2026

A vulnerability was found in omec-project amf up to 2.1.1. This vulnerability affects unknown code of the component NGRe

A vulnerability has been found in omec-project amf up to 2.1.1. This affects an unknown part of the component NGSetupReq

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coa

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagate shared-frag marker through f

A flaw has been found in omec-project amf up to 2.1.1. Affected by this issue is the function PDUSessionResourceModifyIn

A vulnerability was detected in omec-project amf up to 2.1.1. Affected by this vulnerability is an unknown functionality

A security vulnerability has been detected in Edimax BR-6428NS 1.10. Affected is the function formWlbasic of the file /g

A weakness has been identified in Edimax BR-6428NS 1.10. This impacts the function system of the file /goform/formWlanM

A security flaw has been discovered in Edimax BR-6428NS 1.10. This affects the function formWirelessTbl of the file /gof

A vulnerability was identified in Edimax BR-6428NS 1.10. The impacted element is the function formWanTcpipSetup of the f

The WooCommerce PayPal Payments plugin for WordPress is vulnerable to unauthorized order manipulation and information di

The Wishlist Member plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability

The Wishlist Member plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability

The WishList Member plugin for WordPress is vulnerable to Missing Authorization leading to Sensitive Information Disclos

The WishList Member plugin for WordPress is vulnerable to Privilege Escalation via Missing Authorization in versions up

Improper authentication in Azure Resource Manager (ARM) allows an unauthorized attacker to elevate privileges over a net

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a ne

Origin validation error in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.

Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthoriz

Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. Versions 10.9.5

Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. Versions 10.9.5

Deserialization of untrusted data in Microsoft Planetary Computer Pro allows an unauthorized attacker to disclose inform

Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unaut

Unrestricted upload of file with dangerous type in Azure Orbital Spatio allows an unauthorized attacker to execute code

Improper input validation in Azure Virtual Network Gateway allows an authorized attacker to execute code over a network.

Authorization bypass through user-controlled key in Azure Privileged Identity Management (PIM) allows an authorized atta

Authentication bypass using an alternate path or channel in Microsoft Azure Active Directory B2C allows an unauthorized

Improper input validation in Azure Compute Gallery allows an authorized attacker to disclose information over a network.

Improper privilege management in Azure Entra ID allows an unauthorized attacker to elevate privileges over a network.

Improper neutralization of special elements used in a command ('command injection') in Microsoft Power Pages allows an u

NukeViet CMS is a multi Content Management System. Versions 4.5.07 and prior contain a Stored Cross-Site Scripting (XSS)

RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.9 and prior in addition to 6.0.0 t

RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.0 through 5.0.9 and 6.0.0 through

RT is an open source, enterprise-grade issue and ticket tracking system. Versions 6.0.0 through 6.0.2 contain a Cross-Si

RT is an open source, enterprise-grade issue and ticket tracking system. Versions prior to 5.0.10 and 6.0.0 through 6.0.

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, a crafted HEIF sequence file w

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, a malformed HEIF sequence file

JupyterHub is software that allows users to create a multi-user server for Jupyter notebooks. In versions 4.1.0 through

An authentication logic vulnerability in multiple TP-Link range extenders allows an unauthenticated attacker on an adjac

The MLX inference backend in Docker Model Runner on macOS uses the MLX-LM library, which unconditionally imports and exe

The vllm-metal inference backend in Docker Model Runner on macOS unconditionally sets trust_remote_code=True when loadin

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. In versions 1

Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions 2.11.0 through 2.28.1, a Stored XSS vulnerabi

Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions 2.28.1 and below, improper escaping of the re

Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions 2.28.1 and below, given any pre-existing XSS

Mantis Bug Tracker (MantisBT) is an open source issue tracker. Versions 2.11.0 through 2.28.1 allow any authenticated us

Devise is an authentication solution for Rails based on Warden. In versions 5.0.3 and below, when the Timeoutable module

NewNTUnicodeString does not check for string length overflow. When provided with a string that overflows the maximum siz

Insecure deserialization in the job results processing component in Amazon Braket SDK before 1.117.0 might allow a remot

The Docker CLI --use-api-socket flag bypasses Enhanced Container Isolation (ECI) restrictions in Docker Desktop. When EC