2026

This issue was addressed through improved state management. This issue is fixed in iOS 18.1 and iPadOS 18.1. A user may

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1

This issue was addressed with improved permissions checking. This issue is fixed in macOS Sequoia 15.1. An app may be ab

Kafka Connect BigQuery Connector is an implementation of a sink connector from Apache Kafka to Google BigQuery. Prior to

Dask distributed is a distributed task scheduler for Dask. Prior to 2026.1.0, when Jupyter Lab, jupyter-server-proxy, an

Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. Prior to 0.13.0

RustFS is a distributed object storage system built in Rust. From >= 1.0.0-alpha.1 to 1.0.0-alpha.79, invalid RPC signat

PEM versions prior to 9.8.1 are affected by a stored Cross-site Scripting (XSS) vulnerability that allows users with acc

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the security parameter of the sub_4C408 function. T

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the timeZone parameter of the fromSetSysTime functi

Write what were condition within AMD CPUs may allow an admin-privileged attacker to modify the configuration of the CPU

User provided uploads to the Easy Discuss component for Joomla aren't properly validated. Uploads are purely checked by

Lack of input filterung leads to a persistent XSS vulnerability in the user avatar text handling of the Easy Discuss com

Lack of input filterung leads to a persistent XSS vulnerability in the forum post handling of the Easy Discuss component

SteelSeries Nahimic 3 1.10.7 allows Directory traversal.

In ConnectWise PSA versions older than 2026.1, certain session cookies were not set with the HttpOnly attribute. In some

In ConnectWise PSA versions older than 2026.1, Time Entry notes stored in the Time Entry Audit Trail may be rendered wit

Nu Html Checker (validator.nu) contains a restriction bypass that allows remote attackers to make the server perform arb

TheLibrarians web_fetch tool can be used to retrieve the Adminer interface content, which can then be used to log into t

The Librarian `supervisord` status page can be retrieved by the `web_fetch` tool, which can be used to retrieve running

The Librarian contains an internal port scanning vulnerability, facilitated by the `web_fetch` tool, which can be used w

The Librarian contains a information leakage vulnerability through the `web_fetch` tool, which can be used to retrieve a

Livewire Filemanager, commonly used in Laravel applications, contains LivewireFilemanagerComponent.php, which does not p

Incorrect Implementation of Authentication Algorithm vulnerability in ABB ABB Ability OPTIMAX.This issue affects ABB Abi

Mattermost versions 10.11.x <= 10.11.8, 11.1.x <= 11.1.1, 11.0.x <= 11.0.6 fail to prevent infinite re-renders on API er

In Apache Airflow versions before 3.1.6, and 2.11.1 the proxies and proxy fields within a Connection may include proxy U

In Apache Airflow versions before 3.1.6, when rendered template fields in a Dag exceed [core] max_templated_field_length

HCL MyXalytics  is affected by improper management of a static JWT signing secret in the web application, where the secr

The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Missing Authentication in all versions up

Path Traversal vulnerability exists in multiple Network Cameras TRIFORA 3 series provided by TOA Corporation. If this vu

Cross-site scripting vulnerability exists in multiple Network Cameras TRIFORA 3 series provided by TOA Corporation. If a

OS Command Injection vulnerability exists in multiple Network Cameras TRIFORA 3 series provided by TOA Corporation, whic

The Essential Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions

The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Stored

Remote command injection vulnerability in heap profiler builtin service in Apache bRPC ((all versions < 1.15.0)) on all

Mattermost versions 10.11.x <= 10.11.8 fail to validate input size before processing hashtags which allows an authentica

The Cost Calculator Builder plugin for WordPress is vulnerable to Unauthenticated Payment Status Bypass in all versions

There is a vulnerability in the Supermicro BMC firmware validation logic at Supermicro MBD-X13SEM-F . An attacker can up

There is a vulnerability in the Supermicro BMC firmware validation logic at Supermicro MBD-X12STW-F . An attacker can up

The GetGenie plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.3.0. Thi

The RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging plugin for WordPress is vulnerable to Reflec

The Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit plugin for WordPress is vulnerable to unauthorized mo

The Rede Itaú for WooCommerce plugin for WordPress is vulnerable to order status manipulation due to insufficient verifi

The Related Posts by Taxonomy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'relate

The LEAV Last Email Address Validator plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions <= 1.

The DK PDF – WordPress PDF Generator plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions u

lucy-xss-filter before commit e5826c0 allows an attacker to execute malicious JavaScript due to improper sanitization ca

lucy-xss-filter before commit 7c1de6d allows an attacker to induce server-side HEAD requests to arbitrary URLs when the

Delta Electronics DIAView has Command Injection vulnerability.

The MailerLite - WooCommerce integration plugin for WordPress is vulnerable to unauthorized data modification and deleti