2026

A missing authorization vulnerability in Zyxel GS1200-5v3 firmware versions through 1.00(ACPS.2)C0, GS1200-8v3 firmware

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Mas

libyang before 5.2.6 contains a heap use-after-free write vulnerability in lyd_parser_set_data_flags that incorrectly up

Files or Directories Accessible to External Parties, Server-Side Request Forgery (SSRF) vulnerability in Apache Flink Ku

e107 is a content management system (CMS). Prior to 2.3.4, a Broken Access Control vulnerability exists in the applicati

e107 is a content management system (CMS). Prior to 2.3.5, e107 CMS does not properly enforce CSRF token validation on c

FastNetMon Community Edition through 1.2.9 contains an out-of-bounds read vulnerability in the NetFlow v9 data flowset p

FastNetMon Community Edition through 1.2.9 contains an out-of-bounds read in the NetFlow v9 options template parser. In

FastNetMon Community Edition through 1.2.9 has out-of-bounds memory access because it incorrectly parses BGP path attrib

NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could leak held driver locks. A s

NVIDIA Display Driver for Linux contains a vulnerability in the Multi-Instance GPU (MIG) partition management, where an

view_component is a framework for building reusable, testable, and encapsulated view components in Ruby on Rails. From 3

epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur. In 1.2.4 and earlier, any networ

The OpenTelemetry.Exporter.Instana exports telemetry to Instana backend. Prior to 1.1.0, the OpenTelemetry.Exporter.Inst

Starlette is a lightweight ASGI framework/toolkit. Prior to version 1.0.1, the HTTP `Host` request header was not valida

A security vulnerability has been detected in SourceCodester eDoc Doctor Appointment System 1.0. This affects an unknown

Tanium addressed a denial of service vulnerability in Tanium Server.

The Enable jQuery Migrate Helper plugin for WordPress is vulnerable to unauthorized modification of data due to a missin

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the Easy View due to imp

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getDevicegroups func

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the saveObjectFromData f

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getProjectScalings f

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getDeviceScalings fu

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getComponentScalings

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the VerifyCreateLicences

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getProjectTags funct

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getWidgetTags functi

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the alarming view due to

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the dashboard view due t

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the devices_configuratio

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the system view due to i

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the system_tag view due

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the tag view due to impr

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the user_alarmprofile vi

Insertion of Sensitive Information Into Sent Data vulnerability in Tom GenerateBlocks allows Retrieve Embedded Sensitive

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Averta Master Slid

The Xpro Elementor Addons - Pro plugin for WordPress is vulnerable to Arbitrary File Reading in all versions up to, and

Authorization Bypass Through User-Controlled Key vulnerability in WP Wham Checkout Files Upload for WooCommerce checkout

Missing Authorization vulnerability in Strategy11 Team AWP Classifieds another-wordpress-classifieds-plugin allows Explo

Improper Validation of Specified Quantity in Input vulnerability in Ads by WPQuads Ads by WPQuads quick-adsense-reloaded

Improper Validation of Specified Quantity in Input vulnerability in Ads by WPQuads Ads by WPQuads quick-adsense-reloaded

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nexcess WPComplete

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdevelop Booking

A flaw was found in Samba’s vfs_worm module. The module is intended to provide write-once, read-many (WORM) protections

IBM Cloud APM, Base Private 8.1.4 and IBM Cloud APM, Advanced Private 8.1.4 IBM Db2 for Linux, UNIX and Windows (include

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to running out of memory when executing certain q

IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to a denial-of-service attack due to uncontrolled recursion in the Integrated

IBM Db2 12.1.0 through 12.1.4 is vulnerable to authorization bypass when uploading to a remote object storage path with

IBM Guardium Data Protection 12.2.1, and 12.2.2 's add-on feature of Guardium Data Protection named "Long Term Retention

IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 t