2026

Mercurius is a GraphQL adapter for Fastify. Prior to version 16.4.0, a cross-site request forgery (CSRF) vulnerability w

Use of a Broken or Risky Cryptographic Algorithm vulnerability in rustdesk-server-pro RustDesk Server Pro rustdesk-serve

Use of a Broken or Risky Cryptographic Algorithm vulnerability in rustdesk-client RustDesk Client rustdesk-client on Win

Avira Internet Security contains a time-of-check time-of-use (TOCTOU) vulnerability in the Optimizer component. A privil

Avira Internet Security contains a deserialization of untrusted data vulnerability in the System Speedup component. The

Avira Internet Security contains an improper link resolution vulnerability in the Software Updater component. During the

Python-Markdown version 3.8 contain a vulnerability where malformed HTML-like sequences can cause html.parser.HTMLParser

The WowOptin: Next-Gen Popup Maker – Create Stunning Popups and Optins for Lead Generation plugin for WordPress is vulne

The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to PHP Object Injection in

In affected versions of Octopus Server it was possible to create a new API key from an existing access token resulting i

A improperly secured file management feature allows uploads of dangerous data types for unauthenticated users, leading t

In Eclipse Jetty, versions 12.0.0-12.0.31 and 12.1.0-12.0.5, class GzipHandler exposes a vulnerability when a compressed

The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs. Different

Race condition vulnerability in the device security management module. Impact: Successful exploitation of this vulnerabi

Race condition vulnerability in the permission management service. Impact: Successful exploitation of this vulnerability

Vulnerability of improper verification in the email application. Impact: Successful exploitation of this vulnerability m

Vulnerability of uninitialized pointer access in the scanning module. Impact: Successful exploitation of this vulnerabil

Buffer overflow vulnerability in the scanning module. Impact: Successful exploitation of this vulnerability may affect a

Permission bypass vulnerability in the system service framework. Impact: Successful exploitation of this vulnerability m

The Page and Post Clone plugin for WordPress is vulnerable to SQL Injection via the 'meta_key' parameter in the content_

Out-of-bounds write vulnerability in the IMS module. Impact: Successful exploitation of this vulnerability may affect av

Race condition vulnerability in the security control module. Impact: Successful exploitation of this vulnerability may a

Race condition vulnerability in the printing module. Impact: Successful exploitation of this vulnerability may affect av

Race condition vulnerability in the printing module. Impact: Successful exploitation of this vulnerability may affect av

Race condition vulnerability in the maintenance and diagnostics module. Impact: Successful exploitation of this vulnerab

Permission control vulnerability in the cellular_data module. Impact: Successful exploitation of this vulnerability may

Out-of-bounds character read vulnerability in Bluetooth. Impact: Successful exploitation of this vulnerability may affec

Data processing vulnerability in the certificate management module. Impact: Successful exploitation of this vulnerabilit

Path traversal vulnerability in the certificate management module. Impact: Successful exploitation of this vulnerability

Double free vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availab

HCL Sametime for iOS is impacted by a sensitive information disclosure. Hostnames information is written in application

The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Privilege Escalation in all versions up t

Permission control vulnerability in the resource scheduling module. Impact: Successful exploitation of this vulnerabilit

Arbitrary File Write via Path Traversal upload to Remote Code Execution in SeppMail User Web Interface. The affected fea

Authentication bypass vulnerability in the device authentication module. Impact: Successful exploitation of this vulnera

A Improper Access Control vulnerability in the kernel of SUSE SUSE Linux Enterprise Server 12 SP5 breaks nftables, causi

dns_unpack_name() caches the buffer tailroom once and reuses it while appending DNS labels. As the buffer grows, the cac

The Media Library Assistant plugin for WordPress is vulnerable to unauthorized modification of data due to a missing cap

EC-CUBE provided by EC-CUBE CO.,LTD. contains a multi-factor authentication (MFA) bypass vulnerability. An attacker who

The Login with Salesforce WordPress plugin through 1.0.2 does not validate that users are allowed to login through Sales

IDC SFX2100 Satellite Receiver firmware ships with multiple daemon configuration files for routing components (e.g., zeb

Ghost is a Node.js content management system. From version 0.7.2 to 6.19.0, specifically crafted malicious themes can ex

The Calendar module for HumHub enables users to create one-time or recurring events, manage attendee invitations, and ef

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuanticaLabs MediC

Inclusion of Functionality from Untrusted Control Sphere vulnerability in WP Royal Royal Elementor Addons royal-elemento

Improper Control of Generation of Code ('Code Injection') vulnerability in Crocoblock JetEngine jet-engine allows Remote

Unrestricted Upload of File with Dangerous Type vulnerability in WP Chill Filr filr-protection allows Upload a Web Shell

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AndonDesign UDesig

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in