2026

A stack-based buffer overflow vulnerability exists in protocol gateways' account management interface. The vulnerability

Improper handling of length parameter inconsistency, Uncaught exception, Inefficient Algorithmic Complexity, Memory allo

Uncontrolled Recursion vulnerability in Apache Thrift Dart and Java ME bindings. This issue affects Apache Thrift: be

Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift c_glib bindings. This issue

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow

A security flaw has been discovered in itsourcecode Online Admission System Project 1.0. The impacted element is an unkn

The WP Statistics – Simple, privacy-friendly Google Analytics alternative plugin for WordPress is vulnerable to Reflecte

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow

improper handling of exceptional conditions, Allocation of resources without limits or throttling, Uncaught exception vu

Allocation of resources without limits or throttling, Improper handling of length parameter inconsistency vulnerability

Allocation of resources without limits or throttling, Initialization of a resource with an insecure default vulnerabilit

The WPMobile.App – Android and iOS App Builder plugin for WordPress is vulnerable to authorization bypass in all version

Authorization Bypass Through User-Controlled Key vulnerability in Shahjada Download Manager allows Retrieve Embedded Sen

Authorization Bypass Through User-Controlled Key vulnerability in Monetizemore Advanced Ads allows Retrieve Embedded Sen

The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Output-Buff

The All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) plugin fo

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in HAVELSAN Inc. Sef

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow

Authorization Bypass Through User-Controlled Key vulnerability in ThimPress LearnPress allows Exploiting Incorrectly Con

Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. A LDAP server using the LDAP API (like Ap

Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. Storing a password using the bcrypt algor

Cleartext transmission of sensitive information vulnerability in Apache Directory LDAP API. A StartTLS extended opera

Deserialization of Untrusted Data vulnerability in Apache Directory LDAP API. A rogue/compromised LDAP server (or pre

Stack Overflow vulnerability in Apache Directory LDAP API. Before binding, a client can send a deeply nested search f

Memory allocation with excessive size value vulnerability in Apache Directory LDAP API. A malicious peer (or a MITM)

A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerabilit

cjbassi/gotop is vulnerable to local argument injection via process termination functionality. The process name is passe

Server-Side request forgery (SSRF) vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Server Side Request F

Improper certificate validation vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Adversary in the Middle

Missing Authorization vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Accessing Functionality Not Proper

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow

The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Autho

The Relevanssi – A Better Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content i

The JSON API Auth plugin for WordPress is vulnerable to Authentication Bypass via Cached Session Cookie Disclosure in al

The Event Tickets and Registration plugin for WordPress is vulnerable to generic SQL Injection via the 'orderby' paramet

The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via '

The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Display Name in all versions

The CMB2 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'file_list' Field Type in all versions up