2026

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command inj

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command inj

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command inj

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command inj

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command inj

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command inj

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a command injection

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a command injection

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a buffer overflow vu

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a buffer overflow vu

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the wps.cgi interface th

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the urlfilter function t

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the accesscontrol functi

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the dmz function that al

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the alg function that al

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the portFw function that

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the porTrigger function

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the TelnetSSH function u

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the TelnetSSH function u

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the macfilter function t

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the openvpn function tha

The InfiniteWP Client WordPress plugin before 1.13.6 does not properly verify the site-connection state and the authenti

A security flaw has been discovered in Shenzhen Aitemi M300 Wi-Fi Repeater r0-ea7890a. Impacted is the function sprintf

The FoodBoxBooker WordPress plugin before 1.0.7 does not properly validate the password reset request, allowing unauthen

The Single Sign On For TNG WordPress plugin before 2.2.0 does not properly validate a password reset request, allowing u

The Product Input Fields for WooCommerce WordPress plugin before 2.0.2 does not validate uploaded file types when its ac

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Ranger. Thi

SQL Injection vulnerability vulnerability in Apache Ranger. This issue affects . Users are recommended to upgrade to v

Privilege Escalation via URL Parameter is reported in Apache Ranger versions <= 2.8.0. Users are recommended to upgrade

Remote Code Execution via JDBC URL Injection in Apache Ranger <= 2.8.0 Users are recommended to upgrade to version 2.9.0

Remote Code Execution via Arbitrary Class Instantiation in plugin-schema-registry component in Apache Ranger <= 2.8.0. U

Remote Code Execution Vulnerability in GraalScriptEngineCreator in Apache Ranger <= 2.8.0 Users are recommended to upgra

A SQL injection vulnerability in Tencent APIJSON through 8.1.8 allows unauthenticated remote attackers to bypass per-tab

An improper path validation vulnerability in AsyncFuncAI/deepwiki-open through commit 16f35a0 allows unauthenticated rem

Multiple vulnerabilities in NASA fprime-gds through 3.4.3 allow an unauthenticated remote attacker to achieve arbitrary

An OS command injection vulnerability in duhow/xiaoai-patch through commit fb07049 allows a remote attacker to execute a

An OS command injection vulnerability in alseambusher/crontab-ui through 0.4.2 allows an unauthenticated remote attacker

An OS command injection vulnerability in alseambusher/crontab-ui through 0.4.2 allows an unauthenticated remote attacker

An unrestricted file upload vulnerability in dulldusk/phpfm through 1.8.0 allows an unauthenticated remote attacker to e

A missing authentication vulnerability in dulldusk/phpfm through 1.8.0 allows an unauthenticated remote attacker to acce

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Zyxel Networ

In the Linux kernel, the following vulnerability has been resolved: tipc: clear sock->sk on the failed-insert path in t

In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix GSO userspace truncation underflow

In the Linux kernel, the following vulnerability has been resolved: ila: reload IPv6 header after pskb_may_pull in chec

In the Linux kernel, the following vulnerability has been resolved: net: gro: fix double aggregation of flush-marked sk

In the Linux kernel, the following vulnerability has been resolved: net/x25: fix use-after-free in x25_kill_by_neigh()

In the Linux kernel, the following vulnerability has been resolved: phonet: pep: fix use-after-free in pep_get_sb() pe

In the Linux kernel, the following vulnerability has been resolved: libceph: reject zero bucket types in crush_decode

In the Linux kernel, the following vulnerability has been resolved: libceph: refresh auth->authorizer_buf{,_len} after

In the Linux kernel, the following vulnerability has been resolved: libceph: Fix multiplication overflow in decode_new_