2026

Improper certificate validation in Azure Connected Machine Agent allows an unauthorized attacker to elevate privileges o

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized

Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclos

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service ove

Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthori

Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notification

Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code over a network.

Improper validation of consistency within input in Windows Secure Kernel Mode allows an authorized attacker to elevate p

Heap-based buffer overflow in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adja

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows App Store allows

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to dis

Use of uninitialized resource in Windows File Explorer allows an authorized attacker to disclose information locally.

Relative path traversal in Windows PowerShell allows an authorized attacker to execute code over a network.

Memory allocation with excessive size value in Windows Local Security Authority Subsystem Service (LSASS) allows an unau

osTicket versions from 1.10 up to 1.17.7 and from 1.18.0 up to 1.18.3 are vulnerable to a stored XSS due to a vulnerable

Exposure of sensitive information to an unauthorized actor in Windows Media allows an authorized attacker to disclose in

Protection mechanism failure in Windows Event Logging Service allows an authorized attacker to disclose information over

Cleartext transmission of sensitive information in Windows Ancillary Function Driver for WinSock allows an authorized at

Exposure of sensitive information to an unauthorized actor in Windows Audio Service allows an authorized attacker to dis

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to dis

A vulnerability was detected in SourceCodester Simple and Nice Shopping Cart Script 1.0. This vulnerability affects unkn

A security vulnerability has been detected in tamagui up to 2.3.0. This affects the function updateConfig of the file co

A weakness has been identified in Totolink NR1800X 9.1.0u.6279_B20210910. Affected by this issue is the function Form_Lo

A security flaw has been discovered in DedeCMS 5.7.118. Affected by this vulnerability is the function ExtractFile of th

A privilege escalation vulnerability exists in the HTTP authentication component in Archer VX1800v v1. Improper handling

An OS command injection vulnerability exists in Archer VX800v v1 due to insufficient input sanitization of the domain na

An OS command injection vulnerability exists in the TR-069 / CWMP management interface of Archer VX1800v v1 due to insuf

Nexus Repository 3 did not apply its existing Server-Side Request Forgery (SSRF) protections to HTTP redirect targets re

Nexus Repository 3 does not validate the destination of the "Webhook: Global" capability's configured URL before making

A security issue exists within CompactLogix® 5380, ControlLogix® 5580, and EN4 communication modules related to CIP Secu

A Stored Cross-Site Scripting security issue exists within FactoryTalk® DataMosaix™ Private Cloud. The vulnerability ste

A code execution security issue exists within Studio 5000 Logix Designer® due to an unquoted search path in the External

A remote code execution security issue exists within Studio 5000 Logix Designer® due to incorrect authorization on a con

A path traversal security issue exists within Studio 5000 Logix Designer® due to improper limitation of file paths withi

Nexus Repository 3 is vulnerable to Server-Side Request Forgery (SSRF) via the SSL Certificate Retrieval endpoint. A use

In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the password plugin of the Roundcube Webmail was subject to u

In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, insufficient Cascading Style Sheets (CSS) sanitization in HTM

In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, an infinite loop was discovered in the TNEF decoder, which ma

In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the TNEF decoder was subject to denial of service via a craft

Hi.Events before 1.11.0 contains a cross-site scripting vulnerability that allows authenticated attackers with event cre

Hi.Events before 1.11.0 contains a missing server-side visibility enforcement vulnerability that allows unauthenticated

DBI versions before 1.651 for Perl do not enforce statement handle consistency with the row. When the statement handle

DBI::ProfileData versions before 1.651 for Perl do not limit the path index. The path index column of profile dump file

A improper restriction of communication channel to intended endpoints vulnerability in Fortinet FortiSIEMWindowsAgent 7.

A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all v

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiOS 7.6.0

A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2 all versions, FortiPAM

A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4.0 thr

A exposure of resource to wrong sphere vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, FortiSandbox 4.4.3 th