2026

VirtualTablet Server 3.0.2 contains a denial of service vulnerability that allows attackers to crash the service by send

PHP AddressBook 9.0.0.1 contains a time-based blind SQL injection vulnerability that allows remote attackers to manipula

webERP 4.15.1 contains an unauthenticated file access vulnerability that allows remote attackers to download database ba

Fishing Reservation System 7.5 contains multiple remote SQL injection vulnerabilities in admin.php, cart.php, and calend

webTareas 2.0.p8 contains a file deletion vulnerability in the print_layout.php administration component that allows aut

i-doit Open Source CMDB 1.14.1 contains a file deletion vulnerability in the import module that allows authenticated att

Booked Scheduler 2.7.7 contains a directory traversal vulnerability in the manage_email_templates.php script that allows

Victor CMS version 1.0 contains a SQL injection vulnerability in the 'post' parameter on post.php that allows remote att

LanSend 3.2 contains a buffer overflow vulnerability in the Add Computers Wizard file import functionality that allows r

Remote Desktop Audit 2.3.0.157 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code

Victor CMS 1.0 contains an authenticated file upload vulnerability that allows administrators to upload PHP files with a

Victor CMS 1.0 contains a stored cross-site scripting vulnerability in the 'comment_author' POST parameter that allows a

CraftCMS 3 vCard Plugin 1.0.0 contains a deserialization vulnerability that allows unauthenticated attackers to execute

CloudMe 1.11.2 contains a buffer overflow vulnerability that allows remote attackers to execute arbitrary code through c

Konica Minolta FTP Utility 1.0 contains a buffer overflow vulnerability in the NLST command that allows attackers to ove

Konica Minolta FTP Utility 1.0 contains a buffer overflow vulnerability in the LIST command that allows attackers to ove

Filetto 1.0 FTP server contains a denial of service vulnerability in the FEAT command processing that allows attackers t

GoldWave 5.70 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by crafting malic

StreamRipper32 version 2.6 contains a buffer overflow vulnerability in the Station/Song Section that allows attackers to

OXID eShop versions 6.x prior to 6.3.4 contains a SQL injection vulnerability in the 'sorting' parameter that allows att

Claude Code is an agentic coding tool. Prior to version 2.0.72, due to an error in command parsing, it was possible to b

Claude Code is an agentic coding tool. Prior to version 2.0.74, due to a Bash command validation flaw in parsing ZSH clo

Claude Code is an agentic coding tool. Prior to version 1.0.111, Claude Code contained insufficient URL validation in it

Type Confusion in V8 in Google Chrome prior to 144.0.7559.132 allowed a remote attacker to potentially exploit heap corr

Heap buffer overflow in libvpx in Google Chrome prior to 144.0.7559.132 allowed a remote attacker to potentially exploit

A vulnerability was detected in bolo-blog bolo-solo up to 2.6.4. The impacted element is the function unpackFilteredZip

A flaw was found in libsoup, an HTTP client/server library. This HTTP Request Smuggling vulnerability arises from non-RF

An out-of-bounds read vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This v

A type confusion vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulner

A heap-based buffer overflow vulnerability has been identified in the Postscript interpreter in various Lexmark devices.

An untrusted search path vulnerability has been identified in the Embedded Solutions Framework in various Lexmark device

A relative path traversal vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devic

Blesta 3.x through 5.x before 5.13.3 mishandles input validation, aka CORE-5665.

Blesta 3.x through 5.x before 5.13.3 allows object injection, aka CORE-5668.

Blesta 3.x through 5.x before 5.13.3 allows object injection, aka CORE-5680.

Shenzhen Tenda AC7 firmware version V03.03.03.01_cn and prior expose account credentials in plaintext within HTTP respon

Shenzhen Tenda AC7 firmware version V03.03.03.01_cn and prior does not implement CSRF protections for administrative fun

NVIDIA Megatron-LM for all platforms contains a vulnerability in a script, where malicious data created by an attacker m

A weakness has been identified in Ziroom ZHOME A0101 1.0.1.0. Impacted is an unknown function of the component Dropbear

Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group ).

Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group ).

Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group ).

Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group ).

Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group ).

Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group ).

A SQL injection vulnerability exists in the login functionality of Fikir Odalari AdminPando 1.0.1 before 2026-01-26. The

Craft Commerce is an ecommerce platform for Craft CMS. In versions from 4.0.0-RC1 to 4.10.0 and from 5.0.0 to 5.5.1, a s

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color

Craft Commerce is an ecommerce platform for Craft CMS. In versions from 4.0.0-RC1 to 4.10.0 and from 5.0.0 to 5.5.1, a s