2026

The cp utility in uutils coreutils is vulnerable to an information disclosure race condition. Destination files are init

A Time-of-Check to Time-of-Use (TOCTOU) vulnerability in the cp utility of uutils coreutils allows an attacker to bypass

CMS ALAYA provided by KANATA Limited contains an SQL injection vulnerability. Information stored in the database may be

An API design flaw in WebKitGTK and WPE WebKit allows untrusted web content to unexpectedly perform IP connections, DNS

In the Linux kernel, the following vulnerability has been resolved: smb: client: make use of smbdirect_socket.recv_io.c

In the Linux kernel, the following vulnerability has been resolved: i2c: designware: amdisp: Fix resume-probe race cond

In Mahara before 24.04.10 and 25 before 25.04.1, an institution administrator or institution support administrator on a

Mojic is a CLI tool to transform readable C code into an unrecognizable chaotic stream of emojis. Prior to 2.1.4, the Ci

A vulnerability was detected in JiZhiCMS up to 2.5.6. The impacted element is the function htmlspecialchars_decode of th

A vulnerability was identified in pagekit up to 1.0.18. Affected by this issue is some unknown functionality of the file

A security flaw has been discovered in AstrBotDevs AstrBot up to 4.22.1. This affects the function create_template of th

A security flaw has been discovered in CodeAstro Online Job Portal 1.0. The affected element is an unknown function of t

A vulnerability has been found in likeadmin-likeshop likeadmin_php up to 1.9.6. Affected by this issue is the function q

A vulnerability was determined in code-projects Online Lot Reservation System 1.0. This impacts an unknown function of t

A vulnerability was identified in code-projects Online Lot Reservation System 1.0. Affected is an unknown function of th

When an application is configured to use `ApplicationPidFileWriter`, a local attacker with write access to the PID file'

A flaw has been found in code-projects Online Music Site 1.0. This affects an unknown part of the file /Administrator/PH

A vulnerability was identified in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects the function dele

A security flaw has been discovered in SourceCodester Pharmacy Sales and Inventory System 1.0. This impacts the function

A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. Affected is the function delete_category of

A weakness has been identified in EyouCMS up to 1.7.9. Impacted is the function editFile of the file application/admin/l

A vulnerability was found in SourceCodester Pizzafy Ecommerce System 1.0. Affected is the function save_menu of the file

A vulnerability was determined in SourceCodester Pizzafy Ecommerce System 1.0. Affected by this vulnerability is an unkn

A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0. Affected by this vulnerabilit

A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. Affected by this issue is the function save

A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. This affects the function save_user of the file /a

Open redirect vulnerability exists in Multiple laser printers and MFPs which implement Ricoh Web Image Monitor. When acc

K12 RF5 file parser crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

A vulnerability was found in code-projects Gym Management System 1.0. Affected by this vulnerability is an unknown funct

A weakness has been identified in MacCMS Pro up to 2022.1.3. This vulnerability affects the function install of the file

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_ether: Fix race between gether_disco

In the Linux kernel, the following vulnerability has been resolved: comedi: dt2815: add hardware detection to prevent c

In the Linux kernel, the following vulnerability has been resolved: xfs: close crash window in attr dabtree inactivatio

A vulnerability was determined in itsourcecode Courier Management System 1.0. Affected is an unknown function of the fil

A vulnerability was detected in crmeb_java up to 1.3.4. This vulnerability affects unknown code of the file crmeb/crmeb-

A vulnerability was determined in AMTT Hotel Broadband Operation System 1.0. Affected is an unknown function of the file

ISPConfig 3.3.0 is vulnerable to Cross Site Scripting (XSS) via the system status webpage.

Vulnerability in the Oracle Macoron Tool product of Oracle Open Source Projects. The supported versions that is affected

In the Linux kernel, the following vulnerability has been resolved: io_uring/zcrx: fix user_ref race between scrub and

In the Linux kernel, the following vulnerability has been resolved: md/bitmap: fix GPF in write_page caused by resize r

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Flush exception handling work when

A remote denial-of-service vulnerability exists in the ZTE Cloud PC client uSmartview, which may lead to memory corrupti

i18nextify is a JavaScript library that adds website internationalization via a script tag, without source code changes.

go-git is an extensible git implementation library written in pure Go. Prior to versions 5.18.0 and 6.0.0-alpha.2, go-gi

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_rndis: Protect RNDIS options with mu

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix SError in ufshcd_rtc_work() du

In the Linux kernel, the following vulnerability has been resolved: ceph: fix i_nlink underrun during async unlink Dur

In the Linux kernel, the following vulnerability has been resolved: usb: yurex: fix race in probe The bbu member of th

In the Linux kernel, the following vulnerability has been resolved: cgroup: fix race between task migration and iterati

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: Fix race bug in nvme_poll_irqdisable() I