2026

A vulnerability was detected in codelibs Fess up to 15.5.1. Affected by this issue is the function update of the file or

A vulnerability has been found in Tenda AC6 2.0/15.03.06.23. The affected element is an unknown function of the file /go

A security flaw has been discovered in Tenda AC6 15.03.06.49_multi_TDE01. Affected is the function fromSetWirelessRepeat

A security vulnerability has been detected in Tenda AC6 15.03.06.23. Affected by this issue is the function get_log_file

A vulnerability was identified in D-Link DNS-320 2.06B01. The impacted element is the function cgi_speed/cgi_dhcpd_lease

A security flaw has been discovered in D-Link DNS-320 2.06B01. This affects the function delete/rename/copy/move/chmod/c

A weakness has been identified in D-Link DNS-320 2.06B01. This impacts the function cgi_set_host/cgi_set_ntp/cgi_fan_con

Zen is a firefox-based browser. Prior to 1.19.12b, the ZEN Browser incorrectly truncates long hostnames in the address b

A security vulnerability has been detected in jishenghua jshERP up to 3.6. This affects the function getUserByWeixinCode

A race condition was addressed with additional validation. This issue is fixed in macOS Tahoe 26.4. An app may be able t

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 18.7.9 and iPadOS 18.7

A race condition was addressed with additional validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5

Due to a reflected cross-site scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (Applications based

SAPUI5 (Search UI) allows an unauthenticated attacker to manipulate specific URL parameters on the Search UI to include

The consul-template library before version 0.42.0 is vulnerable to a sandbox path bypass in the file template helper tha

Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.16, Improper handlin

Next.js is a React framework for building full-stack web applications. From 13.4.0 to before 15.5.16 and 16.2.5, App Rou

A race condition vulnerability in Palo Alto Networks Prisma® Browser enables a locally authenticated non-admin user to b

Inappropriate implementation in Downloads in Google Chrome on Mac prior to 148.0.7778.168 allowed an attacker who convin

python-utcp is the python implementation of UTCP. Prior to 1.1.3, the utcp-http plugin is vulnerable to a blind Server-S

The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers. Prior to 1.7.6, the

A security flaw has been discovered in Dataease 2.10.20. Impacted is the function SqlparserUtils.transFilter of the file

A weakness has been identified in linlinjava litemall up to 1.8.0. Affected is an unknown function of the component Admi

A security vulnerability has been detected in linlinjava litemall up to 1.8.0. Affected by this vulnerability is the fun

NetBSD prior to commit ec8451e contains a race condition vulnerability in cryptodev_op() within the opencrypto subsystem

A vulnerability in the SSL certificate handling of Cisco ThousandEyes Virtual Appliance could allow an authenticated, re

ArcGIS Server contains an input validation weakness in the login redirection workflow. An Authenticated attacker could e

A security flaw has been discovered in Edimax BR-6675nD 1.12. Impacted is the function mp of the file /goform/mp of the

A vulnerability was detected in SourceCodester Simple POS and Inventory System 1.0. This issue affects the function dele

A vulnerability has been found in SourceCodester Simple POS and Inventory System 1.0. The affected element is an unknown

A vulnerability has been found in YunaiV yudao-cloud 2026.03. This affects the function IotDataSinkHttpConfig of the fil

NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where a user could cause a race condition b

Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.2.1, the Image directive plugin validates the

A vulnerability was identified in QianFox FoxCMS up to 1.2.6. This affects the function Edit of the file Admin.php. The

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix race condition when checking rpm

In the Linux kernel, the following vulnerability has been resolved: xfrm: fix ip_rt_bug race in icmp_route_lookup rever

In the Linux kernel, the following vulnerability has been resolved: bpf: Require frozen map for calculating map hash C

In the Linux kernel, the following vulnerability has been resolved: hwrng: core - use RCU and work_struct to fix race c

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: fix damos_walk() vs kdamond_fn() exi

In the Linux kernel, the following vulnerability has been resolved: mm: fix deferred split queue races during migration

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: fix damon_call() vs kdamond_fn() exi

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Facebook Facebook for WooCommerce allows Phishing.

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix btrfs_ioctl_space_info() slot_count TOCT

In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: fix kthread lifetime race between self-e

typescript-utcp is a typescript implementation of UTCP. Prior to 1.1.2, the @utcp/http package is vulnerable to a blind

A vulnerability was found in macrozheng mall up to 1.0.3. This affects an unknown function of the file /admin/update/ of

A vulnerability was found in Bdtask Multi-Store Inventory Management System 1.0. The impacted element is the function ac

A vulnerability has been found in code-projects Online Music Site 1.0. This affects an unknown part of the file /Adminis

A vulnerability was found in SourceCodester Water Billing Management System 1.0. Impacted is an unknown function of the

A vulnerability was determined in SourceCodester Pharmacy Sales and Inventory System up to 1.0. This issue affects the f