2026

A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to modify

A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to corrupt

Improper handling of parameters in the AMD Secure Processor (ASP) could allow a privileged attacker to pass an arbitrary

Kimai 2 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts into

GOautodial 4.0 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject ma

WordPress Server Log Viewer 1.0 contains a persistent cross-site scripting vulnerability that allows attackers to inject

Yoast Duplicate-Post WordPress Plugin 3.2.3 contains a persistent cross-site scripting vulnerability in plugin settings

InoERP 0.7.2 contains a persistent cross-site scripting vulnerability in the comment section that allows unauthenticated

thesystem version 1.0 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious

ActiveFax Server 6.92 Build 0316 contains an unquoted service path vulnerability in the ActiveFaxServiceNT service that

Zilab Remote Console Server 3.2.9 contains an unquoted service path vulnerability that allows local attackers to potenti

Mikogo 5.2.2.150317 contains an unquoted service path vulnerability in the Mikogo-Service Windows service configuration.

WorkgroupMail 7.5.1 contains an unquoted service path vulnerability in its Windows service configuration that allows loc

BlackMoon FTP Server 3.1.2.1731 contains an unquoted service path vulnerability that allows local users to potentially e

Phraseanet 4.0.3 contains a stored cross-site scripting vulnerability that allows authenticated users to inject maliciou

A vulnerability in Plunet Plunet BusinessManager allows session hijacking, data theft, unauthorized actions on behalf of

CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause unauthorized disclo

CWE‑94: Improper Control of Generation of Code vulnerability exists that could cause execution of untrusted or unintende

The wpForo Forum plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.4.13

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in E-Kalite So

A path traversal vulnerability has been reported to affect File Station 6. If a remote attacker gains a user account, th

Missing Authentication for Critical Function, Improper Access Control vulnerability in Dinosoft Business Solutions Dinos

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, the

A path traversal vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, th

A link following vulnerability has been reported to affect several QNAP operating system versions. The remote attackers

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote

A path traversal vulnerability has been reported to affect File Station 5. If a local attacker gains an administrator ac

A path traversal vulnerability has been reported to affect File Station 5. If a local attacker gains an administrator ac

An uncontrolled resource consumption vulnerability has been reported to affect File Station 5. If a remote attacker gain

A path traversal vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, th

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains an admini

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a re

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, the

A relative path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user acc

A use of uninitialized variable vulnerability has been reported to affect several QNAP operating system versions. If a r

A weak authentication vulnerability has been reported to affect File Station 5. The remote attackers can then exploit th

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a re

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a re

A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, th

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a re

An improper neutralization of directives in statically saved code ('Static Code Injection') vulnerability has been repor

An out-of-bounds read vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account

An out-of-bounds read vulnerability has been reported to affect File Station 5. If a remote attacker gains a user accoun

A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains an admin

A path traversal vulnerability has been reported to affect File Station 5. If a remote attacker gains an administrator a

An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a r

An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a r

A use of out-of-range pointer offset vulnerability has been reported to affect Qsync Central. If a remote attacker gains

An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central. If a local attacker gains