2026

Versions of the package net.sourceforge.plantuml:plantuml before 1.2026.0 are vulnerable to Stored XSS due to insufficie

The WP Recipe Maker plugin for WordPress is vulnerable to Information Exposure in versions up to, and including, 10.2.2

The Fancy Product Designer plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and includi

The Shield: Blocks Bots, Protects Users, and Prevents Security Breaches plugin for WordPress is vulnerable to Insecure D

The Booking Calendar plugin for WordPress is vulnerable to Missing Authorization leading to Sensitive Information Exposu

The All in One SEO – Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic plugin for WordPress is vulnerable to

The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file upload in all versions up to, and incl

The Awesome Support - WordPress HelpDesk & Support Plugin for WordPress is vulnerable to authorization bypass due to mis

Statistics Database System developed by Gotac has a Missing Authentication vulnerability, allowing unauthenticated remot

Statistics Database System developed by Gotac has an Arbitrary File Read vulnerability, allowing unauthenticated remote

Delta Electronics DIAView has multiple vulnerabilities.

Delta Electronics DIAView has multiple vulnerabilities.

The vulnerability, if exploited, could allow an authenticated miscreant (OS Standard User) to trick Process Optimizatio

The vulnerability, if exploited, could allow an authenticated miscreant (Process Optimization Designer User) to embed O

The Process Optimization application suite leverages connection channels/protocols that by-default are not encrypted an

The vulnerability, if exploited, could allow an authenticated miscreant (OS Standard User) to tamper with Process Optim

The vulnerability, if exploited, could allow an authenticated miscreant (OS standard user) to tamper with TCL Macro scr

The vulnerability, if exploited, could allow an authenticated miscreant (Process Optimization Standard User) to tamper

The vulnerability, if exploited, could allow an unauthenticated miscreant to achieve remote code execution under OS sys

A stored cross-site scripting (XSS) vulnerability exists in the Altium Support Center AddComment endpoint due to missing

Buffer overflow in XPS font parse processing on Small Office Multifunction Printers and Laser Printers(*) which may allo

Buffer overflow in Address Book attribute tag processing on Small Office Multifunction Printers(*) which may allow an at

Buffer overflow in XPS font fpgm data processing on Small Office Multifunction Printers and Laser Printers(*) which may

Buffer overflow in CPCA list processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an

Invalid free in CPCA file deletion processing on Small Office Multifunction Printers and Laser Printers(*) which may all

Buffer overflow in XML processing of XPS file in Small Office Multifunction Printers and Laser Printers(*) which may all

Buffer overflow in print job processing by WSD on Small Office Multifunction Printers and Laser Printers(*) which may al

Nsauditor 3.2.3 contains a denial of service vulnerability in the registration code input field that allows attackers to

NBMonitor 1.6.8 contains a denial of service vulnerability that allows attackers to crash the application by overflowing

Backup Key Recovery 2.2.7 contains a denial of service vulnerability that allows attackers to crash the application by o

GravCMS 1.10.7 contains an unauthenticated vulnerability that allows remote attackers to write arbitrary YAML configurat

Grocery Crud 1.6.4 contains a SQL injection vulnerability in the order_by parameter that allows remote attackers to mani

WibuKey Runtime 6.51 contains an unquoted service path vulnerability in the WkSvW32.exe service that allows local attack

Disk Sorter Enterprise 13.6.12 contains an unquoted service path vulnerability in its Windows service configuration that

Cotonti Siena 0.9.19 contains a stored cross-site scripting vulnerability in the admin configuration panel's site title

Sync Breeze 13.6.18 contains an unquoted service path vulnerability in its Windows service configuration that allows loc

Dup Scout 13.5.28 contains an unquoted service path vulnerability in its Windows service configuration that allows local

Disk Savvy 13.6.14 contains an unquoted service path vulnerability in its Windows service configuration that allows loca

Wise Care 365 5.6.7.568 contains an unquoted service path vulnerability in the WiseBootAssistant service running with Lo

iFunbox 4.2 contains an unquoted service path vulnerability in the Apple Mobile Device Service that allows local attacke

Vianeos OctoPUS 5 contains a time-based blind SQL injection vulnerability in the 'login_user' parameter during authentic

b2evolution 7.2.2 contains a cross-site request forgery vulnerability that allows attackers to modify admin account deta

NoteBurner 2.35 contains a buffer overflow vulnerability in the license code input field that allows attackers to crash

Leawo Prof. Media 11.0.0.1 contains a denial of service vulnerability that allows attackers to crash the application by

Denver SHC-150 Smart Wifi Camera contains a hardcoded telnet credential vulnerability that allows unauthenticated attack

GeoVision GeoWebServer 5.3.3 contains multiple vulnerabilities including local file inclusion, cross-site scripting, and

ZesleCP 3.1.9 contains an authenticated remote code execution vulnerability that allows attackers to create malicious FT

Telegram Desktop 2.9.2 contains a denial of service vulnerability that allows attackers to crash the application by send

Remote Mouse 4.002 contains an unquoted service path vulnerability that allows local attackers to execute arbitrary code

SmartFTP Client 10.0.2909.0 contains multiple denial of service vulnerabilities that allow attackers to crash the applic