2026

In the Linux kernel, the following vulnerability has been resolved: btrfs: release path before initializing extent tree

In the Linux kernel, the following vulnerability has been resolved: idpf: fix error handling in the init_task on load

In the Linux kernel, the following vulnerability has been resolved: inet: frags: drop fraglist conntrack references Ja

In the Linux kernel, the following vulnerability has been resolved: gpio: mpsse: fix reference leak in gpio_mpsse_probe

In the Linux kernel, the following vulnerability has been resolved: dmaengine: at_hdmac: fix device leak on of_dma_xlat

In the Linux kernel, the following vulnerability has been resolved: dmaengine: bcm-sba-raid: fix device leak on probe

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw: dmamux: fix OF node leak on route al

In the Linux kernel, the following vulnerability has been resolved: dmaengine: lpc18xx-dmamux: fix device leak on route

In the Linux kernel, the following vulnerability has been resolved: dmaengine: sh: rz-dmac: fix device leak on probe fa

In the Linux kernel, the following vulnerability has been resolved: dmaengine: stm32: dmamux: fix device leak on route

In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: dma-crossbar: fix device leak on am3

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix NULL dereference on root when tracing in

In the Linux kernel, the following vulnerability has been resolved: btrfs: always detect conflicting inodes when loggin

In the Linux kernel, the following vulnerability has been resolved: can: j1939: make j1939_session_activate() fail if d

In the Linux kernel, the following vulnerability has been resolved: rust_binder: remove spin_lock() in rust_shrink_free

In the Linux kernel, the following vulnerability has been resolved: counter: interrupt-cnt: Drop IRQF_NO_THREAD flag A

The SupportCandy – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to Insecure Direct Objec

The SupportCandy – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to SQL Injection via the

The Booking Calendar plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check

The Ajax Load More – Infinite Scroll, Load More, & Lazy Load plugin for WordPress is vulnerable to unauthorized access o

The NEX-Forms – Ultimate Forms Plugin for WordPress is vulnerable to unauthorized access of data due to a missing capabi

HotCRP is conference review software. HotCRP versions from October 2025 through January 2026 delivered documents of all

Online-Exam-System 2015 contains a SQL injection vulnerability in the feedback module that allows attackers to manipulat

Crystal Shard http-protection 0.2.0 contains an IP spoofing vulnerability that allows attackers to bypass protection mid

Navigate CMS 2.8.7 contains a cross-site request forgery vulnerability that allows attackers to upload malicious extensi

Navigate CMS 2.8.7 contains an authenticated SQL injection vulnerability that allows attackers to leak database informat

AirControl 1.4.2 contains a pre-authentication remote code execution vulnerability that allows unauthenticated attackers

Online-Exam-System 2015 contains a time-based blind SQL injection vulnerability in the feedback form that allows attacke

Quick Player 1.3 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by crafting a

Frigate 3.36.0.9 contains a local buffer overflow vulnerability in the Command Line input field that allows attackers to

Sistem Informasi Pengumuman Kelulusan Online 1.0 contains a cross-site request forgery vulnerability that allows attacke

OpenCTI 3.3.1 is vulnerable to a reflected cross-site scripting (XSS) attack via the /graphql endpoint. An attacker can

10-Strike Bandwidth Monitor 3.9 contains a buffer overflow vulnerability that allows attackers to bypass SafeSEH, ASLR,

Frigate Professional 3.36.0.9 contains a local buffer overflow vulnerability in the 'Find Computer' feature that allows

OpenCTI 3.3.1 is vulnerable to a directory traversal attack via the static/css endpoint. An unauthenticated attacker can

Code Blocks 17.12 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by craf

Frigate 2.02 contains a denial of service vulnerability that allows attackers to crash the application by sending oversi

Code Blocks 20.03 contains a denial of service vulnerability that allows attackers to crash the application by manipulat

RM Downloader 2.50.60 contains a local buffer overflow vulnerability in the 'Load' parameter that allows attackers to ex

e-Learning PHP Script 0.1.0 contains a SQL injection vulnerability in the search functionality that allows attackers to

HelloWeb 2.0 contains an arbitrary file download vulnerability that allows remote attackers to download system files by

Infor Storefront B2B 1.0 contains a SQL injection vulnerability that allows attackers to manipulate database queries thr

Wing FTP Server 6.3.8 contains a remote code execution vulnerability in its Lua-based web console that allows authentica

Simple Startup Manager 1.17 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary co

FTPDummy 4.80 contains a local buffer overflow vulnerability in its preference file handling that allows attackers to ex

Socusoft Photo to Video Converter Professional 8.07 contains a local buffer overflow vulnerability in the 'Output Folder

Sickbeard alpha contains a remote command injection vulnerability that allows unauthenticated attackers to execute arbit

Sickbeard alpha contains a cross-site request forgery vulnerability that allows attackers to disable authentication by s

Port Forwarding Wizard 4.8.0 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary c

Nidesoft DVD Ripper 5.2.18 contains a local buffer overflow vulnerability in the License Code registration parameter tha