2026

Command injection vulnerability was found in the admin interface component of TP-Link Archer MR600 v5 firmware, allowing

Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) allow account passwords to be changed thr

Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) fail to include the X-Content-Type-Option

Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) serve sensitive administrative content wi

Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) do not enforce rate limiting or account l

Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) implement an insecure Cross-Origin Resour

Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) contain a stored cross-site scripting vul

Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) lack cross-site request forgery (CSRF) pr

Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) display stored user account passwords in

Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) disclose sensitive account credentials in

Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) ship with a predefined default password f

Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) contain an authorization flaw in the user

Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a secu

There is a Cross‑Site Scripting (XSS) issue in Esri ArcGIS Pro versions 3.6.0 and earlier. ArcGIS Pro is a desktop appli

Tanium addressed an uncontrolled resource consumption vulnerability in Discover.

Tanium addressed an improper input validation vulnerability in Discover.

Crucial Storage Executive installer versions prior to 11.08.082025.00 contain a DLL preloading vulnerability. During ins

A Double Free in XSLT `show_index` has been identified in Hiawatha webserver version 11.7 which allows an unauthenticate

Tomahawk auth timing attack due to usage of `strcmp` has been identified in Hiawatha webserver version 11.7 which allows

Improper header parsing may lead to request smuggling has been identified in Hiawatha webserver version 11.7 which allow

Forma LMS 2.3 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts int

IDT PC Audio 1.0.6499.0 contains an unquoted service path vulnerability that allows local users to potentially execute a

Kite 1.2020.1119.0 contains an unquoted service path vulnerability in the KiteService Windows service that allows local

PDF Complete 3.5.310.2002 contains an unquoted service path vulnerability in its pdfsvc.exe service configuration. Attac

Openfire 4.6.0 contains a stored cross-site scripting vulnerability in the nodejs plugin that allows attackers to inject

Grav CMS 1.6.30 with Admin Plugin 1.9.18 contains a persistent cross-site scripting vulnerability that allows authentica

Xeroneit Library Management System 3.1 contains a stored cross-site scripting vulnerability in the Book Category feature

MiniTool ShadowMaker 3.2 contains an unquoted service path vulnerability in the MTAgentService that allows local attacke

Incorrect access control in the importUser function of SpringBlade v4.5.0 allows attackers with low-level privileges to

An issue in continuous.software aangine v.2025.2 allows a remote attacker to obtain sensitive information via the excel-

Stack overflow vulnerability in eslint before 9.26.0 when serializing objects with circular references in eslint/lib/sha

IObit Uninstaller 10 Pro contains an unquoted service path vulnerability that allows local users to potentially execute

An Out-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLI

A Heap-based Buffer Overflow vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Releas

** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Special Elements used in a Command ('Command Injection') vuln

Deserialization of Untrusted Data vulnerability in Apache Karaf Decanter. The Decanter log socket collector exposes th

The dormakaba registration units 9002 (PIN Pad Units) have an exposed UART header on the backside. The PIN pad is sendin

By default, the password for the Access Manager's web interface, is set to 'admin'. In the tested version changing the p

Dormakaba provides the software FWServiceTool to update the firmware version of the Access Managers via the network. The

The binary serving the web server and executing basically all actions launched from the Web UI is running with root priv

With physical access to the device and enough time an attacker can desolder the flash memory, modify it and then reinsta

With physical access to the device and enough time an attacker is able to solder test leads to the debug footprint (or u

The Access Manager 92xx in hardware revision K7 is based on Linux instead of Windows CE embedded in older hardware revis

The web server of the Access Manager offers a functionality to download a backup of the local database stored on the dev

Instead of typical session tokens or cookies, it is verified on a per-request basis if the originating IP address has on

The web interface offers a functionality to export the internal SQLite database. After executing the database export, an

The Access Manager is using the open source web server CompactWebServer written in C#. This web server is affected by a

The Access Manager is offering a trace functionality to debug errors and issues with the device. The trace functionality

The exos 9300 application can be used to configure Access Managers (e.g. 92xx, 9230 and 9290). The configuration is done

The default password for the extended admin user mode in the application U9ExosAdmin.exe ("Kaba 9300 Administration") is