2026

A path traversal in My Text Editor v1.6.2 allows attackers to cause a Denial of Service (DoS) via writing files to the i

Axigen Mail Server before 10.5.57 contains multiple stored Cross-Site Scripting (XSS) vulnerabilities in the WebAdmin in

Axigen Mail Server before 10.5.57 allows stored Cross-Site Scripting (XSS) in the handling of the timeFormat account pre

PHP-Fusion 9.03.50 panels.php is vulnerable to cross-site scripting (XSS) via the 'panel_content' POST parameter. The ap

Edimax EW-7438RPn-v3 Mini 1.27 allows unauthenticated attackers to access the /wizard_reboot.asp page in unsetup mode, w

Edimax EW-7438RPn-v3 Mini 1.27 is vulnerable to cross-site request forgery (CSRF) that can lead to command execution. An

P5 FNIP-8x16A/FNIP-4xSH versions 1.0.20 and 1.0.11 suffer from a stored cross-site scripting vulnerability. Input passed

HRSALE 1.1.8 contains a cross-site request forgery vulnerability that allows attackers to add unauthorized administrativ

Exagate SYSGuard 6001 contains a cross-site request forgery vulnerability that allows attackers to create unauthorized a

ProficySCADA for iOS 5.0.25920 contains a denial of service vulnerability that allows attackers to crash the application

10-Strike Network Inventory Explorer 8.54 contains a structured exception handler buffer overflow vulnerability that all

Everest, later referred to as AIDA64, 5.50.2100 contains a denial of service vulnerability that allows local attackers t

Odin Secure FTP Expert 7.6.3 contains a local denial of service vulnerability that allows attackers to crash the applica

10-Strike Network Inventory Explorer 9.03 contains a buffer overflow vulnerability in the file import functionality that

PHP-Fusion 9.03.50 contains a remote code execution vulnerability in the 'add_panel_form()' function that allows attacke

ZOC Terminal 7.25.5 contains a denial of service vulnerability in the private key file input field that allows attackers

UltraVNC Viewer 1.2.4.0 contains a denial of service vulnerability that allows attackers to crash the application by man

UltraVNC Launcher 1.2.4.0 contains a denial of service vulnerability in the Repeater Host configuration field that allow

UltraVNC Launcher 1.2.4.0 contains a denial of service vulnerability in its password configuration properties that allow

Nsauditor Product Key Explorer 4.2.2.0 contains a denial of service vulnerability that allows local attackers to crash t

Nsauditor 3.2.0.0 contains a denial of service vulnerability in the registration name input field that allows attackers

Memu Play 7.1.3 contains an insecure folder permissions vulnerability that allows low-privileged users to modify the Mem

ZOC Terminal 7.25.5 contains a script processing vulnerability that allows local attackers to crash the application by l

Dnsmasq-utils 2.79-1 contains a buffer overflow vulnerability in the dhcp_release utility that allows attackers to cause

Free Desktop Clock 3.0 contains a stack overflow vulnerability in the Time Zones display name input that allows attacker

Edimax EW-7438RPn-v3 Mini 1.27 contains a remote code execution vulnerability that allows unauthenticated attackers to e

B64dec 1.1.2 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting Str

Pinger 1.0 contains a remote code execution vulnerability that allows attackers to inject shell commands through the pin

CODE::BLOCKS 16.01 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriti

Rubo DICOM Viewer 2.0 contains a buffer overflow vulnerability in the DICOM server name input field that allows attacker

Nsauditor 3.0.28 and 3.2.1.0 contains a buffer overflow vulnerability in the DNS Lookup tool that allows attackers to ex

P5 FNIP-8x16A FNIP-4xSH 1.0.20 contains a cross-site request forgery vulnerability that allows attackers to perform admi

jizhiCMS 1.6.7 contains a file download vulnerability in the admin plugins update endpoint that allows authenticated adm

Axigen Mail Server before 10.5.57 and 10.6.x before 10.6.26 contains a Cross-Site Request Forgery (CSRF) vulnerability i

Axigen Mail Server before 10.5.57 contains an improper access control vulnerability in the WebAdmin interface. A delegat

phpMyChat Plus 1.98 contains a SQL injection vulnerability in the deluser.php page through the pmc_username parameter th

The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to unauthorized access of data due

Path Traversal vulnerability in Digitek ADT1100 and Digitek DT950 from PRIMION DIGITEK, S.L.U (Azkoyen Group). This vuln

IBM webMethods Integration (on prem) - Integration Server 10.15 through IS_10.15_Core_Fix2411.1 to IS_11.1_Core_Fix8 IBM

IBM App Connect Enterprise Certified Container CD: 11.2.0 through 11.6.0, 12.1.0 through 12.19.0 and 12.0 LTS: 12.0.0 th

IBM Aspera Console 3.4.0 through 3.4.8 is vulnerable to SQL injection. A remote attacker could send specially crafted SQ

In Quick.Cart user passwords are stored in plaintext form. An attacker with high privileges can display users' password

Quick.Cart allows a user's session identifier to be set before authentication. The value of this session ID stays the sa

Improper access control in the TeamViewer Full and Host clients (Windows, macOS, Linux) prior version 15.74.5 allows an

YugabyteDB Anywhere displays LDAP bind passwords configured via gflags in cleartext within the web UI. An authenticated

A vulnerability was identified in iomad up to 5.0. Affected is an unknown function of the component Company Admin Block.

The Peter's Date Countdown plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `$_SERVER['PHP_S

The All In One Image Viewer Block plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up t

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Insecure Direct Object Ref

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Missing Authorization in a