2026

Unrestricted Upload of File with Dangerous Type vulnerability in Meow Apps Media File Renamer allows Using Malicious Fil

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in KlbTheme Ma

A vulnerability was determined in code-projects Online Product Reservation System 1.0. The affected element is an unknow

A vulnerability was found in code-projects Online Product Reservation System 1.0. Impacted is an unknown function of the

A weakness has been identified in Xinhu Rainrock RockOA up to 2.7.1. Affected by this vulnerability is an unknown functi

A security flaw has been discovered in Xinhu Rainrock RockOA up to 2.7.1. Affected is an unknown function of the file ro

A vulnerability was detected in code-projects Online Product Reservation System 1.0. The affected element is an unknown

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Infility Infility

Missing Authorization vulnerability in codepeople Sell Downloads sell-downloads allows Exploiting Incorrectly Configured

Missing Authorization vulnerability in wpweb Follow My Blog Post follow-my-blog-post allows Exploiting Incorrectly Confi

Authorization Bypass Through User-Controlled Key vulnerability in Rustaurius Five Star Restaurant Reservations restauran

Insertion of Sensitive Information Into Sent Data vulnerability in Brecht Custom Related Posts custom-related-posts allo

Insertion of Sensitive Information Into Sent Data vulnerability in WP Swings Wallet System for WooCommerce wallet-system

Insertion of Sensitive Information Into Sent Data vulnerability in awethemes AweBooking awebooking allows Retrieve Embed

Unrestricted Upload of File with Dangerous Type vulnerability in Themify Shopo allows Upload a Web Shell to a Web Server

Deserialization of Untrusted Data vulnerability in Themify Themify Edmin allows Object Injection.This issue affects Them

Missing Authorization vulnerability in WPvibes AnyWhere Elementor Pro allows Exploiting Incorrectly Configured Access Co

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AA-Team Premium SE

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AA-Team Amazon Nat

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon In

Missing Authorization vulnerability in Centreon Infra Monitoring (Administration parameters API endpoint modules) allows

A security vulnerability has been detected in code-projects Online Product Reservation System 1.0. Impacted is an unknow

A weakness has been identified in code-projects Online Product Reservation System 1.0. This issue affects some unknown p

A security flaw has been discovered in code-projects Online Product Reservation System 1.0. This vulnerability affects u

In the Linux kernel, the following vulnerability has been resolved: irqchip/mchp-eic: Fix error code in mchp_eic_domain

In the Linux kernel, the following vulnerability has been resolved: mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_st

In the Linux kernel, the following vulnerability has been resolved: NFS: Automounted filesystems should inherit ro,noex

In the Linux kernel, the following vulnerability has been resolved: crypto: starfive - Correctly handle return of sg_ne

In the Linux kernel, the following vulnerability has been resolved: net: netpoll: initialize work queue before error ch

In the Linux kernel, the following vulnerability has been resolved: hfs: fix potential use after free in hfs_correct_ne

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix potential out-of-bounds read in iomm

In the Linux kernel, the following vulnerability has been resolved: wifi: rtl818x: Fix potential memory leaks in rtl818

In the Linux kernel, the following vulnerability has been resolved: backlight: led-bl: Add devlink to supplier LEDs LE

In the Linux kernel, the following vulnerability has been resolved: drm/vgem-fence: Fix potential deadlock on release

In the Linux kernel, the following vulnerability has been resolved: block: Use RCU in blk_mq_[un]quiesce_tagset() inste

In the Linux kernel, the following vulnerability has been resolved: staging: most: remove broken i2c driver The MOST I

In the Linux kernel, the following vulnerability has been resolved: rtc: amlogic-a4: fix double free caused by devm Th

In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-motu: add bounds check in put_user l

In the Linux kernel, the following vulnerability has been resolved: iavf: Implement settime64 with -EOPNOTSUPP ptp_clo

In the Linux kernel, the following vulnerability has been resolved: s390/fpu: Fix false-positive kmsan report in fpu_vs

In the backup parameters, a user with high privilege is able to concatenate custom instructions to the backup setup. Imp

A vulnerability was identified in itsourcecode Society Management System 1.0. This affects an unknown part of the file /

A vulnerability was determined in Tenda AC1206 15.03.06.23. Affected by this issue is the function formBehaviorManager o

Any client who can access to Apache Kyuubi Server via Kyuubi frontend protocols can bypass server-side config kyuubi.ses

QOCA aim AI Medical Cloud Platform developed by Quanta Computer has an Arbitrary File Upload vulnerability, allowing aut

QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a SQL Injection vulnerability, allowing authenticate

A vulnerability was found in SourceCodester API Key Manager App 1.0. Affected by this vulnerability is an unknown functi

QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a SQL Injection vulnerability, allowing authenticate

QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a Path Traversal vulnerability, allowing authenticat