2026

RouterOS accepts a "related" btest connection before the corresponding primary session has completed authentication. An

RouterOS does not compare the complete RSA public key when matching an SSH authentication request to an authorized user

libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to implement looping via bac

In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit i

AVideo with YPTSocket plugin enabled contains a cross-site scripting vulnerability allowing unauthenticated attackers to

Bilibili Desktop through 1.18.0 disables TLS certificate verification process-wide and executes unsigned remote JavaScri

The Nokri – Job Board WordPress Theme theme for WordPress is vulnerable to unauthorized modification of data due to a mi

Pterodactyl Panel before 1.14.1 fails to validate action-specific permissions in scheduled task creation, allowing subus

MindsDB through 26.1.0 contains a server-side request forgery vulnerability in the web crawler handler that allows unaut

Axolotl before 0.19.0 contains a remote code execution vulnerability in the multipack patch path where trust_remote_code

SQL Chat contains four unauthenticated API endpoints that accept client-supplied database connection parameters and exec

Webstudio through 0.296.0 contains an unauthenticated server-side request forgery vulnerability in the /cgi/image, /cgi/

Coolify through 4.3.17 contains an authentication bypass vulnerability in the OAuth callback handler that signs users in

The Contact Form by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via IP Address Header in

The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in all versions up to,

The HT Menu WordPress plugin before 1.2.7 does not perform any capability or object-ownership check when saving navigat

The JCH Optimize WordPress plugin before 6.0.1 does not perform a capability check on one of its authenticated AJAX acti

The Music Store WordPress plugin before 1.4.5 does not sanitise and escape user input before using it in a SQL statemen

The IPGP Visitors Origin WordPress plugin before 1.6 does not sanitise or escape user input before reflecting it back in

The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via LazyLoad Ba

The Spam protection, Honeypot, Anti-Spam by CleanTalk plugin for WordPress is vulnerable to Stored Cross-Site Scripting

The RegistrationMagic WordPress plugin before 6.0.9.9 does not verify which application a Facebook access token was iss

The Welcart e-Commerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including,

The JetFormBuilder — Dynamic Blocks Form Builder WordPress plugin before 3.6.5.2 does not perform authorisation checks w

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Stored Cross-Site S

The SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz plugin for WordPress is vulnerable to Stored

The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Post Body Field Value in all ver

The QuickCal plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Custom Field Parameters in all versio

PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursiv

The iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more plugin for WordPress is vulnerable to Stored C

The iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more plugin for WordPress is vulnerable to Stored C

In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow.

YesWiki is a wiki system written in PHP. Prior to version 4.6.6, YesWiki through the latest development branch contains

YesWiki is a wiki system written in PHP. From version 4.2.0 to before version 4.6.6, ApiController::deletePage() interpo

YesWiki is a wiki system written in PHP. Prior to version 4.6.6, YesWiki’s public Bazar entry-listing APIs are vulnerabl

YesWiki is a wiki system written in PHP. From version 4.6.2 to before version 4.6.6, the POST /api/forms/{formId}/actor/

YesWiki is a wiki system written in PHP. From version 4.6.2 to before version 4.6.6, HttpSignatureService::verifySignatu

ntop nDPI versions before 6.0 contain a heap buffer overflow vulnerability in the ndpi_json_string_escape function that

Unidata netcdf-c through 4.10.1 contains an out-of-bounds write vulnerability in NC4_HDF5_inq_attname() that copies HDF5

Laravel is a web application framework. Prior to versions 12.60.0 and 13.10.0, a CRLF injection vulnerability in Laravel

ntopng before 6.7.260717 fails to check user privileges in the pools bulk-delete endpoint, allowing authenticated non-ad

ntopng before 6.7.260717 fails to perform authorization checks in the delete endpoints and recipients REST v2 handlers.

Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a Missing Authorization vulnerability. This

In Ignition 8.1.53 and earlier, the Gateway "Create Project Role(s)" setting shipped blank, which permitted any authenti

A security vulnerability has been detected in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc.

Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a cross-site request forgery vulnerability.

An arbitrary file deletion vulnerability in the /adminapi/file/video_data_save component of CRMEB v6.0.0 allows authenti

An authenticated remote code execution (RCE) vulnerability in the admin_config.php component of seacms v13.6 allows atta

An issue in Free5GC v.4.2.2 allows a remote attacker to cause a denial of service via the UPF component

Buffer Overflow vulnerability in Open5GS v2.7.7 allows a remote attacker to cause a denial of service via the ogs_sbi_ti