2026

An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiC

The Code Snippets plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including,

The WP Duplicate plugin for WordPress is vulnerable to Missing Authorization leading to Arbitrary File Upload in all ver

The Events Listing Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Event URL' paramete

A vulnerability has been found in Sanluan PublicCMS up to 4.0.202506.d/5.202506.d/6.202506.d. Impacted is the function P

A flaw has been found in SourceCodester Gas Agency Management System 1.0. This issue affects some unknown processing of

Access control settings for forum post custom fields are not applied to the JSON output type, leading to an ACL violatio

The Employee Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'form_title' parameter

A vulnerability was detected in abhiphile fermat-mcp up to 47f11def1cd37e45dd060f30cdce346cbdbd6f0a. This vulnerability

A vulnerability was found in DCN DCME-320 up to 20260121. Impacted is the function apply_config of the file /function/sy

A flaw has been found in micropython up to 1.27.0. This vulnerability affects the function mp_import_all of the file py/

The WaveSurfer-WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's audio shortcode in

The Docus – YouTube Video Playlist plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'docusplayl

The Orange Confort+ accessibility toolbar for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scriptin

The Tune Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via CSV import in all versions up to,

A reflected cross-site scripting (XSS) vulnerability in the PDF export functionality of the TYDAC AG MAP+ solution allow

The OAuth Single Sign On – SSO (OAuth Client) plugin for WordPress is vulnerable to unauthorized access in all versions

A vulnerability was detected in libuvc up to 0.0.7. Affected is the function uvc_scan_streaming of the file src/device.c

A security flaw was identified in the Ansible Lightspeed API conversation endpoints that handle AI chat interactions. Th

A security vulnerability has been detected in oatpp up to 1.3.1. This impacts the function oatpp::data::type::ObjectWrap

A flaw has been found in mruby up to 3.4.0. This affects the function mrb_vm_exec of the file src/vm.c of the component

A vulnerability was detected in kalyan02 NanoCMS up to 0.4. Affected by this issue is some unknown functionality of the

A security vulnerability has been detected in isaacwasserman mcp-vegalite-server up to 16aefed598b8cd897b78e99b907f6e298

A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/auth-proxy-set-headers` Ingress

A weakness has been identified in Free5GC up to 4.1.0. Affected is the function SessionDeletionResponse of the component

A security flaw has been discovered in Free5GC up to 4.1.0. This impacts the function identityTriggerType of the file pf

The Timeline Block – Beautiful Timeline Builder for WordPress (Vertical & Horizontal Timelines) plugin for WordPress is

A vulnerability was identified in Free5GC up to 4.1.0. This affects the function ResolveNodeIdToIp of the file internal/

A vulnerability was determined in Free5GC up to 4.1.0. The impacted element is the function establishPfcpSession of the

A vulnerability was found in Edimax BR-6208AC 2_1.02. The affected element is the function auth_check_userpass2. Perform

A vulnerability has been found in Edimax BR-6288ACL up to 1.12. Impacted is the function wiz_WISP24gmanual of the file w

Collabora Online is a collaborative online office suite based on LibreOffice technology. Prior to Collabora Online Devel

Improper access control in Azure Arc allows an unauthorized attacker to elevate privileges over a network.

Azure Front Door Elevation of Privilege Vulnerability

Azure Function Information Disclosure Vulnerability

User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attac

Webpack is a module bundler. From version 5.49.0 to before 5.104.1, when experiments.buildHttp is enabled, webpack’s HTT

Webpack is a module bundler. From version 5.49.0 to before 5.104.0, when experiments.buildHttp is enabled, webpack’s HTT

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that aut

Fortinet FortiOS through 7.6.6 allows attackers to decrypt LDAP credentials stored in device configuration files, as exp

A flaw has been found in Edimax BR-6258n up to 1.18. This issue affects the function formStaDrvSetup of the file /goform

A vulnerability was determined in WeKan up to 8.20. This impacts an unknown function of the file models/boards.js of the

A vulnerability was found in WeKan up to 8.20. This affects an unknown function of the file models/attachments.js of the

A vulnerability has been found in WeKan up to 8.20. The impacted element is an unknown function of the file server/attac

In vpu_mmap of vpu_ioctl, there is a possible arbitrary address mmap due to a missing bounds check. This could lead to l

A truncated 802.15.4 packet can lead to an assert, resulting in a denial of service.

In builds with PubSub and JSON enabled, a crafted JSON message can cause the decoder to write beyond a heap-allocated ar

Tanium addressed an incorrect default permissions vulnerability in Enforce.

Tanium addressed an improper access controls vulnerability in Reputation.

Tanium addressed an incorrect default permissions vulnerability in Benchmark.