2026

A vulnerability in the iDTM FDI allows an attacker with elevated privileges and access to the host system to enable the

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.9 does not verify produc

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.9 does not verify order

The Academy LMS WordPress plugin before 3.8.3 does not verify course enrollment or lesson publication status when return

The Clearfy Cache WordPress plugin before 2.4.3 does not restrict the classes allowed when unserializing settings-impor

The ProfileGrid WordPress plugin before 6.0.0.0 does not perform authorization checks when listing a group's pending me

The Contest Gallery WordPress plugin before 30.0.7 does not perform per-object capability or nonce checks in one of its

The Simple Membership WordPress plugin before 4.7.8 does not sanitise a subscriber name value received from an unauthent

The Blog Floating Button WordPress plugin through 1.4.20 does not sanitize or escape the visitor User-Agent header, whic

The GEO my WP WordPress plugin before 4.5.5.3 does not perform any ownership or capability check on two of its logged-in

The Simply Schedule Appointments WordPress plugin before 1.6.12.11 does not perform a capability check on an administrat

The SVG Support WordPress plugin before 2.5.17 does not apply its SVG sanitisation to uploaded files using the .svgz ext

The Import and export users and customers WordPress plugin before 2.4.3 does not restrict the path of a file it reads an

A flaw was found in GIMP. A remote attacker could exploit this by tricking a user into opening a specially crafted PAA (

A flaw was found in GIMP's file-png plugin. A remote attacker can exploit this by crafting a malicious Animated Portable

A vulnerability was detected in GL.iNet MT3000, MT6000, BE9300, BE3600, MT3600BE, E5800, BE6500, MT5000, X3000, XE3000 a

A security vulnerability has been detected in GL.iNet E5800, E750, X2000, X3000, XE3000 and XE300 up to 20260707. Impact

A weakness has been identified in mz-automation libiec61850 up to 1.6.1. This issue affects the function checkDataSetAcc

In Bouncy Castle for Java before 1.85, RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path. This issu

In Bouncy Castle for Java before 1.85, BCFKS keystore load honours unbounded KDF cost from untrusted file. This issue al

In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local es

In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation

In geniezone, there is a possible out of bounds read due to a missing bounds check. This could lead to local information

In wifi, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disc

In wifi, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of servi

In Audio HAL, there is a possible system becoming unresponsive due to a race condition. This could lead to local denial

In med, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local denial of ser

In ccci, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of servic

In display, there is a possible information disclosure due to an integer overflow. This could lead to local information

In display, there is a possible information disclosure due to a missing bounds check. This could lead to local informati

In imgsensor, there is a possible application crash due to incorrect error handling. This could lead to local escalation

In HFRP, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p

In TFA, there is a possible information disclosure due to a missing permission check. This could lead to local informati

In wlan STA FW, there is a possible system becoming unresponsive due to logging. This could lead to remote (proximal/adj

In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation

In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local denial of

In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local denial of

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o

In ccci, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of servic

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o

In display, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privileg

In TFA, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of servic

In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service

In Telephony, there is a possible information disclosure due to a missing permission check. This could lead to local inf

In trusted_mem, there is a possible escalation of privilege due to improper input validation. This could lead to local e

In apusys, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation of

In apusys, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalatio

In sec boot, there is a possible escalation of privilege due to a heap buffer overflow. This could lead to local escalat

In hevc decoder, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalatio