2026

A security flaw has been discovered in Totolink N300RH 6.1c.1353_B20190305. Affected by this vulnerability is the functi

A weakness has been identified in snowflakedb snowflake-jdbc up to 4.0.1. Impacted is the function SdkProxyRoutePlanner

telnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by abusing systemd service creden

The installers for multiple products provided by Soliton Systems K.K. contain an issue with incorrect default permission

A security vulnerability has been detected in jizhiCMS up to 2.5.6. Affected is the function findAll in the library frph

A weakness has been identified in Sanluan PublicCMS 6.202506.d. This impacts the function saveMetadata of the file Templ

A security flaw has been discovered in youlaitech youlai-mall 2.0.0. This affects the function listPagedSpuForApp of the

In the query parser in OpenStack Vitrage before 12.0.1, 13.0.0, 14.0.0, and 15.0.0, a user allowed to access the Vitrage

The WP Recipe Maker plugin for WordPress is vulnerable to an Insecure Direct Object Reference (IDOR) in versions up to,

Since the encryption algorithm used to protect firmware updates is itself encrypted using key material available to an a

A vulnerability was identified in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3. The impacted element is the function Save

The Fluent Forms Pro Add On Pack plugin for WordPress is vulnerable to Insufficient Verification of Data Authenticity in

In OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal deserialization (runtime/intern.c) enables re

In OpenClaw before 2026.2.23, tools.exec.safeBins validation for sort could be bypassed via GNU long-option abbreviation

A vulnerability was determined in berry-lang berry up to 1.1.0. The affected element is the function scan_string of the

A vulnerability was found in libvips 8.19.0. Impacted is the function vips_extract_area_build of the file libvips/conver

A vulnerability has been found in libvips 8.19.0. This issue affects the function vips_extract_band_build of the file li

A flaw has been found in libvips 8.19.0. This vulnerability affects the function vips_unpremultiply_build of the file li

A vulnerability was detected in libvips 8.19.0. This affects the function vips_bandrank_build of the file libvips/conver

A weakness has been identified in Tenda F453 1.0.0.3. This affects the function fromAddressNat of the file /goform/addre

A security flaw has been discovered in Tenda F453 1.0.0.3. Affected by this issue is the function frmL7ProtForm of the f

An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker t

An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker

An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker

An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated atta

An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in EFM-Networks, Inc. IpTIME T5008, EFM-Network

Stack-based Buffer Overflow vulnerability in SimTech Systems, Inc. ThinkWise allows Remote Code Inclusion.This issue aff

An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker

An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker

An arbitrary file-read vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling unauthenticated attackers to

A stack based buffer overflow exists in an API route of XWEB Pro version 1.12.1 and prior, enabling unauthenticated att

An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker

A vulnerability was identified in Tenda F453 1.0.0.3. Affected by this vulnerability is the function formWrlsafeset of t

The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to

WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersona

The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absen

The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to

Charging station authentication identifiers are publicly accessible via web-based mapping platforms.

An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attack

An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker

An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacke

A vulnerability exists in Copeland XWEB Pro version 1.12.1 and prior, in which an unexpected return value from the auth

An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attac

An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker

An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an unauthenticated attacker

An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacke

The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absen

Charging station authentication identifiers are publicly accessible via web-based mapping platforms.

An authentication bypass vulnerability exists in Copeland XWEB Pro version 1.12.1 and prior, enabling any attackers to