2026

A Server-Side Request Forgery (SSRF) in the /plugins/{name}/upgrade-from-uri endpoint of halo v2.22.14 allows authentica

Synway SMG Gateway Management Software contains an OS command injection vulnerability in the RADIUS configuration endpoi

CryptPad 2025.3.1 allows unbounded WebSocket frame flood. A remote, unauthenticated attacker can significantly degrade o

Weaver (Fanwei) E-office versions prior to 10.0_20221201 contain an unauthenticated arbitrary file upload vulnerability

Weaver (Fanwei) E-cology 9.5 versions prior to 10.52 contain an arbitrary file read vulnerability in the XmlRpcServlet i

Improper input validation vulnerability in Progress Software MOVEit Automation allows Privilege Escalation. This issue

Authentication bypass by primary weakness vulnerability in Progress Software MOVEit Automation allows Authentication Byp

Cross Site Scripting vulnerability in RafyMrX TOKO-ONLINE-ROTI v.1.0 allows a remote attacker to execute arbitrary code

Cross Site Scripting vulnerability in andrewtch88 mvc-ecommerce v.1.0 allows a remote attacker to execute arbitrary code

A Cross-Site Request Forgery (CSRF) vulnerability exists in the web management interface of the U-SPEED N300 Rounter V1.

A Server-Side Request Forgery (SSRF) in the /themes/{name}/upgrade-from-uri endpoint of halo v2.22.14 allows authenticat

A Server-Side Request Forgery (SSRF) in the /themes/-/install-from-uri endpoint of halo v2.22.14 allows authenticated at

A Server-Side Request Forgery (SSRF) in the /plugins/-/install-from-uri endpoint of halo v2.22.14 allows authenticated a

An issue in Krayin CRM v.2.1.5 and fixed in v.2.1.6 allows a remote attacker to execute arbitrary code via the compose e

Improper Restriction of XML External Entity Reference vulnerability in RTI Connext Professional (Core Libraries) allows

When Keycloak is started with `--features-disabled=account,account-api`, the Account REST API is only partially disabled

U-SPEED N300 router V1.0.0 does not implement rate limiting or account lockout protections on the /api/login endpoint. T

A denial-of-service vulnerability exists in the U-SPEED N300 V1.0.0 wireless router. By sending a large number of concur

Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router V1.0.0 is vulnerable to Denial of Service via the boa web server URI h

A Cross-Site Request Forgery (CSRF) vulnerability exists in the web management interface of the Dbit N300 T1 Pro wireles

This CVE record was assigned not following CNA/CVE rules and is not considered a valid vulnerability by the Pallets Clic

A vulnerability in the assisted-service REST API, an optional Assisted Installer (assisted-service) component in the Mul

The Otter Blocks plugin for WordPress is vulnerable to Purchase Verification Bypass in all versions up to, and including

Improper Control of Interaction Frequency vulnerability in MeWare Software Development Inc. PDKS allows Flooding. This

Authorization bypass through User-Controlled key vulnerability in MeWare Software Development Inc. PDKS allows Privilege

Exposure of Sensitive Information to an Unauthorized Actor, Exposure of private personal information to an unauthorized

Insufficient validation of node IDs in Qt SVG module allows arbitrary QML/JavaScript code injection when loading malicio

Unauthenticated attackers can exploit a weakness in the XML parser functionality of Lobster_pro prior to version 4.12.6-

Dancer::Session::Abstract versions through 1.3522 for Perl generates session ids insecurely. The session id is generate

In JetBrains IntelliJ IDEA before 2024.3.7.1, 2025.1.7.1, 2025.2.6.2, 2025.3.4.1, 2026.1.1 reading arbitrary local f

In the Linux kernel, the following vulnerability has been resolved: cifs: some missing initializations on replay In se

LEX Baza Dokumentów is vulnerable to DOM-based XSS in "em" cookie parameter. The application unsafely processes the para

In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: fix double free via VMA splitting pri

In the Linux kernel, the following vulnerability has been resolved: Buffer overflow in drivers/xen/sys-hypervisor.c Th

In the Linux kernel, the following vulnerability has been resolved: rtnetlink: add missing netlink_ns_capable() check f

The Five Star Restaurant Reservations plugin for WordPress is vulnerable to a payment bypass via PHP type juggling in ve

NULL pointer dereference vulnerability in ASR1903 in ASR Lapwing_Linux on Linux (ims_client modules) allows Pointer Mani

Apache Airflow's SMTP provider `SmtpHook` called Python's `smtplib.SMTP.starttls()` without an SSL context, so no certif

Out-of-bounds read vulnerability in ASR Kestrel (nr_fw modules) allows Overflow Buffers. This vulnerability is associa

As dhclient is building an environment to pass to dhclient-script, it may need to resize the array of string pointers.

When exchanging data over a socket, libnv uses select(2) to wait for data to arrive. However, it does not verify whethe

When processing the header of an incoming message, libnv failed to properly validate the message size. The lack of vali

ColorOS Assistant has an unauthenticated start-download channel, leading to file path traversal.

Incorrect packet validation allowed unbounded recursion parsing SCTP chunk parameters. This can eventually result in a

An operator precedence bug in the kernel results in a scenario where a buffer overflow causes attacker-controlled data t

GSM RP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

WebSocket protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

SMB2 protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

BEEP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

ZigBee protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service