2026

In imgsys, there is a possible memory corruption due to improper locking. This could lead to local denial of service if

In imgsys, there is a possible escalation of privilege due to use after free. This could lead to local escalation of pri

In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

In cameraisp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation

In cameraisp, there is a possible escalation of privilege due to use after free. This could lead to local denial of serv

In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

In wlan, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote (proximal/adja

In wlan STA driver, there is a possible escalation of privilege due to a missing bounds check. This could lead to local

In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, i

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, i

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service

In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if

The unified WEBUI application of the ONT/Beacon device contains an input handling flaw that allows authenticated users t

Improper input verification issue exists in Cybozu Garoon 5.0.0 to 6.0.3, which may lead to unauthorized alteration of p

Cross-site scripting vulnerability exists in Message function of Cybozu Garoon 5.15.0 to 6.0.3, which may allow an attac

Cross-site scripting vulnerability exists in E-mail function of Cybozu Garoon 5.0.0 to 6.0.3, which may allow an attacke

The Five Star Restaurant Reservations WordPress plugin before 2.7.9 does not have CSRF checks in some bulk actions, whi

The Library Viewer WordPress plugin before 3.2.0 does not sanitise and escape some parameters before outputting them bac

The User Profile Builder WordPress plugin before 3.15.2 does not have a proper password reset process, allowing a few u

A vulnerability was identified in JeecgBoot 3.9.0. This vulnerability affects unknown code of the file /JeecgBoot/sys/ap

A vulnerability was determined in SourceCodester Medical Certificate Generator App 1.0. This affects an unknown part. Th

A flaw was found in foreman_kubevirt. When configuring the connection to OpenShift, the system disables SSL verification

A flaw was found in fog-kubevirt. This vulnerability allows a remote attacker to perform a Man-in-the-Middle (MITM) atta

A flaw was found in Keycloak Admin API. This vulnerability allows an administrator with limited privileges to retrieve s

The database account and password are hardcoded, allowing login with the account to manipulate the database in MagicInfo

An unauthenticated user can upload arbitrary files to execute remote code, leading to privilege escalation in MagicInfo9

A vulnerability in MagicInfo9 Server allows authorized users to upload HTML files without authentication, leading to Sto

RaspAP raspap-webgui versions prior to 3.3.6 contain an OS command injection vulnerability. If exploited, an arbitrary O

A vulnerability was found in D-Link DSL-6641K N8.TR069.20131126. Affected by this issue is the function doSubmitPPP of t

A vulnerability has been found in DJI Mavic Mini, Air, Spark and Mini SE up to 01.00.0500. Affected by this vulnerabilit

A vulnerability was identified in EFM ipTIME A8004T 14.18.2. Affected by this vulnerability is the function commit_vpncl

A vulnerability was determined in EFM ipTIME A8004T 14.18.2. Affected is the function httpcon_check_session_url of the f

A vulnerability was found in EFM ipTIME A8004T 14.18.2. This impacts the function httpcon_check_session_url of the file

A vulnerability has been found in Free5GC pcf up to 1.4.1. This affects the function HandleCreateSmPolicyRequest of the

A flaw has been found in Open5GS up to 2.7.6. The impacted element is the function sgwc_tunnel_add of the file /src/sgwc

A vulnerability was detected in Open5GS up to 2.7.6. The affected element is the function sgwc_s5c_handle_create_bearer_

An improper access control vulnerability exists in ASUS Secure Delete Driver of ASUS Business Manager. This vulnerabilit

A security vulnerability has been detected in Open5GS up to 2.7.6. Impacted is the function sgwc_s11_handle_create_indir

A weakness has been identified in Yealink MeetingBar A30 133.321.0.3. This issue affects some unknown processing of the

A security flaw has been discovered in Zhong Bang CRMEB up to 5.6.3. This vulnerability affects unknown code of the file

OpenClaw (aka clawdbot or Moltbot) before 2026.1.29 obtains a gatewayUrl value from a query string and automatically mak

A vulnerability was identified in Zhong Bang CRMEB up to 5.6.3. This affects the function detail/tidyOrder of the file /

EPSON EasyMP Network Projection 2.81 contains an unquoted service path vulnerability in the EMP_NSWLSV service that allo

TFTP Turbo 4.6.1273 contains an unquoted service path vulnerability that allows local attackers to potentially execute a

DHCP Turbo 4.61298 contains an unquoted service path vulnerability that allows local attackers to potentially execute ar

BOOTP Turbo 2.0.1214 contains an unquoted service path vulnerability that allows local attackers to potentially execute

SpyHunter 4 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary cod