2026

The vulnerability exists in BLUVOYIX due to design flaws in the email sending API. An unauthenticated remote attacker co

BlackSheep is an asynchronous web framework to build event based web applications with Python. Prior to 2.4.6, the HTTP

IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service

SOME/IP-SD protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service

Firmware update files may expose password hashes for system accounts, which could allow a remote attacker to recover cre

The Kalium 3 | Creative WordPress & WooCommerce Theme theme for WordPress is vulnerable to unauthorized email sending du

Certain requests pass the authentication token in the URL as string query parameter, making it vulnerable to theft throu

The application discloses all used components, versions and license information to unauthenticated actors, giving attack

Directory traversal vulnerability in InvoicePlane through 1.6.3 allows unauthenticated attackers to read files from the

Umbraco CMS v8.14.1 contains a server-side request forgery vulnerability that allows attackers to manipulate baseUrl par

CWE-415: Double Free vulnerability exists that could cause heap memory corruption when the end user imports a malicious

ZITADEL is an open source identity management platform. Prior to 4.9.1 and 3.4.6, a user enumeration vulnerability has b

The Vert.x Web static handler component cache can be manipulated to deny the access to static files served by the handle

b2evolution 7.2.2 contains a cross-site request forgery vulnerability that allows attackers to modify admin account deta

The Fancy Product Designer plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and includi

The Rede Itaú for WooCommerce plugin for WordPress is vulnerable to order status manipulation due to insufficient verifi

The Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit plugin for WordPress is vulnerable to unauthorized mo

The Cost Calculator Builder plugin for WordPress is vulnerable to Unauthenticated Payment Status Bypass in all versions

The Essential Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions

Nu Html Checker (validator.nu) contains a restriction bypass that allows remote attackers to make the server perform arb

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.3 and iPadOS 18.3. An app

Ubee EVW327 contains a cross-site request forgery vulnerability that allows attackers to enable remote access without us

A vulnerability has been found in Open5GS up to 2.7.6. Affected by this vulnerability is an unknown functionality of the

A vulnerability was found in Open5GS up to 2.7.6. Affected by this issue is the function sgwc_s5c_handle_create_session_

The WP Hotel Booking plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and inc

The Payment Button for PayPal plugin for WordPress is vulnerable to unauthorized order creation in all versions up to, a

The User Registration Using Contact Form 7 plugin for WordPress is vulnerable to unauthorized access of data due to a mi

The Community Events plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability

The Spin Wheel plugin for WordPress is vulnerable to client-side prize manipulation in all versions up to, and including

The CubeWP – All-in-One Dynamic Content Framework plugin for WordPress is vulnerable to Information Exposure in all vers

The PAYGENT for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and inclu

A vulnerability was determined in Open5GS up to 2.7.6. This affects the function sgwc_s11_handle_create_indirect_data_fo

A vulnerability was identified in Open5GS up to 2.7.5. This vulnerability affects the function sgwc_bearer_add of the fi

A security flaw has been discovered in Open5GS up to 2.7.5. This issue affects some unknown processing of the component

A security vulnerability has been detected in cijliu librtsp up to 2ec1a81ad65280568a0c7c16420d7c10fde13b04. The affecte

A vulnerability was detected in cijliu librtsp up to 2ec1a81ad65280568a0c7c16420d7c10fde13b04. The impacted element is t

A vulnerability was determined in raysan5 raylib up to 909f040. Affected by this vulnerability is the function GenImageF

A flaw has been found in cijliu librtsp up to 2ec1a81ad65280568a0c7c16420d7c10fde13b04. This affects the function rtsp_p

A vulnerability was identified in raysan5 raylib up to 909f040. Affected by this issue is the function LoadFontData of t

A weakness has been identified in BYVoid OpenCC up to 1.1.9. This vulnerability affects the function opencc::MaxMatchSeg

A security vulnerability has been detected in Mapnik up to 4.2.0. This issue affects the function mapnik::dbf_file::stri

A security vulnerability has been detected in Open Asset Import Library Assimp up to 6.0.2. Affected by this vulnerabili

A vulnerability was determined in Open5GS up to 2.7.6. Impacted is the function sgwc_s11_handle_downlink_data_notificati

Mailpit is an email testing tool and API for developers. Prior to version 1.28.3, Mailpit's SMTP server is vulnerable to

A vulnerability was detected in birkir prime up to 0.4.0.beta.0. This issue affects some unknown processing of the file

A flaw has been found in birkir prime up to 0.4.0.beta.0. Impacted is an unknown function of the file /graphql of the co

A vulnerability has been found in birkir prime up to 0.4.0.beta.0. The affected element is an unknown function of the fi

A vulnerability was found in birkir prime up to 0.4.0.beta.0. The impacted element is an unknown function of the file /g

A vulnerability was determined in birkir prime up to 0.4.0.beta.0. This affects an unknown function of the file /graphql

A vulnerability was identified in birkir prime up to 0.4.0.beta.0. This impacts an unknown function of the file /graphql