detected in Shenzhen HCC Technology MPOS M6 PLUS 1V.31-N. Affected by this vulnerabili

A weakness has been identified in code-projects Simple Laundry System 1.0. Affected is an unknown function of the file /

A flaw was found in Keycloak. An improper Access Control vulnerability in Keycloak’s User-Managed Access (UMA) resource_

A security flaw has been discovered in code-projects Simple Laundry System 1.0. This impacts an unknown function of the

A vulnerability was identified in code-projects Simple Laundry System 1.0. This affects an unknown function of the file

A vulnerability was determined in code-projects Exam Form Submission 1.0. The impacted element is an unknown function of

An unauthenticated remote attacker can exploit a hidden function in the CLI prompt to escape the restricted interface, l

A vulnerability was found in code-projects Exam Form Submission 1.0. The affected element is an unknown function of the

Any guest issuing a Xenstore command accessing a node using the (illegal) node path "/local/domain/", will crash xenstor

The Intel EPT paging code uses an optimization to defer flushing of any cached EPT state until the p2m lock is dropped,

The Sina Extension for Elementor (Header Builder, Footer Builter, Theme Builder, Slider, Gallery, Form, Modal, Data Tabl

The King Addons for Elementor – 4,000+ ready Elementor sections, 650+ templates, 70+ FREE widgets for Elementor plugin f

Versions of the package jsrsasign before 11.1.1 are vulnerable to Division by zero due to the RSASetPublic/KEYUTIL parsi

Versions of the package jsrsasign before 11.1.1 are vulnerable to Incorrect Conversion between Numeric Types due to hand

Versions of the package jsrsasign before 11.1.1 are vulnerable to Missing Cryptographic Step via the KJUR.crypto.DSA.sig

Versions of the package jsrsasign before 11.1.1 are vulnerable to Improper Verification of Cryptographic Signature via t

Versions of the package jsrsasign from 7.0.0 and before 11.1.1 are vulnerable to Incomplete Comparison with Missing Fact

Versions of the package jsrsasign before 11.1.1 are vulnerable to Infinite loop via the bnModInverse function in ext/jsb

A vulnerability has been found in code-projects Exam Form Submission 1.0. Impacted is an unknown function of the file /a

A flaw has been found in code-projects Exam Form Submission 1.0. This issue affects some unknown processing of the file

A vulnerability was detected in SourceCodester Simple E-learning System 1.0. This vulnerability affects unknown code of

A security vulnerability has been detected in SourceCodester Simple E-learning System 1.0. This affects an unknown part

The trx_addons WordPress plugin before 2.38.5 does not correctly validate file types in one of its AJAX action, allowing

The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for

The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for

The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for

A weakness has been identified in SourceCodester Sales and Inventory System 1.0. Affected by this issue is some unknown

A security flaw has been discovered in SourceCodester Sales and Inventory System 1.0. Affected by this vulnerability is

A vulnerability was identified in SourceCodester Sales and Inventory System 1.0. Affected is an unknown function of the

The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for

A vulnerability was determined in SourceCodester Sales and Inventory System 1.0. This impacts an unknown function of the

A vulnerability was found in SourceCodester Sales and Inventory System 1.0. This affects an unknown function of the file

A vulnerability has been found in Tenda A15 15.13.07.13. The impacted element is the function UploadCfg of the file /cgi

A flaw has been found in Belkin F9K1122 1.00.33. The affected element is the function formWISP5G of the file /goform/for

GV Edge Recording Manager (ERM) v2.3.1 improperly runs application components with SYSTEM-level privileges, allowing any

A vulnerability was detected in Tenda AC21 16.03.08.16. Impacted is the function formSetQosBand of the file /goform/SetN

A security vulnerability has been detected in yangzongzhuan RuoYi up to 4.8.2. This issue affects some unknown processin

A weakness has been identified in MacCMS up to 2025.1000.4052. This vulnerability affects the function order_info of the

A security flaw has been discovered in MacCMS 2025.1000.4052. This affects an unknown part of the file application/api/c

The WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters plugin for WordPress is vulnera

A flaw has been found in Linksys MR9600 2.0.6.206937. Affected is the function smartConnectConfigure of the file SmartCo

A vulnerability was detected in code-projects Exam Form Submission 1.0. This impacts an unknown function of the file /ad

A weakness has been identified in D-Link DIR-513 1.10. The impacted element is the function formEasySetTimezone of the f

A security flaw has been discovered in Tenda F453 1.0.0.3. The affected element is the function FormWriteFacMac of the f

WWBN AVideo is an open source video platform. Prior to version 26.0, the `uploadVideoToLinkedIn()` method in the SocialM

WWBN AVideo is an open source video platform. Prior to version 26.0, WWBN/AVideo contains an open redirect vulnerability

WWBN AVideo is an open source video platform. Prior to version 26.0, WWBN/AVideo contains a stored cross-site scripting