2026

In the Linux kernel, the following vulnerability has been resolved: io_uring/rw: free potentially allocated iovec on ca

In the Linux kernel, the following vulnerability has been resolved: net: liquidio: Initialize netdev pointer before que

In the Linux kernel, the following vulnerability has been resolved: net: liquidio: Fix off-by-one error in PF setup_nic

In the Linux kernel, the following vulnerability has been resolved: net: liquidio: Fix off-by-one error in VF setup_nic

In the Linux kernel, the following vulnerability has been resolved: net: add proper RCU protection to /proc/net/ptype

In the Linux kernel, the following vulnerability has been resolved: net: gro: fix outer network offset The udp GRO com

In the Linux kernel, the following vulnerability has been resolved: media: dvb-core: fix wrong reinitialization of ring

In the Linux kernel, the following vulnerability has been resolved: xfs: get rid of the xchk_xfile_*_descr calls The x

In the Linux kernel, the following vulnerability has been resolved: xfs: only call xf{array,blob}_destroy if we have a

In the Linux kernel, the following vulnerability has been resolved: xfs: check return value of xchk_scrub_create_subord

In the Linux kernel, the following vulnerability has been resolved: xfs: check for deleted cursors when revalidating tw

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Enable exception fixup for specific ADE

In the Linux kernel, the following vulnerability has been resolved: btrfs: do not free data reservation in fallback fro

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix reservation leak in some error paths whe

Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.2, the Glances REST API web server

A Cross-Site Scripting (XSS) vulnerability exists in the web-based configuration interface of Zucchetti Axess access con

A zip slip vulnerability in the Admin import functionality of CTFd v3.8.1-18-gdb5a18c4 allows attackers to write arbitra

The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Local File Inclu

Mura before 10.1.14 allows beanFeed.cfc getQuery sortby SQL injection.

The Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App plugin

Jenkins LoadNinja Plugin 2.1 and earlier does not mask LoadNinja API keys displayed on the job configuration form, incre

Jenkins LoadNinja Plugin 2.1 and earlier stores LoadNinja API keys unencrypted in job config.xml files on the Jenkins co

Jenkins 2.442 through 2.554 (both inclusive), LTS 2.426.3 through LTS 2.541.2 (both inclusive) performs origin validatio

Jenkins 2.554 and earlier, LTS 2.541.2 and earlier does not safely handle symbolic links during the extraction of .tar a

The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to Privilege Escalation due t

The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to Authentication Bypass in a

The Post SMTP plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check

The Code Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom field meta values in all ver

When a plugin is installed using the Arturia Software Center (MacOS), it also installs an uninstall.sh bash script in a

The "Privileged Helper" component of the Arturia Software Center (MacOS) does not perform sufficient client code signatu

Mura before 10.1.14 allows beanFeed.cfc getQuery sortDirection SQL injection.

MuraCMS through 10.1.10 contains a CSRF vulnerability that allows attackers to permanently destroy all deleted content s

The update address CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to manipulate user address information

The Trash Restore CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to restore deleted content from the tra

MuraCMS through 10.1.10 contains a CSRF vulnerability in the bundle creation functionality (csettings.cfc createBundle m

MuraCMS through 10.1.10 contains a CSRF vulnerability in the Add To Group functionality for user management (cUsers.cfc

The import form CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to upload and install malicious form defi

Glances is an open-source system cross-platform monitoring tool. The GHSA-gh4x fix (commit 5d3de60) addressed unauthenti

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ ZENworks

In Juju from version 3.0.0 through 3.6.18, when a secret owner grants permissions to a secret to a grantee, the secret o

Deserialization of Untrusted Data vulnerability in shinetheme Traveler traveler allows Object Injection.This issue affec

In Juju from version 3.0.0 through 3.6.18, the authorization of the "secret-set" tool is not performed correctly, which

An authorization bypass vulnerability in the Vault secrets back-end implementation of Juju versions 3.1.6 through 3.6.18

A race condition in the secrets management subsystem of Juju versions 3.0.0 through 3.6.18 allows an authenticated unit

In LibreChat 0.8.1-rc2, a logged-in user obtains a JWT for both the LibreChat API and the RAG API.

LibreChat version 0.8.1-rc2 uses the same JWT secret for the user session mechanism and RAG API which compromises the se

In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix refcount bug and potential UAF in pe

In the Linux kernel, the following vulnerability has been resolved: tcp: secure_seq: add back ports to TS offset This

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: bounds-check link_id in ieee80211_m

In the Linux kernel, the following vulnerability has been resolved: net/sched: act_gate: snapshot parameters with RCU o