2026

The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is

Tanium addressed an arbitrary file deletion vulnerability in end-user-cx.

Tanium addressed an arbitrary file deletion vulnerability in Tanium EUSS.

Tanium addressed a local privilege escalation vulnerability in Patch Endpoint Tools.

The WCFM Membership – WooCommerce Memberships for Multivendor Marketplace plugin for WordPress is vulnerable to Insecure

Cube is a semantic layer for building data applications. From 0.27.19 to before 1.5.13, 1.4.2, and 1.0.14, it is possibl

Cube is a semantic layer for building data applications. From 1.1.17 to before 1.5.13 and 1.4.2, it is possible to make

FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Prior to 1.2.11, there is a flaw in the path s

FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. From 1.2.8 through version 1.2.10, an authori

FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. From 1.2.8 through 1.2.10, an authentication b

go-git is a highly extensible git implementation library written in pure Go. Prior to 5.16.5, a vulnerability was discov

vscode-spell-checker is a basic spell checker that works well with code and documents. Prior to v4.5.4, DocumentSettings

FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. A path traversal vulnerability in FUXA allows

FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. An insecure default configuration in FUXA allo

FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Prior to 1.2.10, an authentication bypass vuln

Tanium addressed a local privilege escalation vulnerability in Patch Endpoint Tools.

Tanium addressed an arbitrary file deletion vulnerability in End-User Notifications Endpoint Tools.

SumatraPDF is a multi-format reader for Windows. In 3.5.0 through 3.5.2, SumatraPDF's update mechanism disables TLS host

PowerDocu contains a Windows GUI executable to perform technical documentations. Prior to 2.4.0, PowerDocu contains a cr

my little forum is a PHP and MySQL based internet forum that displays the messages in classical threaded view. Prior to

SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, a heap out-of-bounds read vulnerability exists in

unity-cli is a command line utility for the Unity Game Engine. Prior to 1.8.2 , the sign-package command in @rage-agains

Adminer is open-source database management software. Adminer v5.4.1 and earlier has a version check mechanism where admi

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, previ

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, previ

PolarLearn is a free and open-source learning program. In 0-PRERELEASE-16 and earlier, the group chat WebSocket at wss:/

SandboxJS is a JavaScript sandboxing library. Prior to 0.8.31, a sandbox escape vulnerability allows sandboxed code to m

SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, the PDF reader allows execution of a malicious bi

PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, The admin authorizatio

PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, User-controlled query

PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, The application logs h

PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the application enable

PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the application derive

Hollo is a federated single-user microblogging software designed to be federated through ActivityPub. Prior to 0.6.20 an

ZAI Shell is an autonomous SysOps agent designed to navigate, repair, and secure complex environments. Prior to 9.0.3, t

Tanium addressed an uncontrolled resource consumption vulnerability in Tanium Server.

Tanium addressed a local privilege escalation vulnerability in Tanium Server.

Tanium addressed a local privilege escalation vulnerability in Tanium Module Server.

FroshAdminer is the Adminer plugin for Shopware Platform. Prior to 2.2.1, the Adminer route (/admin/adminer) was accessi

PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the backend/src/routes

PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the backend/src/routes

PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the code evaluation en

PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the GET /api/students/

Sliver is a command and control framework that uses a custom Wireguard netstack. Prior to 1.7.0, the DNS C2 listener acc

Faraday is an HTTP client library abstraction layer that provides a common interface over many adapters. Prior to 2.14.1

Super-linter is a combination of multiple linters to run as a GitHub Action or standalone. From 6.0.0 to 8.3.0, the Supe

captive browser, a dedicated Chrome instance to log into captive portals without messing with DNS settings. In 25.05 and

Axios is a promise based HTTP client for the browser and Node.js. Prior to versions 0.30.3 and 1.13.5, the mergeConfig f

LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. The LangSmith SDK's distributed tracing

A security vulnerability has been detected in AprilRobotics apriltag up to 3.4.5. Affected by this vulnerability is the