2026

The Cookie Consent WordPress plugin before 0.0.10 does not correctly enforce its intended administrator-only capability

The User Access Manager WordPress plugin before 2.3.15 does not apply its access restrictions to REST API requests, allo

The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not sanitise and escape a parameter before reflecting it

The WP Travel Engine WordPress plugin before 6.8.5 does not perform authorization or ownership checks when loading a ca

The Welcart e-Commerce WordPress plugin before 2.11.34 does not sanitise or escape a product field before outputting it

The Cookie Consent WordPress plugin before 0.0.10 does not correctly enforce its intended administrator-only capability

The Patterns Kit WordPress plugin through 1.0.3 does not escape a link attribute before its client-side script inserts i

The WP Crowdfunding WordPress plugin before 2.2.1 does not check the campaign-submission capability in one of its AJAX a

The WP Crowdfunding WordPress plugin before 2.2.1 does not verify order ownership before returning order details, allowi

The WP Crowdfunding WordPress plugin before 2.2.1 does not verify ownership of a campaign before allowing its update his

The KiviCare WordPress plugin before 4.5.2 does not verify that the requesting user owns the records being accessed, al

The Eventin WordPress plugin before 4.1.20 does not properly restrict access to individual order records, allowing user

The Eventin WordPress plugin before 4.1.20 does not properly restrict access to stored customer records, allowing users

The LearnPress WordPress plugin before 4.4.4 does not verify that a user is enrolled in a course before processing AI-a

The Linkable Loadable Extensions (llext) subsystem mis-handles PLT/RELA relocation entries when linking a relocatable (p

The PSA Protected Storage credential backend (subsys/net/lib/tls_credentials/tls_credentials_trusted.c) declared its cre

The Intel ALH digital-audio-interface driver function dai_alh_get_properties() in drivers/dai/intel/alh/alh.c used a cal

A security flaw has been discovered in Open5GS up to 2.7.6. Impacted is the function smf_gx_cca_cb of the component SMF

tablib prior to 3.10.0 contains a stored cross-site scripting vulnerability in the HTML export functionality that allows

Integer Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers.

Uncontrolled Resource Consumption vulnerability in Samsung Open Source rlottie allows Excessive Allocation.

A vulnerability has been found in Open5GS up to 2.7.6. Affected by this issue is the function fd_msg_sess_get of the com

A flaw has been found in Open5GS up to 2.7.1. Affected by this vulnerability is an unknown functionality of the componen

A vulnerability was detected in Open5GS up to 2.7.6. Affected is the function diam_log_func of the file lib/diameter/com

A flaw was found in the multicloud-operators-channel component. This vulnerability allows a user with specific permissio

A vulnerability was identified in Open5GS up to 2.7.1. This issue affects the function pcrf_rx_aar_cb of the file src/pc

A vulnerability was determined in Open5GS up to 2.7.1. This vulnerability affects the function mme_s6a_subscription_data

Kestra is an open-source, event-driven orchestration platform. Prior to 2.0.0-rc6, Kestra's cli/src/main/resources/appli

The Mira cloud authentication endpoints do not enforce per-account rate limiting, per-IP throttling, or account lockout

The Mira hormone monitor device firmware accepts a 0x01 write from any BLE central without authentication, causing the d

The Mira cloud API accepts the firmware version reported by the companion app as authoritative for a given device, witho

A MongoDB driver component could write sensitive configuration information, including a credential used for outbound net

When the Mira Android app opens in-app WebView content (e.g., shop redirect flows), the user's live session token is app

An authenticated command injection vulnerability was identified in GMS Command-Line Interface (CLI) 9.5.1 (Build 9510.10

Malcolm is a network traffic analysis tool suite. Prior to version 26.07.0, `safe-extract.py` protects file extraction w

Malcolm is a network traffic analysis tool suite. Prior to version 26.07.0, `safe-extract.py` extracts uploaded archives

TypeBot is a chatbot builder tool. Prior to version 3.16.0, the OpenAI "Create Transcription" action handler fetches a u

CivetWeb (commit 4a4f0c95) contains a heap and stack buffer overflow vulnerability in the read_websocket() function that

Snipe-IT before 8.6.0 contains an authorization bypass (insecure direct object reference) in the asset checkout-request

In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operat

kkFileView is a universal file online preview project based on Spring Boot. Prior to 5.0.1, the unauthenticated POST /li

kkFileView is a universal file online preview project based on Spring Boot. Prior to 5.0.1, the unauthenticated GET /add

FreeCAD is a free and open-source multiplatform 3D parametric modeler. Prior to 1.1.2, the Xerces SAX2 XMLReader constru

Django REST framework is a powerful and flexible toolkit for building Web APIs. Prior to 3.17.2, Django REST Framework's

Bash-it 3.2.0 contains a terminal escape sequence injection vulnerability in the barbuk theme's Python virtualenv prompt

A flaw was found in insights-client. The setDefault() function logs the value of every environment variable it processes

A flaw was found in insights-client. A compromised managed cluster, referred to as a 'spoke', can inject unencoded data

A flaw was found in acm-search-v2-api-rhel9. When the `getFederationConfig` function refreshes its cache, it improperly

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized

Multiple Cross-Site Scripting (XSS) vulnerabilities were identified in GMS 9.5.1 (Build 9510.1044) and earlier versions