2026

SCM_RIGHTS file descriptor passing did not preserve FD_RESOLVE_BENEATH when a descriptor was transferred. A process cou

renameat(2) did not enforce FD_RESOLVE_BENEATH on its directory arguments. A jailed process could rename a directory re

When fdescfs(4) was mounted in a jail with the "nodup" option, opening /dev/fd/N returned a descriptor that did not inhe

The IPv6 UDP send path for unconnected sockets did not apply the jail policy of rewriting a loopback destination address

TLS 1.3 embeds the actual record type as the last non-zero byte of the decrypted payload, optionally followed by zero pa

A time-of-check time-of-use (toctou) race condition vulnerability has been reported to affect QuRouter. If exploited, th

An external control of system or configuration setting vulnerability has been reported to affect QuRouter. If a local at

A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, the

A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, the

A buffer copy without checking size of input vulnerability has been reported to affect Qsync Central. If a remote attack

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user ac

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user ac

The Mang Board WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data_type' parameter in all

The The Ocean Extra plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and inclu

The VK Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Group Block 'linkToPost' Feature in

The Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin for WordPress is vulnerable to Stored Cross-S

The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to Unauthenticated Stored Cross

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Sc

The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Stored Cross-Site Scri

The Checkout Field Manager (Checkout Manager) for WooCommerce plugin for WordPress is vulnerable to authorization bypass

The Import and export users and customers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Custom C

The Tracking Code Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'TCM_ErrorMessages' P

The Link Library plugin for WordPress is vulnerable to time-based SQL Injection via the 'link_url' parameter in all vers

A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read.

A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read.

A security vulnerability in HPE NonStop EXPAND may cause out-of-bounds memory read resulting in buffer overflow.

The PhastPress plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Stored Cross-Site

The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to Arbit

Znuny through 7.3.6 constructs a ticket-search database query by directly concatenating user-supplied input into the SQL

In Znuny through 7.3.6, an attacker can bypass specific standard login procedures and gain unauthorized access to sensit

A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read/write operations

In DragonFly BSD through 6.4.2 before 4bb22ff, the ARP input handlers arpintr() and in_arpinput() (sys/netinet/if_ether.

Wheels 1.1.8 through 4.1.1 allows SQL injection when caller-supplied quoted values are parsed again as SQL by dynamic fi

A stack-based buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption that may result in DoS.

A buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption and DoS.

Wheels CLI through 4.1.0 does not verify that the local development server answering its HTTP requests belongs to the cu

Netgate pfSense FRR package (pfSense-pkg-frr) 2.0.2_1 and source revision 2.1.2_1 contain an OS command injection vulner

Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 mishandles tokens. A token is a small placeholder string

MoviePilot through 3.1.5 contains a command injection vulnerability that allows attackers to execute arbitrary OS comman

A vulnerability in HPE NonStop QIOMON allows an out-of-bounds write that can corrupt buffer data.

A vulnerability in HPE NonStop CIPSAM allows an out-of-bounds write that can corrupt buffer data.

A vulnerability in the finger daemon of HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to c

A vulnerability in HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of

IntentKit through 2.6.3, fixed in commit 5b91da5, contains an authorization bypass vulnerability where the executor vali

A security vulnerability in HPE NonStop SNMP Trap Multiplexer may cause memory corruption

ApostropheCMS before 4.33.0 allows authentication bypass for REST API page reading, as demonstrated by a /api/v1/@apostr

Ellucian WebAdvisor 3.2 contains an unauthenticated XML External Entity (XXE) injection vulnerability that allows remote

A vulnerability was detected in ggml-org whisper.cpp up to 1.9.4. This affects the function whisper_model_load of the fi

SODOLA SL902-SWTGW124AS firmware before 200.2.12 contains a buffer overflow vulnerability that allows unauthenticated re