2026

Deserialization of Untrusted Data vulnerability in Digital zoom studio DZS Video Gallery allows Object Injection.This is

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themesgrove Widget

Missing Authorization vulnerability in POSIMYTH Innovation The Plus Addons for Elementor Pro theplus_elementor_addon all

Path Traversal: '.../...//' vulnerability in SigmaPlugin Advanced Database Cleaner PRO allows Path Traversal.This issue

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mojoomla WPCHURCH

Origin validation error issue exists in Fujitsu Security Solution AuthConductor Client Basic V2 2.0.25.0 and earlier. If

The iPaymu Payment Gateway for WooCommerce plugin for WordPress is vulnerable to Missing Authentication in all versions

OpenFlagr versions prior to and including 1.1.18 contain an authentication bypass vulnerability in the HTTP middleware.

A security vulnerability has been detected in invoiceninja up to 5.12.38. The affected element is the function copy of t

A flaw has been found in projectworlds House Rental and Property Listing 1.0. Impacted is an unknown function of the fil

A vulnerability was detected in projectworlds House Rental and Property Listing 1.0. This issue affects some unknown pro

Insufficient policy enforcement in WebView tag in Google Chrome prior to 143.0.7499.192 allowed an attacker who convince

Microsoft Playwright MCP Server versions prior to 0.0.40 fails to validate the Origin header on incoming connections. Th

Missing Authorization vulnerability in themehunk Oneline Lite oneline-lite allows Exploiting Incorrectly Configured Acce

Missing Authorization vulnerability in Crocoblock JetEngine jet-engine allows Exploiting Incorrectly Configured Access C

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Frenify Arlo arlo

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

The Uniffle HTTP client is configured to trust all SSL certificates and disables hostname verification by default. This

Memory corruption occurs when a secure application is launched on a device with insufficient memory.

Transient DOS while parsing a WLAN management frame with a Vendor Specific Information Element.

Memory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations.

Memory corruption when accessing resources in kernel driver.

Memory corruption while passing pages to DSP with an unaligned starting address.

Memory corruption while preprocessing IOCTLs in sensors.

Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a ses

Memory Corruption when multiple threads concurrently access and modify shared resources.

Memory corruption while processing identity credential operations in the trusted application.

Memory corruption while processing a secure logging command in the trusted application.

Cryptographic issue may occur while encrypting license data.

Memory corruption while handling sensor utility operations.

Memory corruption while processing a video session to set video parameters.

Memory corruption while deinitializing a HDCP session.

Memory corruption while accessing a synchronization object during concurrent operations.

Memory corruption while performing sensor register read operations.

Memory corruption while parsing clock configuration data for a specific hardware type.

Memory corruption while processing shared command buffer packet between camera userspace and kernel.

Memory corruption while handling buffer mapping operations in the cryptographic driver.

Memory corruption while processing a config call from userspace.

Information disclosure while processing a firmware event.

Transient DOS while parsing video packets received from the video firmware.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Digital zoom studi

Improper service binding configuration in internal service components in HCL BigFix IVR version 4.2 allows a privileged

Improper authentication and missing CSRF protection in the local setup interface component in HCL BigFix IVR version 4.2

Insufficient session expiration in the Web UI authentication component in HCL BigFix IVR version 4.2 allows an authentic

Incorrect Privilege Assignment vulnerability in Dasinfomedia WPCHURCH allows Privilege Escalation.This issue affects WPC

AuntyFey Smart Combination Lock firmware versions as of 2025-12-24 contain a vulnerability that allows an unauthenticate

A flaw has been found in TRENDnet TEW-811DRU 1.0.2.0. This affects the function setDeviceURL  of the file uapply.cgi of

The WP Enable WebP plugin for WordPress is vulnerable to arbitrary file uploads due to improper file type validation in

The Responsive Pricing Table plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'table_currency'