2026

A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiClientWindows 7.

Description Cloudflare was recently notified by external researchers of vulnerabilities in this archived repository,

Net::CIDR::Set versions before 0.23 for Perl allow memory exhaustion and malformed set ranges via unbounded IPv6 prefix

POS System developed by FitSoft has a Missing Authentication vulnerability. Unauthenticated remote attackers can directl

An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication interface allow an rem

Insufficient input sanitization in Snowflake Python API (`snowflake.core`) versions prior to 1.13.0 allowed confused-dep

The Ezoic WordPress plugin before 2.23.1 does not properly restrict access to some of its content export functionality,

The WP Directory Kit WordPress plugin before 1.5.6 does not sanitise and escape a parameter before using it in a SQL sta

The WP Directory Kit WordPress plugin before 1.5.6 does not sanitise and escape a parameter before using it in a SQL sta

The Events Manager WordPress plugin before 7.4.1 does not sanitise and escape a user-controlled value before using it i

The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not perform any capability or nonce check on one of its

The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not validate a client-controlled value used to build a f

The Form Maker by 10Web WordPress plugin before 1.15.45 does not properly parameterize a user-controlled value that is

The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.1 does not validate one of its Podcast Episode

The Total Upkeep WordPress plugin before 1.17.3 does not adequately protect the secret that authorizes its backup-restor

The Import WP WordPress plugin before 2.14.23 does not perform any authorization check on one of its export-file downlo

The KiviCare WordPress plugin before 4.5.2 does not properly sanitise and escape user-supplied parameters before using

The Eventin WordPress plugin before 4.1.20 does not perform an authorization check on its waiting-list registration han

Velociraptor allows scheduling new collections via VQL queries in notebooks. For a user to schedule a new collection, th

The userspace syscall verifiers z_vrfy_zsock_sendmsg() and z_vrfy_zsock_recvmsg() in subsys/net/lib/sockets/sockets.c sn

The Social Login, Passkeys, Magic Link & Email OTP – Passwordless Login by VentraConnect plugin for WordPress is vulnera

A flaw was found in the multicloud-operators-channel component of Red Hat Advanced Cluster Management (RHACM). This vuln

A flaw was found in multicloud-operators-subscription. A privileged user, specifically a namespace administrator capable

In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution.

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: clamp v9 CRIU control stack checkpoint

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate vmw_surface_metadata::array_si

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Prevent shader BO mappings from becoming w

In the Linux kernel, the following vulnerability has been resolved: btrfs: don't propagate EXTENT_FLAG_LOGGING to split

In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix heap overflow when reading module E

In the Linux kernel, the following vulnerability has been resolved: libceph: bound get_version reply decode to front le

In the Linux kernel, the following vulnerability has been resolved: vxlan: require CAP_NET_ADMIN in the device netns fo

calibre is an e-book manager. Prior to 9.12.0, the calibre Content Server endpoint POST /book-update-annotations/{librar

Kestra is an open-source, event-driven orchestration platform. Prior to 2.0.0, Kestra's core/src/main/java/io/kestra/cor

Kestra is an open-source, event-driven orchestration platform. Prior to 2.0.0-rc6, Kestra's worker/src/main/java/io/kest

The Mira Android companion app v4.5.15.4 identifies the paired Mira hormone analyzer by performing a substring match aga

In the Mira hormone monitor device firmware v1.7.1.47 build 01070147, a remote unauthenticated attacker within BLE range

libgit2 versions before 1.8.7 and 1.9.0 before 1.9.7 built with the libssh2 SSH backend (USE_SSH=libssh2) contain a shel

cJSON versions 1.5.0 through 1.7.19 contain an incorrectly-resolved name or reference vulnerability in the decode_pointe

Use after free in Blink in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code ins

Use after free in HTML in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code insi

Use after free in Extensions in Google Chrome prior to 151.0.7922.137 allowed an attacker who convinced a user to instal

Use after free in TabStrip in Google Chrome on Mac prior to 151.0.7922.137 allowed a remote attacker who had compromised

Use after free in V8 in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside

An insufficient certificate validation in a privileged communication workflow, was identified in a GMS application 9.5.1

Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allows

Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allows

Malcolm is a network traffic analysis tool suite. Prior to version 26.07.0, role-based access control enforced in the Ng

Malcolm is a network traffic analysis tool suite. The file-upload component (FilePond PHP backend) accepts uploads at `P

TypeBot is a chatbot builder tool. Versions prior to 3.17.0 expose a deprecated public upload endpoint at `GET /api/v1/t

A flaw was found in FreeIPA. The trust-fetch-domains command is gated by a read-only permission on the trust object rath