2026

A security vulnerability in HPE NonStop DNS 9.2.3 Non Secure Version could cause a Denial of Service.

A security vulnerability in HPE NonStop TSQLFIL may cause address space corruption when a specific API is called.

The Responsive Blocks WordPress plugin before 2.3.0 does not sanitise or escape some of the values submitted with its Fo

The Tickera WordPress plugin before 3.6.0.4 does not correctly verify the integrity of incoming payment notifications, a

A flaw was found in BusyBox dpkg. The write_status_file() function does not reset a field cursor between package stanzas

The WPForms Lite WordPress plugin before 2.0.2.2 does not verify server-side that a payment was completed before accepti

A security vulnerability in HPE NonStop TSQLEXE may cause application crash via a crafted SQL query.

A security vulnerability in HPE NonStop TMF Auditread2 can cause  Denial of Service.

Vulnerability due to incorrect permissions in TSplus Remote Access shared login scripts. The autostart1.tscr files, loca

Incorrect authentication vulnerability in the TSplus Remote Access multi-factor authentication (MFA) mechanism. A remote

A vulnerability involving improper access control in the TSplus Remote Access web server that allows an unauthenticated

Missing Authorization vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Exploiting Incorrectly Configured

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Webnus Modern Even

The insights-runtime-extractor runs as a privileged DaemonSet (`hostPID: true`) that scans container processes for runti

The authentication middleware of the JTL-Shop administration backend processes the plugin safe mode toggle on the admin

The public consent endpoint of JTL-Shop accepts arbitrary consent names from unauthenticated visitors without validating

Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme Email Template Customizer for WooC

The Visma Pay for WooCommerce WordPress plugin before 1.2.2 does not verify the authenticity of payment gateway return r

Tokens of text in RDATA (of for example TXT records) under 32 bytes are not checked to stay within the space reserved fo

A HIP resource record that fills the RDATA near or at is limit, and has another dname RDATA field (a HIP Rendezvous serv

When a SVCB or HTTPS RR has filled the wire format RDATA up to the brim, another ECH parameter may overwrite the stack,

When base64 data is split up in pieces, of 3 character or less, tokens were incorrectly calculated to produce 0 bytes. T

The WPCode WordPress plugin before 2.4.0 does not correctly verify that a request is genuinely for the login screen befo

A flaw was found in GStreamer's H.266 codec parser library (libgstcodecparsers). An out-of-bounds write vulnerability ex

A flaw was found in BusyBox's dpkg-deb archive extraction. The ar archive handler flushes deferred symlinks after each a

A flaw was found in BusyBox httpd's reverse proxy feature. When the proxy is configured to forward requests matching a U

A flaw was found in gst-plugins-base. A heap buffer overflow can be triggered when processing video buffers whose attach

HPE NonStop MODULAR NSJ  contains a predictable seed vulnerability in Random Number Generation (PRNG)

HPE NonStop Middleware software has secret key handling and data deserialization vulnerability.

A security vulnerability in HPE NonStop Java JToolkit can allow command Injection and buffer overflow.

A security vulnerability in HPE NonStop Hpjmeter can cause stack and heap buffer overflow.

A flaw was found in the clevis PKCS#11 pin. The clevis-decrypt-pkcs11 script passes the PKCS#11 token PIN as a command-l

A flaw was found in the clevis PKCS#11 pin. The clevis-luks-pkcs11-askpin script writes the PKCS#11 token PIN in plainte

A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon creates AF_UNIX sockets withou

A flaw was found in the GStreamer multimedia framework's ASF muxer plugin (asfmux). When writing string metadata tags co

A vulnerability in HPE NonStop iTP WebServer can cause memory corruption and system shutdown.

A vulnerability relating to the exposure of confidential information in the customer invoicing web application, which ex

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VideoWhisper.com P

External control of assumed-Immutable web parameter issue exists in EC-CUBE plugin (for EC-CUBE 4 series) "AmazonPay Plu

During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server (with reason `HTTP_1_1_REQUIRED` or `REFU

The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to Local File Inclusi

Missing Authorization vulnerability in 10up Restricted Site Access restricted-site-access allows Exploiting Incorrectly

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Codepeople CP Mult

The Gallery Custom Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display_name (profil

The Meow Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display_name + comment' par

The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to

The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'user_name' parameter in all ve

The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to

The Record of Consent Extension for Complianz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the

An Hardcoded Cryptographic Key vulnerability existed in Trellix Agent 5.8.4 via mfecryptc.dll leads to Database Decrypti