2026

Adaware Web Companion 4.9.2159 contains an unquoted service path vulnerability in the WCAssistantService that allows loc

VPN Unlimited 6.1 contains an unquoted service path vulnerability that allows local attackers to inject malicious execut

Sync Breeze Enterprise 12.4.18 contains an unquoted service path vulnerability that allows local attackers to execute ar

Disk Savvy Enterprise 12.3.18 contains an unquoted service path vulnerability in its service configuration that allows l

Disk Sorter Enterprise 12.4.16 contains an unquoted service path vulnerability that allows local attackers to execute ar

AnyDesk 5.4.0 contains an unquoted service path vulnerability in its Windows service configuration that allows local att

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Ofisimo Web

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Ankara Host

Summary An Insecure Direct Object Reference has been found to exist in `createHeaderBasedEmailResolver()` function with

SQL injection vulnerability in the Buroweb platform version 2505.0.12, specifically in the 'tablon' component. This vuln

In mObywatel iOS application an unauthorized user can use the App Switcher to view the account owner's personal informat

A flaw was found in moodle. During anonymous assignment submissions, user identifiers were inadvertently exposed in URLs

A flaw was found in Moodle. An authorization logic flaw, specifically due to incomplete role checks during the badge awa

A flaw was found in mooodle. A remote attacker could exploit a reflected Cross-Site Scripting (XSS) vulnerability in the

A flaw was found in Moodle. A remote attacker could exploit a lack of proper rate limiting in the confirmation email ser

A flaw was found in Moodle. An open redirect vulnerability in the OAuth login flow allows a remote attacker to redirect

A flaw was found in moodle. This formula injection vulnerability occurs when data fields are exported without proper esc

A flaw was found in moodle. This vulnerability, known as Cross-Site Scripting (XSS), occurs due to insufficient checks o

A flaw was found in Moodle. This cross-site scripting (XSS) vulnerability, caused by improper sanitization of AI prompt

A flaw was found in Moodle. This authentication bypass vulnerability allows suspended users to authenticate through the

HTML injection vulnerability in NICE Chat. This vulnerability allows an attacker to inject and render arbitrary HTML con

Stored Cross-Site Scripting (XSS) vulnerability type in LUNA software v7.5.5.6. This vulnerability allows an attacker to

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Seres Softw

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kod8 Softwa

The OS DataHub Maps plugin for WordPress is vulnerable to arbitrary file uploads due to incorrect file type validation i

Foxit PDF Editor Cloud (pdfonline) contains a stored cross-site scripting vulnerability in the Create New Layer feature.

Foxit PDF Editor Cloud (pdfonline) contains a stored cross-site scripting vulnerability in the file upload feature. A ma

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Refere

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Sensitive Information Exposur

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in AKCE Software Technology R&D Industry and Tr

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in AKCE Softwa

Stack-based buffer overflow vulnerability exists in ELECOM wireless LAN access point devices. A crafted packet may lead

For WRC-X1500GS-B and WRC-X1500GSA-B, the initial passwords can be calculated easily from the system information.

OS command injection vulnerability exists in ELECOM wireless LAN products. A crafted request from a logged-in user may l

Cross-site request forgery vulnerability exists in ELECOM wireless LAN products. If a user accesses a malicious page whi

The Mail Mint plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1

The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '_elementor_dat

The Form Maker by 10Web plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and inc

The Form Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via hidden field values in all versions

The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Stored Cross-S

The installer for Roland Cloud Manager ver.3.1.19 and prior insecurely loads Dynamic Link Libraries (DLLs), which could

The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Information Di

A vulnerability in Brocade Fabric OS before 9.2.1c3 could allow elevating the privileges of the local authenticated user

A vulnerability in Brocade Fabric OS before 9.2.1c2 could allow an authenticated attacker with admin privileges using

The Unlimited Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Border He

A vulnerability in Brocade Fabric OS before 9.2.1 could allow an authenticated attacker with admin privileges using the

When a specific function is enabled while joining a AD Domain from ADM, an improper input parameters validation vulnerab

: Out-of-bounds Write vulnerability in Xquic Project Xquic Server xquic on Linux (QUIC protocol implementation, packet p

The WP ULike plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including

A vulnerability in Brocade Fabric OS could allow an authenticated, local attacker with privileges to access the Bash she