2026

PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privileges by creating a temporary v

PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privileges by creating a custom oper

A denial-of-service (DoS) vulnerability in the Advanced DNS Security (ADNS) feature of Palo Alto Networks PAN-OS® softwa

An improper certificate validation vulnerability in PAN-OS allows users to connect Terminal Server Agents on Windows to

An issue was discovered in OpenSatKit 2.2.1. The EventErrStr buffer has a fixed size of 256 bytes. The code uses sprintf

Directory traversal vulnerability in OpenSatKit 2.2.1 allows attackers to gain access to sensitive information or delete

An issue was discovered in OpenSatKit 2.2.1. The DirName field in the telecommand is provided by the ground segment and

An issue in Sunbird-Ed SunbirdEd-portal v1.13.4 allows attackers to obtain sensitive information. The application disabl

nanotar through 0.2.0 has a path traversal vulnerability in parseTar() and parseTarGzip() that allows remote attackers t

An issue was discovered in Pacom Unison Client 5.13.1. Authenticated users can inject malicious scripts in the Report Te

A missing authentication mechanism in the web management API components of Shenzhen Zhibotong Electronics ZBT WE2001 23.

Authentication for ZLAN5143D can be bypassed by directly accessing internal URLs.

An unprotected API endpoint allows an attacker to remotely change the device password without providing authentication.

A lack of session validation in the web API component of Shenzhen Zhibotong Electronics ZBT WE2001 23.09.27 allows remot

The Product Options and Price Calculation Formulas for WooCommerce – Uni CPO (Premium) plugin for WordPress is vulnerabl

MiniGal Nano versions 0.3.5 and prior contain a path traversal vulnerability in index.php via the dir parameter. The app

MiniGal Nano version 0.3.5 and prior contain a reflected cross-site scripting (XSS) vulnerability in index.php via the d

A specially-crafted file can cause libjxl's decoder to write pixel data to uninitialized unallocated memory. Soon after

A path traversal vulnerability in the check_token function of Shenzhen Zhibotong Electronics ZBT WE2001 23.09.27 allows

A specially-crafted file can cause libjxl's decoder to read pixel data from uninitialized (but allocated) memory. This

Proctorio Chrome Extension is a browser extension used for online proctoring. The extension contains multiple window.add

A vulnerability in Plunet Plunet BusinessManager allows unauthorized actions being performed on behalf of privileged use

The /dbviewer/ web endpoint in METIS WIC devices is exposed without authentication. A remote attacker can access and exp

METIS DFS devices (versions <= oscore 2.1.234-r18) expose a web-based shell at the /console endpoint that does not requi

METIS WIC devices (versions <= oscore 2.1.234-r18) expose a web-based shell at the /console endpoint that does not requi

Incorrect permission assignment in AMD µProf may allow a local user-privileged attacker to achieve privilege escalation,

A DLL hijacking vulnerability in Vivado could allow a local attacker to achieve privilege escalation, potentially result

Improper input validation in AMD Graphics Driver could allow a local attacker to write out of bounds, potentially result

Improper Hardware reset flow logic in the GPU GFX Hardware IP block could allow a privileged attacker in a guest virtual

A DLL hijacking vulnerability in the AMD Software Installer could allow an attacker to achieve privilege escalation pote

Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Logo Software Industry

Improper input validation in AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potentia

Integer Overflow within atihdwt6.sys can allow a local attacker to cause out of bound read/write potentially leading to

The integer overflow vulnerability within AMD Graphics driver could allow an attacker to bypass size checks potentially

A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to modify

A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to corrupt

Improper handling of parameters in the AMD Secure Processor (ASP) could allow a privileged attacker to pass an arbitrary

Kimai 2 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts into

GOautodial 4.0 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject ma

WordPress Server Log Viewer 1.0 contains a persistent cross-site scripting vulnerability that allows attackers to inject

Yoast Duplicate-Post WordPress Plugin 3.2.3 contains a persistent cross-site scripting vulnerability in plugin settings

InoERP 0.7.2 contains a persistent cross-site scripting vulnerability in the comment section that allows unauthenticated

thesystem version 1.0 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious

ActiveFax Server 6.92 Build 0316 contains an unquoted service path vulnerability in the ActiveFaxServiceNT service that

Zilab Remote Console Server 3.2.9 contains an unquoted service path vulnerability that allows local attackers to potenti

Mikogo 5.2.2.150317 contains an unquoted service path vulnerability in the Mikogo-Service Windows service configuration.

WorkgroupMail 7.5.1 contains an unquoted service path vulnerability in its Windows service configuration that allows loc

BlackMoon FTP Server 3.1.2.1731 contains an unquoted service path vulnerability that allows local users to potentially e

Phraseanet 4.0.3 contains a stored cross-site scripting vulnerability that allows authenticated users to inject maliciou

A vulnerability in Plunet Plunet BusinessManager allows session hijacking, data theft, unauthorized actions on behalf of