2026

Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.

A vulnerability has been found in Tenda AC5 02.03.01.111_multi. Affected by this issue is some unknown functionality of

A flaw has been found in bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL up to ae783195ba7e0390d3b

The ACPT (Premium) plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.0

Unauthenticated Broken Access Control in WP Event Solution <= 4.1.25 versions.

The Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App plugin

Unauthenticated Sensitive Data Exposure in Sitemovr <= 1.0.1 versions.

Subscriber Bypass Vulnerability in WP Migration Plugin DB & Files – WP Synchro <= 1.16.1 versions.

Unauthenticated Broken Access Control in Fluent Affiliate Pro <= 1.6.4 versions.

Unauthenticated Cross Site Scripting (XSS) in Real 3D FlipBook <= 5.5 versions.

Missing Authorization vulnerability in Green Invoice Morning for WooCommerce wc-gateway-greeninvoice allows Exploiting I

Contributor Broken Access Control in WDS MCP Content Manager <= 3.10.4 versions.

Missing Authorization vulnerability in iatoai IATO MCP iato-mcp allows Exploiting Incorrectly Configured Access Control

Authorization Bypass Through User-Controlled Key vulnerability in ZWEISCHNEIDER Faktur Pro for WooCommerce woorechnung a

A security vulnerability has been detected in vllm-project vLLM up to 0.31.0. This impacts the function conv_ssm_forward

A flaw has been found in imgproxy up to 4.0.17. Affected by this vulnerability is the function sanitizeElement of the fi

Unauthenticated Broken Access Control in FluentBooking Pro < 2.5.0 versions.

A security vulnerability has been detected in uptrace up to 2.1.0-beta.8. Affected by this vulnerability is the function

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected is an unknown function. Execut

A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function o

A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the

A vulnerability was determined in PHPGurukul User Registration & Login and User Management System 3.3. The impacted elem

A security flaw has been discovered in jishenghua jshERP up to 3.5. Affected is the function updateAccountHeadAndDetail

A vulnerability was determined in chillzhuang SpringBlade up to 5.0.1. This affects an unknown function of the file blad

A vulnerability was found in chillzhuang SpringBlade up to 5.0.1. The impacted element is an unknown function of the fil

A vulnerability was found in newbee-ltd newbee-mall up to 2.7.5. This impacts an unknown function of the file /jshERP-bo

A vulnerability has been found in PickMall Lilishop up to 4.2.4. This affects an unknown function of the file /buyer/tra

A flaw has been found in PickMall Lilishop up to 4.2.4. The impacted element is an unknown function of the file /buyer/p

A vulnerability was found in yogeshojha reNgine up to 2.2.0. Affected by this vulnerability is the function subdomain_di

A vulnerability was detected in OSSRS srs up to 7.0-a1. This affects the function systemAPI.Run of the file internal/pro

A security vulnerability has been detected in TOTOLINK X6000R 9.4.0cu.652_B20230116. The impacted element is the functio

Punk versions from 0.48 before 0.55 for Perl route Extended CONNECT requests to any GET route without an Origin check in

A flaw was found in sssd. A local attacker can trigger a Denial of Service (DoS) by sending a specially crafted Pluggabl

A flaw was found in SSSD. A local attacker with access to the Name Service Switch (NSS) responder UNIX socket can trigge

A flaw was found in sssd. A local attacker can cause a Denial of Service (DoS) by sending a crafted Pluggable Authentica

A flaw was found in SSSD. An unprivileged local user can repeatedly request lookups for nonexistent entries through the

A flaw was found in SSSD. When configured with the Entra ID identity provider, input lookup names containing single quot

A flaw was found in SSSD. A local user can cause a denial of service (DoS) by disrupting system authentication services.

A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LD

A weakness has been identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c9

A flaw was found in sssd. A remote attacker can cause a denial of service (DoS) by submitting a certificate that lacks a

A flaw was found in SSSD. A local attacker can exploit this issue by sending a specially crafted request with an invalid

A flaw was found in SSSD's NFS idmap plugin. When retrieving cached user or group names, the plugin detects if an entry

A flaw was found in SSSD. An issue in the Kerberos Credential Manager (KCM) responder allows a local user to cause a Den

A flaw was found in SSSD. A use-after-free vulnerability exists in the Kerberos Credential Manager (KCM) responder durin

A flaw was found in SSSD. When configured to enforce account expiration using LDAP (Lightweight Directory Access Protoco

A flaw was found in SSSD. An unprivileged local user can repeatedly request master automount map updates through the aut

A flaw was found in SSSD. In configurations where the autofs responder service is enabled, memory allocated during succe

There is an input injection in vCast exposed network services in ViewSonic ViewBoard that allows a remote, unauthenticat

There exists an arbitrary file download in vCast APK delivery mechanism in ViewSonic ViewBoard unknown allows a remote,