2026

An authenticated, low-privileged user with access to the NetBackup Flex OS management shell could bypass the cryptograp

An authenticated, low-privileged user with access to the NetBackup Flex OS management shell could supply a specially cr

HCL BigFix Service Management is affected by an Administrative Session Concurrency vulnerability. The application allows

A flaw was found in Netty's Online Certificate Status Protocol (OCSP) Client. The client fails to verify the 'id-kp-OCSP

A flaw was found in Netty's MqttDecoder. An unauthenticated remote attacker can exploit this vulnerability by sending a

A flaw was found in Netty's `RedisArrayAggregator` component. A remote attacker can exploit this vulnerability by sendin

A flaw was found in Netty's `SmtpResponseDecoder` component. A remote attacker, acting as a malicious or man-in-the-midd

A flaw was found in io.netty/netty-codec-memcache. The Memcache binary protocol codec incorrectly reads `keyLength` and

A flaw was found in QEMU. The VAPIC setup hypercall in hw/i386/vapic.c does not validate that the writable RAM alias rem

A stored Cross-Site Scripting (XSS) vulnerability in the profile management functionality of T-Systems’ TAO 2.0 suite. A

The WP Recipe Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'notes' parameter in all v

The Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder plugin for WordPress

A flaw was found in Quarkus HTTP security. An unauthenticated attacker can exploit a discrepancy in how paths are normal

The Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress plugin for WordPress is vul

The Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder plugin for WordPress

An out-of-bounds write vulnerability exists in some of the Ethernet switches because of improper validation of the usern

The Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template

The Complianz GDPR/CCPA Cookie Consent Banner plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comm

An external control of file name or path vulnerability in Upload API in Synology DiskStation Manager (DSM) before 7.2.1-

HCL BigFix Service Management is affected by a Sensitive Information Leakage vulnerability, which could allow an unauthe

HCL BigFix Service Management is affected by a CORS Misconfiguration vulnerability due to improperly validated origin he

HCL BigFix Service Management is affected by an Improper Authentication validation vulnerability related to inadequate a

HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file validation c

An improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Sharing API in

An improper certificate validation vulnerability in Email API in Synology DiskStation Manager (DSM) before 7.2.1-69057-1

An improper restriction of excessive authentication attempts vulnerability in Auto block in Synology DiskStation Manager

A server-side request forgery (SSRF) vulnerability in PersonMail API in Synology DiskStation Manager (DSM) before 7.2.1-

An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Audio API in Synology

An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Desktop API in Synolo

An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Video API in Sy

An exposure of sensitive information through data queries vulnerability in Desktop API in Synology DiskStation Manager (

A direct request ('forced browsing') vulnerability in Wallpaper Path in Synology DiskStation Manager (DSM) before 7.2.1-

An integer overflow or wraparound vulnerability in File Operation in Synology DiskStation Manager (DSM) before 7.2.1-690

An improper neutralization of CRLF sequences ('CRLF injection') vulnerability in User API in Synology DiskStation Manage

HCL BigFix Service Management is affected by a Security Misconfiguration vulnerability, which could allow an authenticat

HCLSoftware AppScan 360° was affected by a Path Traversal vulnerability in the ASReportService component. Improper handl

An improper encoding or escaping of output vulnerability in SCGI in Synology DiskStation Manager (DSM) before 7.2.1-6905

An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in EventScheduler

An incorrect permission assignment for critical resource vulnerability in LDAP API in Synology DiskStation Manager (DSM)

An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability in Sharing API in Synology DiskStation Man

An insufficient entropy vulnerability in login logic in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-

An improper encoding or escaping of output vulnerability in Auth API in Synology DiskStation Manager (DSM) before 7.2.1-

An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Theme API in Sy

The CSS & JavaScript Toolbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, an

A flaw was found in Netty's StompSubframeDecoder component. A remote attacker can exploit this vulnerability by sending

A flaw was found in Netty's `netty-handler-ssl-ocsp` component. A remote attacker can exploit this vulnerability by prov

The Strong Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'lightbox_class' Shortcode

The ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin plugin for WordPress is vulnerable to Reflecte

The Qi Addons For Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter i

The Newsletter – Send awesome emails from WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting