2026

In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, the integrity check applied to t

In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, a time-of-check time-of-use (TOC

In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, front-end request desynchronizat

In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, HTTP request smuggling is possib

A vulnerability has been found in django-haystack up to 3.3.0. Affected is the function _to_python of the file haystack/

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document cou

URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information c

LibreOffice can link to audio and video files from a document, and on Linux it plays them with GStreamer. A linked media

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A link of the

LibreOffice Calc can link a cell range to an external csv data source, and the link is saved in the document. Such a lin

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. Through such a

Missing Authorization vulnerability in WP SYNTEX Polylang polylang allows Retrieve Embedded Sensitive Data.This issue af

Heym before v0.0.112 contains a token leakage vulnerability in build_public_base_url() that allows unauthenticated attac

A vulnerability was detected in Casdoor up to 3.161.1. Affected is the function ApiFilter of the file routers/authz_filt

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Arraytics WP Event Solution

Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Confi

Missing Authorization vulnerability in WP ManageNinja LLC Fluent Forms Pro Add On Pack fluentformpro allows Exploiting I

The email media type OAuth form passes the Authorization endpoint value to window.open() without validating the URL sche

The Perl SNMP trap receiver script shipped with Zabbix does not properly neutralize the ZBXTRAP record delimiter in trap

Zabbix Server and Proxy accept the active agent heartbeat message regardless of the configured PSK or certificate authen

Host search in Frontend allows filtering by fields that are not displayed, including stored IPMI and PSK credentials. A

The Zabbix Server/Proxy has a vulnerability where binary items can crash the Server/Proxy on certain NULL byte input lea

The JavaScript preprocessing (Duktape) engine on Zabbix server has a vulnerability where a limited administrator is able

Missing Authorization vulnerability in Deepak Anand WP Dummy Content Generator wp-dummy-content-generator allows Exploit

A vulnerability was identified in feelec-yishu feelcrm-os 1.0.0. This vulnerability affects the function GroupController

A vulnerability was determined in feelec-yishu feelcrm-os 1.0.0. This affects an unknown part of the file App/Feelcrm/In

A vulnerability was found in feelec-yishu feelcrm-os 1.0.0. Affected by this issue is the function htmlspecialchars_deco

In Qt for MCUs, a Text element that displays styled text halts the device if an <img> tag in the text contains an attrib

A vulnerability has been found in feelec-yishu feelcrm-os 1.0.0. Affected by this vulnerability is the function IndexCon

A flaw has been found in feelec-yishu feelcrm-os 1.0.0. Affected is an unknown function of the file App/Feelcrm/Crm/Cont

A vulnerability was detected in Totolink A3002MU 1.0.0-B20230403.1455. This impacts the function sub_44B250 of the file

A security vulnerability has been detected in Totolink A3002MU 1.0.0-B20230403.1455. This affects an unknown function of

Incorrect Calculation vulnerability in VillaTheme CURCY woo-multi-currency allows Integer Attacks.This issue affects CUR

Missing Authorization vulnerability in Brainstorm Force Starter Templates astra-sites allows Exploiting Incorrectly Conf

The system-call verifier for i3c_do_ccc() in drivers/i3c/i3c_handlers.c validated the outer struct i3c_ccc_payload, the

The NXP GAU ADC driver (drivers/adc/adc_mcux_gau_adc.c) validated the caller-supplied sequence->buffer_size, which is ex

A weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted element is the function sub_40FCFC

A security flaw has been discovered in Shaarli up to 0.16.3. The affected element is the function MetadataController of

A vulnerability was identified in itsourcecode Online Admission System 1.0. Impacted is an unknown function of the file

A vulnerability was determined in itsourcecode Online Admission System Project 1.0. This issue affects some unknown proc

A vulnerability was detected in vgmstream up to r2117. Affected by this vulnerability is the function ps_find_padding of

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nikki Blight QR Re

Insertion of Sensitive Information Into Sent Data vulnerability in Pixelite Events Manager events-manager allows Retriev

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Unlimited Elements U

Missing Authorization vulnerability in Brandtoss WP Admin Audit wp-admin-audit allows Exploiting Incorrectly Configured

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themepoints Logo S

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in impleCode eCommerc

Missing Authorization vulnerability in WP Mailster WP Mailster wp-mailster allows Exploiting Incorrectly Configured Acce

DigitalCanion SA has discovered a vulnerability that allows remote attackers to execute arbitrary code on affected insta

This vulnerability allows remote attackers to delete sensitive files on vulnerable installations of Mitel MiVoice Office