2026

In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the PostgreSQL message

In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], a gRPC endpoint does ha

In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x DB2 client (

In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x MySQL client

In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Eclipse Vert.x MQTT

In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the binary array decode

In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the TDS message decoder

In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the uniqueItems keyword

A remote attacker may send a specially crafted network packet that causes the affected application to perform an out-of-

Authentication bypass vulnerability in Stela, versions prior to 1.60.1, due to the use of a cookie named “authProcess” w

A vulnerability has been identified within Fleet where, by default, Fleet will automatically trust a remote server’s cer

A vulnerability has been identified within Rancher where a user with the ability to create a project, on a certain clust

A vulnerability has been identified in Steve where by default it was using an insecure option that did not validate the

The Blog2Social – Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to Insecure Direct Object Refere

In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the HTTP proxy provides a body transformer

In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the WebSocket implement

In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x Redis client

The framebuffer device model's maximum resolution constants were duplicated between the framebuffer and RFB modules and

The HDA audio device model did not check for zero-length Buffer Descriptor List (BDL) entries when starting a stream. A

The xHCI (USB 3) device model did not validate or save the event ring size provided by the guest. The size was re-read

The Tutor LMS WordPress plugin before 4.1.1 does not perform a capability check in a routine that regenerates its manag

The Rede Itaú for WooCommerce WordPress plugin before 5.5.3 does not verify the authenticity of a payment gateway webhoo

The Rede Itaú for WooCommerce WordPress plugin before 5.5.3 does not verify the authenticity of a payment gateway webhoo

The Email Customizer for WooCommerce (Pro) plugin for WordPress is vulnerable to Remote Code Execution in versions up to

A security vulnerability in HPE NonStop TNS/X Native Inspect may cause corruption of address and potentially redirect ex

A security vulnerability in HPE NonStop SOAP 4.0 may cause memory corruption resulting in a system down.

A security vulnerability in HPE NonStop Kernel may allow user space access to privileged or unmapped data.

The Document Gallery WordPress plugin through 5.1.1 does not properly sanitise and escape user input before reflecting i

kqueue_fork_copy_knote() indexed into the child's file descriptor table using a knote's file descriptor number without a

When copying knotes from a parent kqueue to a child, the copy code did not correctly exclude marker knotes (used interna

When semop(2) blocks waiting for a semaphore condition, it releases the per-set lock and sleeps. Upon waking, it checks

A path traversal vulnerability has been reported to affect QcalAgent. If a remote attacker gains a user account, they ca

A relative path traversal vulnerability has been reported to affect Download Station. If a remote attacker gains a user

A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user a

A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user a

A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user a

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, the

An observable timing discrepancy vulnerability has been reported to affect QuRouter. If exploited, the vulnerability cou

A cross-site scripting (XSS) vulnerability has been reported to affect Network & Virtual Switch. If a remote attacker ga

Improper certificate validation in the tunnel handshake in Cato Client allows a man-in-the-middle attacker to impersonat

The Elementor Website Builder – more than just a page builder plugin for WordPress is vulnerable to Sensitive Informatio

Improper validation of array index vulnerability in Samsung Open Source Vyond allows Input Data Manipulation. This issu

Uncaught exception vulnerability in Samsung Open Source Vyond allows Input Data Manipulation. This issue affects Vyond:

The User Rights Access Manager WordPress plugin through 1.1.3 does not restrict access to one of its AJAX account-regist

The Spin Wheel WordPress plugin before 2.2.1 does not verify that a visitor actually performed a legitimate spin before

The Easy HTTPS Redirection (SSL) WordPress plugin before 2.0.2 does not perform capability checks in some of its AJAX ac

The Cardinity Payment Gateway for WooCommerce WordPress plugin before 3.4.2 does not properly verify the authenticity of

The eaSYNC Booking WordPress plugin before 1.3.31 does not perform authorization or nonce checks on several of its canc

When an audio channel's buffer needs to be resized, the sound(4) driver checks that the buffer is not memory-mapped and

When the PCM sample array needs to grow, the RACK stack doubles a 16-bit allocation counter. Repeated doublings caused