2026

Xerial snappy-java before 1.1.10.9 contains an unbounded memory allocation vulnerability that allows attackers to exhaus

Open5GS through 2.8.0 contains a reachable assertion vulnerability in mme_gn_handle_sgsn_context_request() that allows r

Xerial snappy-java from 1.1.7.4 before 1.1.10.10 contains a double release vulnerability in SnappyFramedInputStream that

Open5GS through 2.8.0 contains a heap out-of-bounds read vulnerability in ogs_pfcp_parse_dropped_dl_traffic_threshold()

Open5GS through 2.8.0 contains a heap out-of-bounds read vulnerability in ogs_pfcp_parse_volume_measurement() in lib/pfc

HortusFox (hortusfox-web) through 6.3 contains an unrestricted file upload vulnerability in PlantAttachmentModel that al

HortusFox (hortusfox-web) before 6.2 contains an SQL injection vulnerability that allows API token holders to inject SQL

Nginx UI is a web user interface for the Nginx web server. From 2.3.8 until 2.5.0, an authenticated administrator with a

Nginx UI is a web user interface for the Nginx web server. From 2.5.0 until 2.6.0, the node-signature authentication pat

Nginx UI is a web user interface for the Nginx web server. From 2.2.0 until 2.6.0, the bundled reverse proxy does not pr

The published Docker image for openPDC includes a fixed administrative credential with no forced change on first use. An

A missing authorization check in the illumos IP management daemon (ipmgmtd) allows a local user to change the persistent

A missing authorization check in the illumos zones statistics daemon (zonestatd) allows a local user in any zone to disr

A stack-based buffer overflow in the illumos reparse point daemon (reparsed) allows a local user to crash the daemon. ge

A NULL pointer dereference in the illumos Network Auto-Magic daemon (nwamd) allows a local user to crash the daemon. nwa

A double free in the IP management daemon (ipmgmtd) of OmniOS and SmartOS allows a local user to crash the daemon. When

A missing release of resources in the illumos name service cache daemon (nscd) allows a local user to exhaust kernel mem

KodExplorer before 4.55 contains a path traversal vulnerability in the unzip_pre_name() function within app/function/hel

A reachable assertion in the illumos bhyve instruction emulator allows a guest to panic the host. When emulating a REP-p

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SpabRice Pond pond

Deserialization of Untrusted Data vulnerability in BuddhaThemes ColorFolio colorit allows Object Injection.This issue af

Deserialization of Untrusted Data vulnerability in BuddhaThemes Neo | Barber Shop WordPress Theme neocut allows Object I

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeREX Education

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TMT Machinery Indu

The STTP-based data publisher on openPDC accepts network connections without authentication in its default configuration

Cloudron 9.1.7 and 9.2 contain a stored cross-site scripting (XSS) vulnerability in the Branding Footer feature. An auth

Cross-Site Request Forgery (CSRF) vulnerability in MIGHTYminnow Dashboard Notes dashboard-notes allows Cross Site Reques

A flaw was found in libhangul. When parsing Hanja dictionary files, the library fails to verify that an entry contains a

ProcessMaker is an open source workflow management software suite. Prior to 2026.14.3, the `GET /api/1.0/tasks` endpoint

Crux Agent from 1.9.0 before 2.0.3 uses the full SKA bilocation key as the WireGuard preshared key. When a peering sessi

Before 4.92.0, Docker Desktop for Windows did not verify the signature of a package supplied to Docker Desktop Installer

The internal data publisher on openPDC accepts network connections without authentication in its default configuration.

A component loading mechanism in openPDC and openHistorian will construct and run any specified type, which may be an in

A Modbus connection feature on openPDC accepts a caller-specified destination address and port with no restriction on wh

A service console interface on openPDC and openHistorian deserializes a client-supplied data structure. On systems using

The Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not safely calculate the size of an

The Affinity by Canva app for macOS before 3.3.1 (October 2026 release) did not perform adequate bounds checking when ge

The Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not validate image dimensions agains

The Affinity by Canva app before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing Affi

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Designthemes Whist

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bracketweb Voldor

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bracketweb Ogency

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bracketweb Treck t

Misuse and misconfiguration in Bluetooth communication in SwitchBot Door Lock Series allows an attacker to bypass the el

Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. Prest

Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. OpenC

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFunnels Team WPF

Missing Authorization vulnerability in bPlugins Before After Image Comparison – Image comparison for WP before-after-ima