2026

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.64.

rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1

rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.72.

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.49.

Traefik is an open source HTTP reverse proxy and load balancer. From 2.8.2 until 2.11.56 and 3.7.12, HTTP/3 entrypoints

Traefik is an open source HTTP reverse proxy and load balancer. Prior to 2.11.56, and from 3.0.0 until 3.7.12, a client-

Traefik is an open source HTTP reverse proxy and load balancer. Prior to 2.11.57, and 3.7.13, Traefik accepts a rootless

A missing S3 bucket ownership verification in the AWS Security Agent MCP server before 0.2.0 version might allow remote

A missing S3 bucket ownership verification in the AWS Security Agent plugin in Amazon aws-agents-for-devsecops before 1.

Dell ThinOS 10, versions prior to 2605_10. 2616, contains an Improper Neutralization of Special Elements used in an OS C

Dell ThinOS 10, versions prior to 2605_10. 2616, contains an Improper Neutralization of Special Elements used in an OS C

Dell ThinOS 10, versions prior to 2605_10.2616, contain a Download of Code Without Integrity Check vulnerability. An una

Dell ThinOS 10, versions prior to 2605_10.2616, contain a Security Version Number Mutable to Older Versions vulnerabilit

Dell ThinOS 10, versions prior to 2605_10.2616, contain a Missing Support for Integrity Check vulnerability. A high priv

Dell ThinOS 10, versions prior to 2605_10.2616, contain an Improper Neutralization of Special Elements used in a Command

Dell ThinOS 10, versions prior to 2605_10.2616, contain a Protection Mechanism Failure vulnerability. An unauthenticated

A remote, authenticated, non-admin Craft CMS Control Panel user with only the accessCp permission can execute operating

There is a storage of sensitive information in cleartext vulnerability in NI SystemLink. This vulnerability may allow an

There is an improper access control vulnerability in NI SystemLink that may allow an authenticated user with limited pri

A flaw was found in the admin backend of gvfs. The privileged gvfsd-admin daemon changes the ownership of newly created

AppFlowy-Cloud versions 0.7.2 through 0.9.64 fail to authorize callers against the workspace in the bulk publish endpoin

Flextype CMS through 1.0.0-alpha.3 accepts API authentication credentials through URL query string parameters in REST AP

Traefik is an open source HTTP reverse proxy and load balancer. From 2.11.26 until 2.11.57 and 3.7.13, Traefik forwards

Traefik is an open source HTTP reverse proxy and load balancer. From 2.11.0 until 2.11.57 and 3.7.13, the HTTP/3 entrypo

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.0 until 0.11.1, Open WebU

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.0 until 0.9.0, Open WebUI

Traefik is an open source HTTP reverse proxy and load balancer. From 3.2.0 until 3.7.13, Traefik entrypoint defenses ali

import_contacts Path Traversal in Groundhogg <= 4.7.1 versions.

Unauthenticated Broken Access Control in WP Fast Total Search <= 1.82.284 versions.

Unauthenticated Cross Site Scripting (XSS) in WPAdverts <= 2.3.3 versions.

Unauthenticated Cross Site Scripting (XSS) in WPCS <= 1.3.2 versions.

Unauthenticated Privilege Escalation in SiteSkite <= 2.1.5 versions.

Unauthenticated Sensitive Data Exposure in ZHBackup – Backup, Restore &amp; Migration <= 2.4.2 versions.

Subscriber Remote Code Execution (RCE) in RepairBuddy <= 4.1224 versions.

Subscriber Settings Change in WP-Stateless <= 4.4.1 versions.

Unauthenticated SQL Injection in Verified Reviews (Avis Vérifiés) <= 2.4.6 versions.

Missing Authorization vulnerability in WP Swings Return Refund and Exchange For WooCommerce woo-refund-and-exchange-lite

Authentication Bypass Using an Alternate Path or Channel vulnerability in WEN Solutions WP Travel wp-travel allows Passw

Unauthenticated Cross Site Scripting (XSS) in Page Visits Counter &#8211; Lite <= 1.2.3 versions.

Unauthenticated Broken Access Control in Shirt Product Designer for WooCommerce 1.0.4 versions.

Missing Authorization vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Exploiting Incorr

Subscriber Cross Site Scripting (XSS) in EventON <= 2.5.7 versions.

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Studio Wombat Advanced P

Subscriber Broken Access Control in IMPress for IDX Broker <= 3.3.0 versions.

Unauthenticated Broken Authentication in IMPress for IDX Broker <= 3.3.0 versions.

Unauthenticated Broken Access Control in Thank You Page Customizer for WooCommerce <= 1.2.2 versions.

Unauthenticated Broken Access Control in BuddyForms <= 2.9.0 versions.

Deserialization of Untrusted Data vulnerability in Marcin Wise Chat wise-chat allows Object Injection.This issue affects

Subscriber Broken Authentication in MailMunch – Grow your Email List <= 3.2.5 versions.