2026

OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Corte

BLF file parser in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows possible information disclosure

ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the TIFF encoder when an invalid tiff:tile-geometry

dbt-mcp is a Model Context Protocol server for interacting with dbt. Prior to 1.17.1, DbtMCP.call_tool() in src/dbt_mcp/

A flaw was found in popt, a command-line option parsing library. An off-by-one error in the poptStuffArgs function, when

File::Rotate::Simple versions before 0.4.0 for Perl create the target of dangling symlinks when rotating files. When th

The UpdateHub management subsystem (subsys/mgmt/updatehub/updatehub.c) drives every update operation through a single fi

In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwar

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The suppor

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The suppo

NLTK 3.9.4 through 3.10.2 contains a path traversal vulnerability in CrubadanCorpusReader. _load_lang_ngrams joins the c

A vulnerability was found in xnx3 wangmarket up to 6.4. This affects an unknown function of the file /siteVar/save.do of

A security flaw has been discovered in xnx3 wangmarket up to 4.9. Affected by this issue is some unknown functionality o

A weakness has been identified in xnx3 wangmarket up to 4.9. This affects the function variableList of the file /admin/s

A vulnerability was detected in projectworlds House Rental and Property Listing 1.0. This issue affects some unknown pro

A flaw has been found in PHPGurukul Staff Leave Management System 1.0. The affected element is the function ADD_STAFF/UP

A vulnerability was found in Luxul XWR-600 up to 4.0.1. The affected element is an unknown function of the component Web

PILOS (Platform for Interactive Live-Online Seminars) is a frontend for BigBlueButton. Prior to 4.10.0, Cross-Site Reque

This issue was addressed through improved state management. This issue is fixed in iOS 18.1 and iPadOS 18.1. A user may

A weakness has been identified in technical-laohu mpay up to 1.2.4. The affected element is an unknown function of the c

HCL AION version 2 is affected by a JWT Token Expiry Too Long vulnerability. This may increase the risk of token misuse,

A vulnerability has been found in iJason-Liu Books_Manager up to 298ba736387ca37810466349af13a0fdf828e99c. This affects

A vulnerability was identified in rethinkdb up to 2.4.3. Affected by this issue is some unknown functionality of the com

A vulnerability was identified in D-Link DCS-700L 1.03.09. The affected element is the function uploadmusic of the file

A vulnerability was detected in D-Link DSL-6641K N8.TR069.20131126. Affected by this issue is the function ad_virtual_se

A vulnerability was found in D-Link DSL-6641K N8.TR069.20131126. Affected by this issue is the function doSubmitPPP of t

A vulnerability has been found in Edimax BR-6288ACL up to 1.12. Impacted is the function wiz_WISP24gmanual of the file w

A weakness has been identified in code-projects Online Student Management System 1.0. The impacted element is an unknown

A weakness has been identified in heyewei JFinalCMS 5.0.0. This affects an unknown function of the file /admin/admin/sav

A security vulnerability has been detected in ZeroWdd studentmanager up to 2151560fc0a50ec00426785ec1e01a3763b380d9. Thi

A weakness has been identified in code-projects for Plugin 1.0. This affects an unknown part of the file /Administrator/

A weakness has been identified in code-projects Online Reviewer System 1.0. Affected by this vulnerability is an unknown

An input validation issue was addressed. This issue is fixed in iOS 26.3 and iPadOS 26.3. A person with physical access

A security vulnerability has been detected in funadmin up to 7.1.0-rc4. This vulnerability affects unknown code of the f

A security flaw has been discovered in YiFang CMS up to 2.0.5. The impacted element is the function update of the file a

A weakness has been identified in YiFang CMS up to 2.0.5. This affects the function update of the file app/db/admin/D_ad

A security vulnerability has been detected in YiFang CMS up to 2.0.5. This impacts the function update of the file app/d

A vulnerability was found in itsourcecode Student Management System 1.0. The impacted element is an unknown function of

A security flaw has been discovered in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 1.2.9. The affected element is an unknown

A vulnerability was determined in a466350665 Smart-SSO up to 2.1.1. This affects the function Save of the file smart-sso

A security vulnerability has been detected in xingfuggz BaykeShop up to 1.3.20. Impacted is an unknown function of the f

A vulnerability was detected in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affected

A security vulnerability has been detected in PHPGurukul Student Record Management System up to 1.0. This vulnerability

A vulnerability was detected in PHPGurukul Student Record Management System 1.0. This issue affects some unknown process

A vulnerability was determined in Wavlink WL-WN579X3-C 231124. This vulnerability affects the function sub_401AD4 of the

Improper verification of cryptographic signature in Font Settings prior to SMR Mar-2026 Release 1 allows physical attack

A vulnerability has been found in Worksuite HR, CRM and Project Management up to 5.5.25. The affected element is an unkn

A vulnerability was identified in Tecnick TCExam 16.5.0. This impacts an unknown function of the file /admin/code/tce_ed

A security flaw has been discovered in Tecnick TCExam up to 16.6.0. Affected is the function F_xml_export_users of the f

A security flaw has been discovered in CMS Made Simple up to 2.2.21. Impacted is an unknown function of the file admin/l