2026

A reflected cross-site scripting (xss) vulnerability exists in the emailfailedjob functionality of MedDream PACS Premium

A reflected cross-site scripting (xss) vulnerability exists in the encapsulatedDoc functionality of MedDream PACS Premiu

An arbitrary file read vulnerability exists in the encapsulatedDoc functionality of MedDream PACS Premium 7.3.6.870. A s

A reflected cross-site scripting (xss) vulnerability exists in the modifyHL7Route functionality of MedDream PACS Premium

A reflected cross-site scripting (xss) vulnerability exists in the modifyTranscript functionality of MedDream PACS Premi

A reflected cross-site scripting (xss) vulnerability exists in the downloadZip functionality of MedDream PACS Premium 7.

A reflected cross-site scripting (xss) vulnerability exists in the fetchPriorStudies functionality of MedDream PACS Prem

A reflected cross-site scripting (xss) vulnerability exists in the sendOruReport functionality of MedDream PACS Premium

A reflected cross-site scripting (xss) vulnerability exists in the ldapUser functionality of MedDream PACS Premium 7.3.6

IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due

IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due

The NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Fl

The Creator LMS – The LMS for Creators, Coaches, and Trainers plugin for WordPress is vulnerable to unauthorized modific

The The Events Calendar plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on t

IBM Sterling Connect:Direct for UNIX Container 6.3.0.0 through 6.3.0.6 Interim Fix 016, and 6.4.0.0 through 6.4.0.3 Inte

IBM Aspera Console 3.4.7 stores potentially sensitive information in log files that could be read by a local privileged

IBM Licensing Operator incorrectly assigns privileges to security critical files which could allow a local root escalati

A Command Injection vulnerability in Zoom Node Multimedia Routers (MMRs) before version 5.2.1716.0 may allow a meeting p

A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the

A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the

A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. This vulnerability is tr

A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the

A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the

A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the

A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. Fuzzing performed using

A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. During execution of the

A security issue exists within ArmorStart® LT that can result in a denial-of-service condition. After running a Burp Sui

Calling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND in the GNU C Library version 2.0 to version 2.42 may cau

A security issue was discovered within the legacy Ansible playbook component of Verve Asset Manager, caused by plaintext

A security issue was discovered within the legacy ADI server component of Verve Asset Manager, caused by plaintext secre

Multiple denial-of-service vulnerabilities exist in the affected product. These issues can be triggered through various

A denial-of-service security issue in the affected product. The security issue occurs when a malformed CIP forward open

HTML injection vulnerability in multiple Botble products such as TransP, Athena, Martfury, and Homzen, consisting of an

A flaw was identified in Keycloak’s OpenID Connect Dynamic Client Registration feature when clients authenticate using p

Reflected Cross-Site Scripting (XSS) vulnerability in IsMyGym by Zuinq Studio. This vulnerability allows an attacker to

Stored Cross-Site Scripting (XSS) in Poultry Farm Management System v1.0 due to the lack of proper validation of user in

Stored Cross-Site Scripting (XSS) in Poultry Farm Management System v1.0 due to the lack of proper validation of user in

HTML Injection vulnerability in Isshue by Bdtask, consisting os an HTML injection due to a lack os proper validation

Reflected Cross-Site Scripting (XSS) vulnerability in Riftzilla's QRGen. This vulnerability allows an attavker to execut

dr_flac, an audio decoder within the dr_libs toolset, contains an integer overflow vulnerability flaw due to trusting th

Stored Cross-Site Scripting (XSS) vulnerability in Sesame web application, due to the fact that uploaded SVG images are

The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, a

An high privileged remote attacker can inject arbitrary content into the custom CSS field on the affected devices due to

The extension extends TYPO3’ FileSpool component, which was vulnerable to Insecure Deserialization prior to TYPO3-CORE-

PrismX MX100 AP controller developed by BROWAN COMMUNICATIONS has an Insufficiently Protected Credentials vulnerability,

PrismX MX100 AP controller developed by BROWAN COMMUNICATIONS has an Arbitrary File Upload vulnerability, allowing privi

PrismX MX100 AP controller developed by BROWAN COMMUNICATIONS has a Use of Hard-coded Credentials vulnerability, allowi

URL parameters are directly embedded into JavaScript code or HTML attributes without proper encoding or sanitization. Th

A vulnerability was detected in Bjskzy Zhiyou ERP up to 11.0. Impacted is the function initRCForm of the file RichClient

The Viet contact plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up