2026

A critical Remote Code Execution (RCE) vulnerability exists in Disig Web Signer versions 2.0.3 through 2.5.3.

Incorrect Privilege Assignment vulnerability in Sergey AIWU allows Privilege Escalation. This issue affects AIWU: from

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Rocketgenius Inc. Gravit

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThimPress LearnPre

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VeronaLabs WP Stat

Lightweight Music Server (LMS) though 3.76.0 contains a stored cross-site scripting vulnerability that allows attackers

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikBookin

Missing Authorization vulnerability in Tomdever wpForo Forum allows Exploiting Incorrectly Configured Access Control Sec

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in E2Pdf.Com e2pdf al

Incorrect Privilege Assignment vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery Pro allows P

Use of hard-coded credentials in KS-SOMED allowed an unauthorized attacker access to FTP server that hosted the applicat

FlexRIC v2.0.0 crashes when receiving a RIC_SUBSCRIPTION_RESPONSE with an unknown ric_id that has no corresponding pendi

FlexRIC v2.0.0 crashes when an SCTP association is closed before an E2_SETUP_REQUEST is sent. The near-RT RIC assumes a

A flaw was found in OpenShift Container Platform. Completed pods with restartPolicy: Never do not count toward ResourceQ

A security flaw has been discovered in janet-lang janet up to 1.41.0. This affects the function doframe of the file src/

A vulnerability was identified in itsourcecode Content Management System 1.0. Affected by this issue is some unknown fun

A vulnerability was determined in lharries whatsapp-mcp 0.0.1. Affected by this vulnerability is the function SendMessag

A vulnerability was found in SourceCodester Computer Repair Shop Management System up to 1.0. Affected is an unknown fun

A vulnerability has been found in code-projects Real State Services 1.0. This impacts an unknown function of the file /l

A flaw has been found in CodeAstro Online Job Portal 1.0. This affects an unknown function of the file /users/applicatio

A vulnerability was detected in CodeAstro Online Job Portal 1.0. The impacted element is an unknown function of the file

A security vulnerability has been detected in H3C Magic B0 up to 100R002. The affected element is the function SetMobile

In certain scenarios when the admin has enabled Interactive Connectivity Establishment (ICE), a buffer overflow could en

A segmentation violation in the gf_media_get_color_info function (/media_tools/isom_tools.c) of GPAC Project/MP4Box befo

A heap use-after-free in the dasher_process function (/filters/dasher.c) of GPAC Project/MP4Box before 26.02.0 allows at

A segmentation violation in the gf_isom_apple_set_tag_ex function (/isomedia/isom_write.c) of GPAC Project/MP4Box before

A NULL pointer dereference in the gf_ac4_pres_b_4_back_channels_present function (/media_tools/av_parsers.c) of GPAC Pro

A NULL pointer dereference in the gf_odf_ac4_cfg_dsi_v1 function (/odf/descriptors.c) of GPAC Project/MP4Box before 26.0

A heap buffer overflow in the m2tsdmx_send_packet function (filters/dmx_m2ts.c) of GPAC MP4Box v2.4 allows attackers to

Vertex is a management tool for PT (Private Tracker) users to manage streaming and watching videos. Versions prior to co

Firefox for iOS Reader View did not properly escape HTML tags in JSON-LD metadata. A malicious page could inject markup

Firefox for iOS Reader View replaced page content in its HTML template before replacing other internal placeholders. A m

Kernel software installed and running inside a Guest/Host VM may post improper commands to the GPU Firmware to trigger a

Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core (HardenedObjectInputStream (logback-

A weakness has been identified in itsourcecode Content Management System 1.0. Impacted is an unknown function of the fil

A security flaw has been discovered in itsourcecode Content Management System 1.0. This issue affects some unknown proce

A vulnerability was identified in itsourcecode Content Management System 1.0. This vulnerability affects unknown code of

A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected by this vulnerability

A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. Affected is an unknown function of the fil

A vulnerability was detected in itsourcecode Online House Rental System 1.0. This impacts an unknown function of the fil

A security vulnerability has been detected in itsourcecode Online House Rental System 1.0. This affects an unknown funct

A weakness has been identified in itsourcecode Online House Rental System 1.0. The impacted element is an unknown functi

Server-Side Request Forgery (SSRF) in the UrlImageConverter component of Apache Fesod (Incubating) fesod-sheet before 2.

The PDBM application relies on a static, hard‑coded secret embedded in the PDBM.exe executable. This secret is used by

Missing authentication and clear‑text transmission of data from the heat pumps to the control server, combined with the

A security flaw has been discovered in itsourcecode Online Blood Bank Management System 1.0. The affected element is an

A vulnerability was identified in itsourcecode Online Blood Bank Management System 1.0. Impacted is an unknown function

A vulnerability was determined in SourceCodester Pharmacy Sales and Inventory System up to 1.0. This issue affects the f

A vulnerability was found in SourceCodester Pharmacy Sales and Inventory System 1.0. This vulnerability affects the func

A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects the function crea