2026

A security flaw has been discovered in memcached 1.6.41/1.6.42/1.6.43. This vulnerability affects the function try_read_

A vulnerability was identified in SourceCodester Inventory Management System 1.0. This affects an unknown part of the fi

Publishing limits the compressed size of a VSIX (ovsx.publishing.max-content-size, 512 MB by default) but nothing limite

multer is a Node.js middleware for handling multipart/form-data uploads. In versions 2.2.0 through 2.3.0, when a request

A vulnerability was identified in Tenda W20E 15.11.0.61068_1546_841_CN_TDC. This issue affects the function formIPMacBin

The Android application "YAMAP -Social Trekking GPS App" contains an improper access control vulnerability in its WebVie

SolarView Compact contains a cross-site scripting vulnerability in Image Management. If this vulnerability is exploited,

SolarView Compact contains a cross-site scripting vulnerability in Schedule Settings and Mail Send Setting. If this vuln

Cross-site scripting vulnerability exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If this vu

Cross-site scripting vulnerability exists in PC-HELPER Wireless I/O DIO-0404RY-LWF and PC-HELPER Wireless I/O DIO-0404RY

Cross-site scripting vulnerability exists in CPSL-08P1EN. If this vulnerability is exploited, an arbitrary script may be

Insufficiently protected credentials issue exists in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*. If this vulner

Stack-based buffer overflow vulnerability exists in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*. Receiving a spe

Missing authentication for critical function vulnerability exists in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*

Plaintext storage of a password issue exists in CONPROSYS nano Series . If this vulnerability is exploited, an attacker

Out-of-bounds write vulnerability exists in CONPROSYS nano Series. Receiving a specially crafted request created and sen

Cross-site scripting vulnerability exists in CONPROSYS nano Series. If this vulnerability is exploited, an arbitrary scr

An exposure of information through directory listing issue exists in CONPROSYS PAC Series. Accessing a specific URL on t

Cross-site scripting vulnerability exists in CONPROSYS PAC Series. If this vulnerability is exploited, an arbitrary scri

An exposure of information through directory listing issue exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Cont

Cross-site scripting vulnerability exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. If this v

Cross-site scripting vulnerability exists in Contec EC1000 series. If this vulnerability is exploited, an arbitrary scri

Cross-site scripting vulnerability exists in Contec RP-WAH-SR Series. If this vulnerability is exploited, an arbitrary s

Cross-site scripting vulnerability exists in SGA1000. If this vulnerability is exploited, an arbitrary script may be exe

Cross-site request forgery vulnerability exists in multiple Contec products. If a user views a specially crafted page wh

Cross-site scripting vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerabili

An issue was discovered in the MassMessage extension in MediaWiki before 1.40.2. For a Special:MassMessage?uselang=x-xss

Frappe before 14.49.0 allows an XSS attack that is associated with blog pages and exception pages.

An issue was discovered in the content_consent (aka Content Consent) extension through 2.0.1 for TYPO3. It fails to veri

An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3. The backend module allows an authenticate

An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3. It fails to check access permissions for

A vulnerability was determined in GPAC up to f1219cde. This vulnerability affects the function gf_node_changed_internal

A vulnerability was found in GPAC up to f1219cde. This affects the function gf_bt_report of the file scene_manager/loade

The svg_optimizer gem before 0.3.0 for Ruby performs entity expansion on untrusted documents.

The femanager extension 7 before 7.2.2 for TYPO3 has Incorrect Access Control: it lacks a check for permissions for the

A directory Traversal vulnerability in DataEase before 1.18.10 allows a remote attacker to obtain sensitive information

A security vulnerability has been detected in Matthias-Wandel jhead up to 3.3. This impacts the function ProcessGpsInfo

HotelDruid before 3.0.6 has insufficient file upload sanitation in the backup/restore function.

An issue was discovered in Softing OPC UA C++ SDK through 6.20 and Softing Secure Integration Server through 1.22. By us

A vulnerability was identified in ipa-lab HackingBuddyGPT up to 0.5.0. This affects the function ssh_run_command of the

A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This affects an unkn

A weakness has been identified in FedML-AI FedML up to 0.9.6. Affected by this issue is the function S3Storage.read_mode

An issue was discovered in camera in Samsung Mobile Processor Exynos 1580 and 2500. An untrusted pointer dereference occ

An issue was discovered in CustOS Driver in Samsung Mobile Processor Exynos 1580. Requesting oversized shared memory fro

An issue was discovered in NR RRC in Samsung Mobile Processor and Modem Exynos 1080, 2100, 1280, 2200, 1330, 1380, 1480,

An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 26

An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 26

An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, and 1380. A heap overflow in the Exynos DR

An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 26

N-able Mail Assure through April 2026 contains a design-level authorization flaw that allows an authenticated SMTP user