2026

The Sierra Wireless HL78xx modem GNSS driver (drivers/modem/hl78xx/, later drivers/modem/vendor_standalone/hl78xx/) embe

EspoCRM before 10.0.4 is vulnerable to server-side request forgery. HostCheck::ipAddressIsNotInternal(), which validates

Snipe-IT's predefined kit checkout path does not enforce Full Multiple Company Support (FMCS) tenant isolation on the ch

In OpenPanel through 2.3.0, the data importer fetches a caller-supplied URL with plain fetch instead of the project's ex

Renovate is a dependency update automation tool. In versions before 44.3.1 (and Mend Renovate CE/EE images before 15.4.0

Traefik is an HTTP reverse proxy and load balancer. In versions >= v2.8.2 through <= v2.11.55 and >= v3.0.0 through <= v

AVideo through revision c3edcc274c389816d434acadac07ee78eaf330c1 (master, 2026-08-23) incompletely sanitizes sensitive u

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 (master, 2026-08-23) contains a cross-site request f

Capgo fails to clean up channel permission overrides when a user's last organization role binding is deleted, leaving st

A security vulnerability has been detected in proma-ai Proma up to 0.19.37. Affected is the function resolveTargetPath o

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. St

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Ankaref Innovation

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Ankaref Innovation

Observable response discrepancy vulnerability in DernekPlus Website Template allows Account Footprinting. This issue af

cookies is a Node.js library for reading and writing HTTP cookies, used by Koa via ctx.cookies. In versions before 0.9.2

Some Hikvision intercom products utilize an immutable factory value which should be obtained from local network or physi

Some Wi-Fi series camera products have insufficient permission validation on certain interfaces, allowing authenticated

A flaw was found in Evolution. A remote attacker can exploit this vulnerability by sending a specially crafted HTML emai

A flaw was found in PCS (Pacemaker Configuration System). A local attacker with membership in the 'haclient' group can e

The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Slider field in User Profi

The Aruba HiSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Content in all ve

GeoVision GV-LPC2211 V1.13 fails to restrict the filename supplied to BKDownloadLink.cgi, allowing a remote user with va

GeoVision GV-LPC2211 V1.13 fails to limit repeated User elements in ONVIF SetUser requests, allowing an authenticated ad

GeoVision GV-LPC2211 V1.13 fails to limit repeated User elements in ONVIF CreateUsers requests, allowing an authenticate

GeoVision GV-LPC2211 V1.13 fails to limit repeated Username elements in ONVIF DeleteUsers requests, allowing an authenti

GeoVision GV-LPC2211 V1.13 copies an oversized ONVIF SetUser password into a fixed stack field, allowing an authenticate

GeoVision GV-LPC2211 V1.13 copies oversized ONVIF CreateUsers username or password values into fixed stack fields, allow

GeoVision GV-LPC2211 V1.13 allows a Guest user to enter SSVR firmware-upgrade mode and disrupt live services before any

GeoVision GV-LPC2211 V1.13 allows a Guest user to retrieve persistent device configuration containing plaintext administ

GeoVision GV-LPC2211 V1.13 contains an authenticated stack buffer overflow in SSVR fragment reassembly that allows a val

A flaw was found in crun. After pivot_root, reopening /dev/null for stdio can follow a symlink and attach a host file to

A flaw was found in crun. When the container configuration does not give /dev a dedicated mount, terminal setup can redi

An issue was discovered in Bosch Sensortec COINES_SDK versions 2.0 through 2.11.  The host streaming API function {{c

An out-of-bounds read vulnerability was discovered in the Bosch BME690 SensorAPI (C-driver) in version v1.0.3 and prior,

A flaw was found in the Device Authorization Grant flow of Keycloak, an identity and access management solution. The iss

A flaw was found in the skupper-router component of Red Hat Service Interconnect, which is used to provide secure commun

An authorization bypass vulnerability exists in SHIRASAGI through a user-controlled key, which may allow an unauthorized

A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an attacker to execute an arbitrary script in

The Notiqoo WordPress plugin before 1.4.14 does not have capability checks on several of its AJAX actions and builds th

The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Reflect

An authenticated client could attach a consumer with a selector containing crafted wildcard usage that results in excess

When the broker is processing message-based management requests, sent by an authenticated messaging client that is autho

The Easy Google Fonts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the control_selectors meta f

The Advanced Contact form 7 DB plugin for WordPress is vulnerable to authorization bypass in all versions up to, and inc

The WP BackItUp Community Edition plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and i

The Builderall Cheetah For Wp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing c

The Builderall for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Photo Module 'attribu

The Builderall for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'bg_video_service_url

The Ninja Forms - Scheduled Exports plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API Param

BurgerEditor 3.2.0 through 3.4.0 contains an issue with unrestricted upload of file with dangerous type. If this vulnera