2026

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix potential out-of-bounds read in iomm

In the Linux kernel, the following vulnerability has been resolved: wifi: rtl818x: Fix potential memory leaks in rtl818

In the Linux kernel, the following vulnerability has been resolved: backlight: led-bl: Add devlink to supplier LEDs LE

In the Linux kernel, the following vulnerability has been resolved: drm/vgem-fence: Fix potential deadlock on release

In the Linux kernel, the following vulnerability has been resolved: block: Use RCU in blk_mq_[un]quiesce_tagset() inste

In the Linux kernel, the following vulnerability has been resolved: staging: most: remove broken i2c driver The MOST I

In the Linux kernel, the following vulnerability has been resolved: rtc: amlogic-a4: fix double free caused by devm Th

In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-motu: add bounds check in put_user l

In the Linux kernel, the following vulnerability has been resolved: iavf: Implement settime64 with -EOPNOTSUPP ptp_clo

In the Linux kernel, the following vulnerability has been resolved: s390/fpu: Fix false-positive kmsan report in fpu_vs

In the backup parameters, a user with high privilege is able to concatenate custom instructions to the backup setup. Imp

A vulnerability was identified in itsourcecode Society Management System 1.0. This affects an unknown part of the file /

A vulnerability was determined in Tenda AC1206 15.03.06.23. Affected by this issue is the function formBehaviorManager o

Any client who can access to Apache Kyuubi Server via Kyuubi frontend protocols can bypass server-side config kyuubi.ses

QOCA aim AI Medical Cloud Platform developed by Quanta Computer has an Arbitrary File Upload vulnerability, allowing aut

QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a SQL Injection vulnerability, allowing authenticate

A vulnerability was found in SourceCodester API Key Manager App 1.0. Affected by this vulnerability is an unknown functi

QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a SQL Injection vulnerability, allowing authenticate

QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a Path Traversal vulnerability, allowing authenticat

QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a Path Traversal vulnerability, allowing authenticat

QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a Missing Authorization vulnerability, allowing auth

Action captions in Vaadin accept HTML by default but were not sanitized, potentially allowing Cross-site Scripting (XSS)

A vulnerability has been found in UTT 进取 520W 1.7.7-180627. This issue affects the function strcpy of the file /goform/C

A flaw has been found in UTT 进取 520W 1.7.7-180627. This vulnerability affects the function strcpy of the file /goform/fo

The FlexTable WordPress plugin before 3.19.2 does not sanitise and escape the imported links from Google Sheet cells, w

A vulnerability was detected in UTT 进取 520W 1.7.7-180627. This affects the function strcpy of the file /goform/formPptpC

A security vulnerability has been detected in UTT 进取 520W 1.7.7-180627. Affected by this issue is the function strcpy of

The Team WordPress plugin before 5.0.11 does not properly sanitize and escape a parameter before using it in a SQL stat

A vulnerability was determined in bg5sbk MiniCMS up to 1.8. This affects an unknown function of the file /mc-admin/post-

A vulnerability was found in bg5sbk MiniCMS up to 1.8. The impacted element is an unknown function of the file /minicms/

A vulnerability has been found in bg5sbk MiniCMS up to 1.8. The affected element is an unknown function of the file /mc-

A flaw has been found in bg5sbk MiniCMS up to 1.8. Impacted is the function delete_page of the file /minicms/mc-admin/pa

A vulnerability was detected in zhanglun lettura up to 0.1.22. This issue affects some unknown processing of the file sr

A security vulnerability has been detected in milvus up to 2.6.7. This vulnerability affects the function expr.Exec of t

A weakness has been identified in xnx3 wangmarket up to 4.9. This affects the function variableList of the file /admin/s

A security flaw has been discovered in xnx3 wangmarket up to 4.9. Affected by this issue is some unknown functionality o

A vulnerability was identified in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. Affected by this v

Kentico Xperience 13 is vulnerable to a stored cross-site scripting attack via a form component, allowing an attacker to

A vulnerability was determined in cld378632668 JavaMall up to 994f1e2b019378ec9444cdf3fce2d5b5f72d28f0. Affected is the

A vulnerability was found in cld378632668 JavaMall up to 994f1e2b019378ec9444cdf3fce2d5b5f72d28f0. This impacts the func

A vulnerability was found in code-projects Online Product Reservation System 1.0. This affects an unknown part of the fi

A vulnerability has been found in code-projects Online Product Reservation System 1.0. Affected by this issue is some un

A vulnerability was identified in CRMEB up to 5.6.1. This issue affects some unknown processing of the file /adminapi/pr

A vulnerability was determined in CRMEB up to 5.6.1. This vulnerability affects unknown code of the file /adminapi/expor

A flaw has been found in code-projects Online Product Reservation System 1.0. Affected by this vulnerability is an unkno

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in JFrog Artif

A vulnerability was detected in code-projects Online Product Reservation System 1.0. Affected is an unknown function of

A security vulnerability has been detected in code-projects Online Product Reservation System 1.0. This impacts an unkno

A weakness has been identified in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the func

Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains a broken access control vulnerability that allows auth