2026

The Librarian `supervisord` status page can be retrieved by the `web_fetch` tool, which can be used to retrieve running

The Librarian contains an internal port scanning vulnerability, facilitated by the `web_fetch` tool, which can be used w

The Librarian contains a information leakage vulnerability through the `web_fetch` tool, which can be used to retrieve a

Livewire Filemanager, commonly used in Laravel applications, contains LivewireFilemanagerComponent.php, which does not p

Incorrect Implementation of Authentication Algorithm vulnerability in ABB ABB Ability OPTIMAX.This issue affects ABB Abi

Mattermost versions 10.11.x <= 10.11.8, 11.1.x <= 11.1.1, 11.0.x <= 11.0.6 fail to prevent infinite re-renders on API er

In Apache Airflow versions before 3.1.6, and 2.11.1 the proxies and proxy fields within a Connection may include proxy U

In Apache Airflow versions before 3.1.6, when rendered template fields in a Dag exceed [core] max_templated_field_length

HCL MyXalytics  is affected by improper management of a static JWT signing secret in the web application, where the secr

The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Missing Authentication in all versions up

Path Traversal vulnerability exists in multiple Network Cameras TRIFORA 3 series provided by TOA Corporation. If this vu

Cross-site scripting vulnerability exists in multiple Network Cameras TRIFORA 3 series provided by TOA Corporation. If a

OS Command Injection vulnerability exists in multiple Network Cameras TRIFORA 3 series provided by TOA Corporation, whic

The Essential Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions

The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Stored

Remote command injection vulnerability in heap profiler builtin service in Apache bRPC ((all versions < 1.15.0)) on all

Mattermost versions 10.11.x <= 10.11.8 fail to validate input size before processing hashtags which allows an authentica

The Cost Calculator Builder plugin for WordPress is vulnerable to Unauthenticated Payment Status Bypass in all versions

There is a vulnerability in the Supermicro BMC firmware validation logic at Supermicro MBD-X13SEM-F . An attacker can up

There is a vulnerability in the Supermicro BMC firmware validation logic at Supermicro MBD-X12STW-F . An attacker can up

The GetGenie plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.3.0. Thi

The RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging plugin for WordPress is vulnerable to Reflec

The Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit plugin for WordPress is vulnerable to unauthorized mo

The Rede Itaú for WooCommerce plugin for WordPress is vulnerable to order status manipulation due to insufficient verifi

The Related Posts by Taxonomy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'relate

The LEAV Last Email Address Validator plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions <= 1.

The DK PDF – WordPress PDF Generator plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions u

lucy-xss-filter before commit e5826c0 allows an attacker to execute malicious JavaScript due to improper sanitization ca

lucy-xss-filter before commit 7c1de6d allows an attacker to induce server-side HEAD requests to arbitrary URLs when the

Delta Electronics DIAView has Command Injection vulnerability.

The MailerLite - WooCommerce integration plugin for WordPress is vulnerable to unauthorized data modification and deleti

Versions of the package net.sourceforge.plantuml:plantuml before 1.2026.0 are vulnerable to Stored XSS due to insufficie

The WP Recipe Maker plugin for WordPress is vulnerable to Information Exposure in versions up to, and including, 10.2.2

The Fancy Product Designer plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and includi

The Shield: Blocks Bots, Protects Users, and Prevents Security Breaches plugin for WordPress is vulnerable to Insecure D

The Booking Calendar plugin for WordPress is vulnerable to Missing Authorization leading to Sensitive Information Exposu

The All in One SEO – Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic plugin for WordPress is vulnerable to

The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file upload in all versions up to, and incl

The Awesome Support - WordPress HelpDesk & Support Plugin for WordPress is vulnerable to authorization bypass due to mis

Statistics Database System developed by Gotac has a Missing Authentication vulnerability, allowing unauthenticated remot

Statistics Database System developed by Gotac has an Arbitrary File Read vulnerability, allowing unauthenticated remote

Delta Electronics DIAView has multiple vulnerabilities.

Delta Electronics DIAView has multiple vulnerabilities.

The vulnerability, if exploited, could allow an authenticated miscreant (OS Standard User) to trick Process Optimizatio

The vulnerability, if exploited, could allow an authenticated miscreant (Process Optimization Designer User) to embed O

The Process Optimization application suite leverages connection channels/protocols that by-default are not encrypted an

The vulnerability, if exploited, could allow an authenticated miscreant (OS Standard User) to tamper with Process Optim

The vulnerability, if exploited, could allow an authenticated miscreant (OS standard user) to tamper with TCL Macro scr

The vulnerability, if exploited, could allow an authenticated miscreant (Process Optimization Standard User) to tamper

The vulnerability, if exploited, could allow an unauthenticated miscreant to achieve remote code execution under OS sys