2026

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in delete_module.php that allows

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in db_loader.php that allows aut

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in circle.php that allows authen

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in add_nm.php that allows authen

Missing Authorization vulnerability in VillaTheme HAPPY allows Exploiting Incorrectly Configured Access Control Security

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in add.php that allows authentic

Deserialization of untrusted data in Apache Fory PyFory. PyFory's ReduceSerializer could bypass documented Deserializati

The ConnectWise Automate™ Agent does not fully verify the authenticity of components obtained during plugin loading and

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wp Directory Kit W

Buffer Overflow vulnerability in Uncrustify Project Affected v.Uncrustify_d-0.82.0-132-bcc41cbdc and Fixed in commit 68e

Improper restriction of excessive authentication attempts vulnerability in Turkiye Electricity Transmission Corporation

Insufficient session expiration vulnerability in Turkiye Electricity Transmission Corporation (TEİAŞ) Mobile Application

A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affe

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affe

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affe

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affe

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affe

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affe

A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker t

Zohocorp ManageEngine ADSelfService Plus version before 6525, DataSecurity Plus before 6264 and RecoveryManager Plus bef

An origin validation error vulnerability in the Trend Micro Apex One (mac) agent self-protection mechanism could allow a

A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent cache mechanism could allow a local at

A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent iCore service signature verification c

An origin validation error vulnerability in the Trend Micro Apex One (mac) agent iCore service could allow a local attac

An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on

A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalate privileg

A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code an

A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code an

Authorization bypass through User-Controlled key vulnerability in PosCube Hardware Software and Consulting Ltd. QR Menu

Exposure of private personal information to an unauthorized actor, Insufficiently Protected Credentials vulnerability in

Request Tracker is vulnerable to a reflected cross-site scripting (XSS) vulnerability via the "Page" parameter in GET re

The Divi Form Builder plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.1.2

(Externally Controlled Reference to a Resource in Another Sphere), (Authorization Bypass Through User-Controlled Key) vu

In the Linux kernel, the following vulnerability has been resolved: net/rds: handle zerocopy send cleanup before the me

In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: reserve mac_len headroom when recompress

In the Linux kernel, the following vulnerability has been resolved: rtmutex: Use waiter::task instead of current in rem

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Disallow re-exporting imported GEM obje

In the Linux kernel, the following vulnerability has been resolved: fbdev: udlfb: add vm_ops to dlfb_ops_mmap to preven

In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_red: Replace direct dequeue call wit

In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: validate port_count against messag

In the Linux kernel, the following vulnerability has been resolved: net/rds: reset op_nents when zerocopy page pin fail

The affected product may expose credentials remotely between low privileged visualization users during concurrent login

When bsdinstall or bsdconfig are prompted to scan for nearby Wi-Fi networks, they build up a list of network names and u

In the case of the cap_net service, when a key present in the old limit was omitted from the new limit, the missing key

ptrace(PT_SC_REMOTE) failed to properly validate parameters for the syscall(2) and __syscall(2) meta-system calls. As a

When a fusefs file system implements extended attributes, the kernel may send a FUSE_LISTXATTR message to the userspace

A file descriptor can be closed while a thread is blocked in a poll(2) or select(2) call waiting for that descriptor. B

Insufficient Validation of Member Zone Data May Cause Catalog Zone Transfer to Fail

Concurrency and locking defects in GSS-TSIG