2026

Dell PowerStore contains a Code Injection vulnerability. An authenticated user with limited privileges could potentially

Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could pote

Incorrect access control in the setDevReboot function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attack

Incorrect access control in the recvIndirectMeshInfo function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticate

Incorrect access control in the recvSlaveCloudCheckStatus function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthent

Incorrect access control in the freeStaClient function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attac

Incorrect access control in the meshInfoKick function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attack

Incorrect access control in the updateLanIp function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attacke

Incorrect access control in the informSyncUpgfw function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated att

Incorrect access control in the meshSlaveUpdate function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated att

Incorrect access control in the meshSlaveUpgfw function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated atta

Incorrect access control in the updateSlaveIpList function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated a

Incorrect access control in the staticInfoSend function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated atta

Incorrect access control in the delSlaveDevice function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated atta

Incorrect access control in the updatePriChannel function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated at

Incorrect access control in the sendStaticInfoToMaster function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthentica

The Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.0.

Improper Control of Generation of Code ('Code Injection') vulnerability in Klemsan Electrical Electronics Inc. KIO (Klem

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in TRtek Technologica

A privilege escalation security issue exists within FactoryTalk® Activation Manager. The security issue stems from custo

CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow an attacker to

CWE-564: SQL Injection: Hibernate vulnerability exists that could allow the injection of a malicious HQL query in the Ne

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists

A security issue exists within ControlFLASH™, where the installer grants write permissions to the "Everyone" group on a

A denial-of-service security issue exists within FactoryTalk® Historian Machine Edition.  A network adjacent attacker wh

A security issue exists within FactoryTalk® Historian Machine Edition. An attacker with low-level authentication could e

A local vulnerability in the Winlogbeat Windows installer caused runtime files to be placed in a directory writable by u

CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause denial of service of

A denial-of-service security issue exists in the affected product. The security issue stems from a crafted CIP packet be

This vulnerability exists in the ERP system due to exposure of repository information through a publicly accessible .git

This vulnerability exists in the ERP system due to improper authentication and authorization controls in the API endpoin

This vulnerability exists in the ERP system due to improper authentication controls and inadequate file type validation

Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs s

Internally found bugs present in Thunderbird 154 and Thunderbird ESR 153.1. Some of these bugs showed evidence of memory

Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs s

Internally found bugs present in Thunderbird 154. Some of these bugs showed evidence of memory corruption or another sec

Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Th

Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, T

Clickjacking issue in the DOM: Events component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunder

Denial-of-service in the PDF Viewer component. This vulnerability was fixed in Firefox 155 and Thunderbird 155.

Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunde

Other issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbir

Other issue in Firefox Focus for Android. This vulnerability was fixed in Firefox 155.

Other issue in the Profile Backup component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird

Site isolation issue in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 155, Firefox ESR

Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2

Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 155, Fire

Information disclosure in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2

Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, T

Privilege escalation in the WebDriver BiDi component. This vulnerability was fixed in Firefox 155 and Thunderbird 155.