2026

CTI-Transmute contained a cross-site request forgery vulnerability in the administrative user deletion functionality. Th

CTI-Transmute contains an uncontrolled resource-consumption vulnerability in the unauthenticated /activity_timeline endp

CTI-Transmute is affected by a server-side request forgery vulnerability in the evaluation report PDF-generation functio

A flaw was found in SSSD. The sss_nss_protocol_parse_addr() function in the NSS responder does not validate the addrlen

A vulnerability in Wapt Server before version 2.6.1.17813 allows a  remote unauthenticated attacker to bypass security r

eParakstītājs 3.0 for Windows before version 1.10.0 retrieves and executes its automatic updates over a channel that is

FlowIntel is affected by a stored cross-site scripting vulnerability through multiple user-controlled or administrator-c

Sharp and Toshiba Tec MFPs (multifunction printers) for a certain market have been shipped with the user authentication

Sharp and Toshiba Tec MFPs (multifunction printers) caches data internally when printing, and leave them uncleared. They

Network Scanner Tool and Network Scanner Tool Lite provided by Sharp Corporation, with the initial configuration, requir

Sharp and Toshiba Tec MFPs (multifunction printers) fail to properly authorize requests to directly access certain image

PaperCut NG/MF contains an observable timing discrepancy in its authentication component. An unauthenticated remote atta

PaperCut NG/MF does not properly restrict excessive authentication attempts within its login component. An unauthenticat

Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templa

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional

In nr modem, there is a possible improper input validation. This could lead to remote denial of service with System exec

A weakness has been identified in vxcontrol PentAGI up to 2.1.0. This affects an unknown part of the file backend/pkg/te

A security flaw has been discovered in osCommerce 4.14.63493. Affected by this issue is the function EmailController of

A vulnerability was identified in Meesho Online Shopping App up to 20260607 on Android. Affected by this vulnerability i

A vulnerability was determined in Wavlink WL-NU516U1 708c073-mt7628. Affected is the function set_sys_adm of the file ad

In nltk version 3.9.4, the `nltk.downloader.Downloader._download_package()` function writes downloaded package bytes to

A vulnerability in the iDTM FDI allows an attacker with elevated privileges and access to the host system to enable the

An incorrect default permissions vulnerability in Synology Assistant before 7.0.7-50095 allows local users to read or wr

A vulnerability was found in Wavlink WL-NU516U1 708c073-mt7628. This impacts the function change_password of the file na

A vulnerability has been found in Wavlink WL-NU516U1 708c073-mt7628. This affects the function fgets of the file nas.cgi

A flaw has been found in Wavlink WL-NU516U1 708c073-mt7628. The impacted element is an unknown function of the component

The LogMyTrip WordPress plugin through 1.9 does not sanitize and escape a value taken from a cookie before using it in a

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.9 does not verify produc

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.9 does not verify order

The Academy LMS WordPress plugin before 3.8.3 does not verify course enrollment or lesson publication status when return

The sm page duplicator WordPress plugin through 1.0.0 does not sanitise and escape a stored value before using it in a S

The Import and export users and customers WordPress plugin before 2.4.2 does not enforce WordPress's role-assignment and

The Link Library WordPress plugin before 7.9.3 does not properly sanitise and escape a user-supplied value before using

The ChamaWP WordPress plugin before 1.0.13 does not properly validate a password reset request, allowing unauthenticate

The Clearfy Cache WordPress plugin before 2.4.3 does not restrict the classes allowed when unserializing settings-impor

The ProfileGrid WordPress plugin before 6.0.0.0 does not perform authorization checks when listing a group's pending me

The Classified Listing WordPress plugin before 5.4.4 does not perform a capability check on an AJAX action that returns

The Classified Listing WordPress plugin before 5.4.4 does not perform a capability or ownership check on an AJAX action

The Personal QR Message WordPress plugin through 1.0 does not restrict the file types that can be uploaded through an un

The Insert or Embed Articulate Content into WordPress plugin through 4.3000000027 does not correctly validate the conten

The Contest Gallery WordPress plugin before 30.0.7 does not perform per-object capability or nonce checks in one of its

The Simple Membership WordPress plugin before 4.7.8 does not sanitise a subscriber name value received from an unauthent

The Simple Membership WordPress plugin before 4.7.8 does not verify whether user creation failed during registration bef

The Blog Floating Button WordPress plugin through 1.4.20 does not sanitize or escape the visitor User-Agent header, whic