2026

A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. Affected is the function delete_category of

A weakness has been identified in EyouCMS up to 1.7.9. Impacted is the function editFile of the file application/admin/l

A vulnerability was found in SourceCodester Pizzafy Ecommerce System 1.0. Affected is the function save_menu of the file

A vulnerability was determined in SourceCodester Pizzafy Ecommerce System 1.0. Affected by this vulnerability is an unkn

A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0. Affected by this vulnerabilit

A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. Affected by this issue is the function save

A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. This affects the function save_user of the file /a

Open redirect vulnerability exists in Multiple laser printers and MFPs which implement Ricoh Web Image Monitor. When acc

K12 RF5 file parser crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

A vulnerability was found in code-projects Gym Management System 1.0. Affected by this vulnerability is an unknown funct

A weakness has been identified in MacCMS Pro up to 2022.1.3. This vulnerability affects the function install of the file

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_ether: Fix race between gether_disco

In the Linux kernel, the following vulnerability has been resolved: comedi: dt2815: add hardware detection to prevent c

In the Linux kernel, the following vulnerability has been resolved: xfs: close crash window in attr dabtree inactivatio

A vulnerability was determined in itsourcecode Courier Management System 1.0. Affected is an unknown function of the fil

A vulnerability was detected in crmeb_java up to 1.3.4. This vulnerability affects unknown code of the file crmeb/crmeb-

A vulnerability was determined in AMTT Hotel Broadband Operation System 1.0. Affected is an unknown function of the file

ISPConfig 3.3.0 is vulnerable to Cross Site Scripting (XSS) via the system status webpage.

Vulnerability in the Oracle Macoron Tool product of Oracle Open Source Projects. The supported versions that is affected

In the Linux kernel, the following vulnerability has been resolved: io_uring/zcrx: fix user_ref race between scrub and

In the Linux kernel, the following vulnerability has been resolved: md/bitmap: fix GPF in write_page caused by resize r

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Flush exception handling work when

A remote denial-of-service vulnerability exists in the ZTE Cloud PC client uSmartview, which may lead to memory corrupti

i18nextify is a JavaScript library that adds website internationalization via a script tag, without source code changes.

go-git is an extensible git implementation library written in pure Go. Prior to versions 5.18.0 and 6.0.0-alpha.2, go-gi

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_rndis: Protect RNDIS options with mu

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix SError in ufshcd_rtc_work() du

In the Linux kernel, the following vulnerability has been resolved: ceph: fix i_nlink underrun during async unlink Dur

In the Linux kernel, the following vulnerability has been resolved: usb: yurex: fix race in probe The bbu member of th

In the Linux kernel, the following vulnerability has been resolved: cgroup: fix race between task migration and iterati

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: Fix race bug in nvme_poll_irqdisable() I

A vulnerability was detected in codelibs Fess up to 15.5.1. Affected by this issue is the function update of the file or

A vulnerability has been found in Tenda AC6 2.0/15.03.06.23. The affected element is an unknown function of the file /go

A security flaw has been discovered in Tenda AC6 15.03.06.49_multi_TDE01. Affected is the function fromSetWirelessRepeat

A security vulnerability has been detected in Tenda AC6 15.03.06.23. Affected by this issue is the function get_log_file

A vulnerability was identified in D-Link DNS-320 2.06B01. The impacted element is the function cgi_speed/cgi_dhcpd_lease

A security flaw has been discovered in D-Link DNS-320 2.06B01. This affects the function delete/rename/copy/move/chmod/c

A weakness has been identified in D-Link DNS-320 2.06B01. This impacts the function cgi_set_host/cgi_set_ntp/cgi_fan_con

Zen is a firefox-based browser. Prior to 1.19.12b, the ZEN Browser incorrectly truncates long hostnames in the address b

A security vulnerability has been detected in jishenghua jshERP up to 3.6. This affects the function getUserByWeixinCode

A race condition was addressed with additional validation. This issue is fixed in macOS Tahoe 26.4. An app may be able t

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 18.7.9 and iPadOS 18.7

A race condition was addressed with additional validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5

Due to a reflected cross-site scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (Applications based

SAPUI5 (Search UI) allows an unauthenticated attacker to manipulate specific URL parameters on the Search UI to include

The consul-template library before version 0.42.0 is vulnerable to a sandbox path bypass in the file template helper tha

Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.16, Improper handlin

Next.js is a React framework for building full-stack web applications. From 13.4.0 to before 15.5.16 and 16.2.5, App Rou

A race condition vulnerability in Palo Alto Networks Prisma® Browser enables a locally authenticated non-admin user to b

Inappropriate implementation in Downloads in Google Chrome on Mac prior to 148.0.7778.168 allowed an attacker who convin