2026

A security vulnerability has been detected in Tenda F456 1.0.0.5. This affects the function frmL7ImForm of the file /gof

A vulnerability has been found in itsourcecode Electronic Judging System 1.0. This affects an unknown part of the file /

A critical remote code execution vulnerability exists in all versions of the HuggingFace transformers library prior to v

A flaw has been found in Edimax BR-6675nD 1.12. Affected by this issue is the function formPPTPSetup of the file /goform

A vulnerability was detected in Edimax BR-6675nD 1.12. Affected by this vulnerability is the function formPPPoESetup of

A security vulnerability has been detected in Edimax BR-6675nD 1.12. Affected is the function formL2TPSetup of the file

A flaw has been found in ItzCrazyKns Vane up to 1.12.1. This vulnerability affects unknown code of the file src/app/api/

A vulnerability was identified in NousResearch hermes-agent up to 2026.4.16. This impacts the function execute_code of t

A vulnerability was determined in NousResearch hermes-agent up to 5157f5427f19488b31c6fdebbacd15d798ce7f63. This affects

A vulnerability was found in NousResearch hermes-agent 2026.4.23. The impacted element is the function _scan_context_con

A flaw has been found in projectworlds Online Art Gallery Shop 1.0. Impacted is an unknown function of the file /admin/a

A security flaw has been discovered in Edimax EW-7438RPn 1.28a. Affected by this issue is the function formwlencrypt24g

A vulnerability has been found in SourceCodester Hospitals Patient Records Management System 1.0. This affects an unknow

A flaw has been found in SourceCodester Hospitals Patient Records Management System 1.0. The impacted element is an unkn

A security vulnerability has been detected in NousResearch hermes-agent up to 2026.4.23. Impacted is an unknown function

A vulnerability in the `GitHubRepository` block of the `prefect-github` integration in Prefect version 3.6.18 allows an

A vulnerability was identified in NousResearch hermes-agent up to 2026.4.16. This affects the function check_all_command

A vulnerability was found in Edimax EW-7438RPn up to 1.31. Affected by this vulnerability is an unknown functionality of

In GNU SASL before 2.2.3, DIGEST-MD5 has a NULL pointer dereference affecting both clients and servers, via a known toke

A flaw has been found in Edimax EW-7438RPn up to 1.31. This impacts the function formWirelessTbl of the file /goform/for

A vulnerability was detected in Edimax EW-7438RPn up to 1.31. This affects the function formWizSurvey of the file /gofor

A security vulnerability has been detected in Edimax EW-7438RPn up to 1.31. The impacted element is an unknown function

D-Link DIR601 2.02NA contains a credential disclosure vulnerability that allows unauthenticated attackers to retrieve se

SIPp 3.6 and earlier contains a local buffer overflow vulnerability in command-line argument handling that allows local

Audiograbber 1.83 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by expl

Redaxo CMS Mediapool Addon 5.5.1 and older contains an arbitrary file upload vulnerability that allows authenticated use

WordPress Ultimate Form Builder Lite plugin version 1.3.7 and below contains an SQL injection vulnerability that allows

Joomla! Component EkRishta 2.10 contains an error-based SQL injection vulnerability that allows unauthenticated attacker

Joomla! Component Ek Rishta 2.10 contains an SQL injection vulnerability that allows unauthenticated attackers to manipu

WordPress Contact Form Maker Plugin 1.12.20 contains SQL injection vulnerabilities that allow authenticated attackers to

WordPress Form Maker Plugin 1.12.24 and below contains SQL injection vulnerabilities that allow authenticated attackers

10-Strike Network Scanner 3.0 contains a local buffer overflow vulnerability in the host name field that allows attacker

10-Strike Network Inventory Explorer 8.54 contains a stack-based buffer overflow vulnerability in the registration key i

Smartshop 1 contains a time-based blind SQL injection vulnerability that allows unauthenticated attackers to manipulate

Smartshop 1 contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL querie

Smartshop 1 contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL querie

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coa

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagate shared-frag marker through f

A security flaw has been discovered in Edimax BR-6428NS 1.10. This affects the function formWirelessTbl of the file /gof

A vulnerability was identified in Edimax BR-6428NS 1.10. The impacted element is the function formWanTcpipSetup of the f

The WooCommerce PayPal Payments plugin for WordPress is vulnerable to unauthorized order manipulation and information di

The Wishlist Member plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability

The Wishlist Member plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability

The WishList Member plugin for WordPress is vulnerable to Missing Authorization leading to Sensitive Information Disclos

The WishList Member plugin for WordPress is vulnerable to Privilege Escalation via Missing Authorization in versions up

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a ne

Authorization bypass through user-controlled key in Azure Privileged Identity Management (PIM) allows an authorized atta

Improper input validation in Azure Compute Gallery allows an authorized attacker to disclose information over a network.

Improper privilege management in Azure Entra ID allows an unauthorized attacker to elevate privileges over a network.

NukeViet CMS is a multi Content Management System. Versions 4.5.07 and prior contain a Stored Cross-Site Scripting (XSS)