2026

Missing authentication for critical function vulnerability exists in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*

Plaintext storage of a password issue exists in CONPROSYS nano Series . If this vulnerability is exploited, an attacker

Out-of-bounds write vulnerability exists in CONPROSYS nano Series. Receiving a specially crafted request created and sen

Cross-site scripting vulnerability exists in CONPROSYS nano Series. If this vulnerability is exploited, an arbitrary scr

Unrestricted upload of file with dangerous type issue exists in CONPROSYS TM Series. If a specially crafted file is uplo

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS TM

An exposure of information through directory listing issue exists in CONPROSYS PAC Series. Accessing a specific URL on t

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS PAC

Cross-site scripting vulnerability exists in CONPROSYS PAC Series. If this vulnerability is exploited, an arbitrary scri

An exposure of information through directory listing issue exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Cont

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS M2M

Cross-site scripting vulnerability exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. If this v

Buffer overflow vulnerability exists in Contec EC1000 series. If a remote attacker sends a specially crafted request to

Cross-site scripting vulnerability exists in Contec EC1000 series. If this vulnerability is exploited, an arbitrary scri

Buffer overflow vulnerability exists in Contec RP-WAH-SR Series. If a remote attacker sends a specially crafted request

Cross-site scripting vulnerability exists in Contec RP-WAH-SR Series. If this vulnerability is exploited, an arbitrary s

Path traversal vulnerability exists in SGA1000. If this vulnerability is exploited, arbitrary files on the server may be

Cross-site scripting vulnerability exists in SGA1000. If this vulnerability is exploited, an arbitrary script may be exe

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in SGA1000. If t

Path traversal vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is

Cross-site request forgery vulnerability exists in multiple Contec products. If a user views a specially crafted page wh

Cross-site scripting vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerabili

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Contec FX5000

In OpenStack Glance before 32.0.1, the location API does not validate destination hosts when adding an HTTP location to

The installer for Rakuten Kobo Desktop Application (Windows version) insecurely loads Dynamic Link Libraries. If there i

In Mbed TLS 3.6.x before 3.6.7 and 4.1.x before 4.1.2, the TLS 1.3 client accepts HelloRetryRequest selecting an unadver

Withsecure Atlant with Capricorn engine before 2025-01-20_02 allows a Remote Denial of Service via an out-of-bounds memo

An issue was discovered in the MassMessage extension in MediaWiki before 1.40.2. For a Special:MassMessage?uselang=x-xss

Frappe before 14.49.0 allows an XSS attack that is associated with blog pages and exception pages.

An issue was discovered in the content_consent (aka Content Consent) extension through 2.0.1 for TYPO3. It fails to veri

An issue was discovered in the direct_mail (aka Direct Mail) extension through 9.5.1 for TYPO3. The Configuration backen

An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3. The backend module allows an authenticate

An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3. It fails to check access permissions for

A vulnerability was determined in GPAC up to f1219cde. This vulnerability affects the function gf_node_changed_internal

A vulnerability was found in GPAC up to f1219cde. This affects the function gf_bt_report of the file scene_manager/loade

A vulnerability has been found in GPAC up to f1219cde. Affected by this issue is the function lsr_exec_command_list of t

Buffer overflow vulnerability in Panasonic Industry USB Driver for MINAS A5/A6 allows  attackers  to stop Windows.

Bonjour Gateway in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has an ah_bgd buffer ove

The svg_optimizer gem before 0.3.0 for Ruby performs entity expansion on untrusted documents.

A directory traversal was identified in Paessler PRTG before 23.4.88.1429 that made it possible to read local files.

The femanager extension 7 before 7.2.2 for TYPO3 has Incorrect Access Control: it lacks a check for permissions for the

A directory Traversal vulnerability in DataEase before 1.18.10 allows a remote attacker to obtain sensitive information

An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor, and Modem Exynos 9810, Exynos 9610, Ex

An issue was discovered in the ProofreadPage extension for MediaWiki through 1.39.3. It leaks information about a suppre

A flaw has been found in GPAC up to f1219cde. Affected by this vulnerability is the function gf_node_get_field_count of

A vulnerability was detected in GPAC up to f1219cde. Affected is the function gf_node_unregister of the file scenegraph/

A security vulnerability has been detected in Matthias-Wandel jhead up to 3.3. This impacts the function ProcessGpsInfo

A weakness has been identified in Matthias-Wandel jhead up to 3.3. This affects the function Get16u of the file exif.c o

An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. Special:CheckUserLog shows usernames th

HotelDruid before 3.0.6 has insufficient file upload sanitation in the backup/restore function.