2026

Mitgation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation could be bypassed for certain b

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-1

ImageMagick is free and open-source software used for editing and manipulating digital images. Versions below 7.1.2-19 a

ImageMagick is free and open-source software used for editing and manipulating digital images. Versions below both 7.1.2

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-1

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-1

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.

jq is a command-line JSON processor. In versions 1.8.1 and below, functions jv_setpath(), jv_getpath(), and delpaths_sor

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.

An Improper Access Control vulnerability could allow a malicious actor with access to the UniFi Play network to obtain U

An Improper Input Validation vulnerability could allow a malicious actor with access to the UniFi Play network to cause

An Improper Access Control vulnerability could allow a malicious actor with access to the UniFi Play network to enable S

A series of Improper Input Validation vulnerabilities could allow a Command Injection by a malicious actor with access t

A malicious actor with access to the UniFi Play network could exploit a Path Traversal vulnerability found in the device

A vulnerability was determined in aandrew-me ytDownloader up to 3.20.2. This affects the function child_process.exec of

A vulnerability was found in aandrew-me ytDownloader up to 3.20.2. Affected by this issue is the function createTextNode

A security vulnerability has been detected in DbGate up to 7.1.4. This affects an unknown function of the file packages/

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-1

EspoCRM is an open source customer relationship management application. In versions 9.3.3 and below, the POST /api/v1/Em

EspoCRM is an open source customer relationship management application. In versions 9.3.3 and below, the POST /api/v1/At

Craft Commerce is an ecommerce platform for Craft CMS. In versions 5.0.0 through 5.5.4, an SQL injection vulnerability e

Craft Commerce is an ecommerce platform for Craft CMS. In versions 4.0.0 through 4.10.2 and 5.0.0 through 5.5.4, there i

An issue in the Bluetooth RFCOMM service of Parani M10 Motorcycle Intercom v2.1.3 allows unauthorized attackers to cause

A HTML Injection vulnerability exists in the Dashboard module of Vtiger CRM 8.4.0. The application fails to properly neu

Vtiger CRM 8.4.0 contains a reflected cross-site scripting (XSS) vulnerability in the MailManager module. Improper handl

In Phpgurukul Online Course Registration v3.1, an arbitrary file upload vulnerability was discovered within the profile

A weakness has been identified in DbGate up to 7.1.4. The impacted element is the function apiServerUrl1 of the file pac

A security flaw has been discovered in code-projects Easy Blog Site 1.0. This affects an unknown function of the file po

A vulnerability was identified in CodeAstro Online Job Portal 1.0. The impacted element is an unknown function of the fi

EspoCRM is an open source customer relationship management application. Versions 9.3.3 and below have a stored HTML inje

EspoCRM is an open source customer relationship management application. Versions 9.3.3 and below have an authenticated S

nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus a

Craft Commerce is an ecommerce platform for Craft CMS. In versions 4.0.0 through 4.10.2 and 5.0.0 through 5.5.4, the Pay

An issue in the <code>pickle</code> protocol of Pyro v3.x allows attackers to execute arbitrary code via supplying a cra

A vulnerability was determined in Tenda F456 1.0.0.5. The affected element is the function formwebtypelibrary of the fil

A vulnerability was found in Tenda F456 1.0.0.5. Impacted is the function fromqossetting of the file /goform/qossetting.

A vulnerability has been found in Tenda F456 1.0.0.5. This issue affects the function fromNatStaticSetting of the file /

A flaw has been found in Tenda F456 1.0.0.5. This vulnerability affects the function formWrlsafeset of the file /goform/

Pachno 1.0.6 contains a deserialization vulnerability that allows unauthenticated attackers to execute arbitrary code by

Pachno 1.0.6 contains an authentication bypass vulnerability in the runSwitchUser() action that allows authenticated low

Pachno 1.0.6 contains an XML external entity injection vulnerability that allows unauthenticated attackers to read arbit

Pachno 1.0.6 contains a cross-site request forgery vulnerability that allows attackers to perform arbitrary actions in a

Pachno 1.0.6 contains an unrestricted file upload vulnerability that allows authenticated users to upload arbitrary file

Pachno 1.0.6 contains an open redirection vulnerability that allows attackers to redirect users to arbitrary external we

Pachno 1.0.6 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary HTML and sc

The `/registercrd` endpoint in KubePlus 4.14 in the kubeconfiggenerator component is vulnerable to command injection. Th