2026

The Admin and Site Enhancements (ASE) WordPress plugin before 8.8.4, admin-site-enhancements-pro WordPress plugin before

The FileOrganizer WordPress plugin before 1.2.0 does not validate the file type on several of its file-management opera

The Simple Membership WordPress plugin before 4.7.5 does not verify the authenticity of Stripe webhook requests when no

The Ultimate Member WordPress plugin before 2.12.0 does not properly sanitise and escape the value of custom textarea p

The AllCoach WordPress plugin before 1.0.2 does not verify that an email address submitted to a public account-registra

The Notifications for Forms & WordPress Actions WordPress plugin before 2.6 does not validate a user-supplied value befo

A security flaw has been discovered in CodeAstro Ecommerce Website 1.0. Impacted is an unknown function of the file /cus

A vulnerability was identified in CodeAstro Apartment Visitor Management System 1.0. This issue affects some unknown pro

A vulnerability was determined in CodeAstro Apartment Visitor Management System 1.0. This vulnerability affects unknown

A vulnerability was found in CodeAstro Apartment Visitor Management System 1.0. This affects an unknown part of the file

A vulnerability has been found in CodeAstro Apartment Visitor Management System 1.0. Affected by this issue is some unkn

A flaw has been found in Craft CMS up to 4.18.0.1. Affected by this vulnerability is the function actionGetNewUsersData

A vulnerability was detected in Craft CMS up to 4.18.0.1. Affected is the function actionReorderSets of the file src/con

A security vulnerability has been detected in Formbricks 5.0.0. This impacts an unknown function of the file apps/web/mo

A weakness has been identified in crater-invoice-inc crater up to 6.0.6. This affects the function getFormattedString of

A flaw has been found in GPAC 26.02.0. This affects the function nhmldump_send_frame of the file src/filters/write_nhml.

A vulnerability was detected in radareorg radare2 up to 6.1.6. Affected by this issue is some unknown functionality of t

Mojo::JSON versions before 9.47 for Perl allow memory exhaustion via unbounded recursion in the pure-Perl decoder. The

A security vulnerability has been detected in radareorg radare2 up to 6.1.6. Affected by this vulnerability is the funct

A weakness has been identified in radareorg radare2 up to 6.1.6. Affected is the function cmd_print in the library libr/

A security flaw has been discovered in radareorg radare2 up to 6.1.6. This impacts the function r_str_word_get0set of th

A vulnerability was identified in vxcontrol PentAGI up to 2.1.0. This affects an unknown function of the file backend/pk

A vulnerability was determined in NousResearch hermes-agent 2026.5.29.2. The impacted element is the function skill_view

A security vulnerability has been detected in SourceCodester Onlne Examination & Learning Management System 1.0. This af

A weakness has been identified in SourceCodester Onlne Examination & Learning Management System 1.0. Affected by this is

A security flaw has been discovered in SourceCodester Onlne Examination & Learning Management System 1.0. Affected by th

A vulnerability was identified in SourceCodester Onlne Examination & Learning Management System 1.0. Affected is an unkn

A vulnerability was determined in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the f

A vulnerability was found in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /

Zephyr's DNS resolver detects mDNS (.local) queries in dns_resolve_name_internal() (subsys/net/lib/dns/resolve.c) with m

The MAX32xxx USB device controller driver (drivers/usb/udc/udc_max32.c, compatible adi_max32_usbhs) dereferenced an endp

Cross-Site Request Forgery (CSRF) vulnerability in properfraction CrawlWP SEO allows Cross Site Request Forgery. This i

Insertion of Sensitive Information Into Sent Data vulnerability in Softaculous FormLayer allows Retrieve Embedded Sensit

Insertion of Sensitive Information Into Sent Data vulnerability in Tim Strifler Exclusive Addons Elementor allows Retrie

A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0/1.php. The impacted element is an

A flaw has been found in SourceCodester Class and Exam Timetabling System 1.0/1.php. The affected element is an unknown

A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. Impacted is an unknown function of

A security vulnerability has been detected in code-projects Real State Services 1.0. This issue affects some unknown pro

A weakness has been identified in code-projects Real State Services 1.0. This vulnerability affects unknown code of the

A security flaw has been discovered in CodeAstro Ecommerce Website 1.0. This affects an unknown part of the file /ecomme

A vulnerability was identified in CodeAstro Apartment Visitor Management System 1.0. Affected by this issue is some unkn

AIL Framework contains a path traversal vulnerability in its PDF object handling. Prior to commit 14c618fce4d1df02358717

A vulnerability has been found in code-projects Hotel and Tourism Reservation 1.0. This impacts an unknown function of t

A flaw has been found in code-projects Hotel and Tourism Reservation 1.0. This affects an unknown function of the file /

A vulnerability was detected in code-projects Hotel and Tourism Reservation 1.0. The impacted element is an unknown func

A security vulnerability has been detected in radareorg radare2 up to 6.1.6. The affected element is the function r_str_

A weakness has been identified in radareorg radare2 up to 6.1.6. Impacted is the function r_core_seek_arch_bits of the f

A security flaw has been discovered in radareorg radare2 up to 6.1.6. This issue affects the function r_bin_java_inner_c

Incorrect Permission Assignment for Critical Resource, Improper Access Control vulnerability in TUBITAK BILGEM Software

Missing Authorization vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Update allows Priv