2026

An integer underflow vulnerability in the Silicon Labs Z-Wave Protocol Controller can lead to out of bounds memory reads

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in corourke iPhone We

Improper Validation of Specified Quantity in Input vulnerability in SaasProject Booking Package allows Accessing Functio

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Tumult Inc

An issue in ComfyUI-Manager prior to version 3.38 allowed remote attackers to potentially manipulate its configuration a

Mega-Fence (webgate-lib.*) 25.1.914 and prior trusts the first value of the X-Forwarded-For (XFF) header as the client I

WHILL Model C2 Electric Wheelchairs and Model F Power Chairs do not enforce authentication for Bluetooth connections. An

A flaw has been found in Campcodes Supplier Management System 1.0. Affected by this issue is some unknown functionality

Zimbra Collaboration (ZCS) 10 before 10.0.18 and 10.1 before 10.1.13 allows Classic UI stored XSS via Cascading Style Sh

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Centreon Infra Mon

Missing Authentication for Critical Function vulnerability in Centreon Infra Monitoring centreon-awie (Awie import modul

A security flaw has been discovered in code-projects Online Product Reservation System 1.0. This affects an unknown func

A vulnerability was identified in code-projects Online Product Reservation System 1.0. The impacted element is an unknow

Improper Restriction of XML External Entity Reference vulnerability in Apache SIS. It is possible to write XML files

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon In

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon In

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in POSIMYTH Th

Cross-Site Request Forgery (CSRF) vulnerability in Automattic WP Job Manager allows Cross Site Request Forgery.This issu

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in INTINITUM F

Unrestricted Upload of File with Dangerous Type vulnerability in Meow Apps Media File Renamer allows Using Malicious Fil

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in KlbTheme Ma

A vulnerability was determined in code-projects Online Product Reservation System 1.0. The affected element is an unknow

A vulnerability was found in code-projects Online Product Reservation System 1.0. Impacted is an unknown function of the

A weakness has been identified in Xinhu Rainrock RockOA up to 2.7.1. Affected by this vulnerability is an unknown functi

A security flaw has been discovered in Xinhu Rainrock RockOA up to 2.7.1. Affected is an unknown function of the file ro

A vulnerability was detected in code-projects Online Product Reservation System 1.0. The affected element is an unknown

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Infility Infility

Missing Authorization vulnerability in codepeople Sell Downloads sell-downloads allows Exploiting Incorrectly Configured

Missing Authorization vulnerability in wpweb Follow My Blog Post follow-my-blog-post allows Exploiting Incorrectly Confi

Authorization Bypass Through User-Controlled Key vulnerability in Rustaurius Five Star Restaurant Reservations restauran

Insertion of Sensitive Information Into Sent Data vulnerability in Brecht Custom Related Posts custom-related-posts allo

Insertion of Sensitive Information Into Sent Data vulnerability in WP Swings Wallet System for WooCommerce wallet-system

Insertion of Sensitive Information Into Sent Data vulnerability in awethemes AweBooking awebooking allows Retrieve Embed

Unrestricted Upload of File with Dangerous Type vulnerability in Themify Shopo allows Upload a Web Shell to a Web Server

Deserialization of Untrusted Data vulnerability in Themify Themify Edmin allows Object Injection.This issue affects Them

Missing Authorization vulnerability in WPvibes AnyWhere Elementor Pro allows Exploiting Incorrectly Configured Access Co

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AA-Team Premium SE

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AA-Team Amazon Nat

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon In

Missing Authorization vulnerability in Centreon Infra Monitoring (Administration parameters API endpoint modules) allows

A security vulnerability has been detected in code-projects Online Product Reservation System 1.0. Impacted is an unknow

A weakness has been identified in code-projects Online Product Reservation System 1.0. This issue affects some unknown p

A security flaw has been discovered in code-projects Online Product Reservation System 1.0. This vulnerability affects u

In the Linux kernel, the following vulnerability has been resolved: irqchip/mchp-eic: Fix error code in mchp_eic_domain

In the Linux kernel, the following vulnerability has been resolved: mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_st

In the Linux kernel, the following vulnerability has been resolved: NFS: Automounted filesystems should inherit ro,noex

In the Linux kernel, the following vulnerability has been resolved: crypto: starfive - Correctly handle return of sg_ne

In the Linux kernel, the following vulnerability has been resolved: net: netpoll: initialize work queue before error ch

In the Linux kernel, the following vulnerability has been resolved: hfs: fix potential use after free in hfs_correct_ne