2026

An improper resource deallocation and closure vulnerability in the tools/zmqsend.c component of FFmpeg v8.0.1 allows att

An out-of-bounds read in the read_global_param() function (libavcodec/av1dec.c) of FFmpeg v8.0.1 allows attackers to cau

A stack overflow in the experimental/tinyobj_loader_opt.h file of tinyobjloader commit d56555b allows attackers to cause

A vulnerability in the `TFSMLayer` class of the `keras` package, version 3.13.0, allows attacker-controlled TensorFlow S

Before Airflow 3.2.0, it was unclear that secure Airflow deployments require the Deployment Manager to take appropriate

Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL Injection in the file /rsms/a

Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL injection in the file /rsms/a

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_log: fix uninitialized padding

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: fix use of uninitializ

In the Linux kernel, the following vulnerability has been resolved: ACPI: EC: clean up handlers on probe failure in acp

In the Linux kernel, the following vulnerability has been resolved: rds: ib: reject FRMR registration before IB connect

In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: restrict xt_check_match/xt_che

In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_hfsc: fix divide-by-zero in rtsc_min

In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_flow: fix NULL pointer dereference o

In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_fw: fix NULL pointer dereference on

In the Linux kernel, the following vulnerability has been resolved: bridge: mrp: reject zero test interval to avoid OOM

In the Linux kernel, the following vulnerability has been resolved: net: bonding: fix use-after-free in bond_xmit_broad

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: drop logically empty buckets in m

In the Linux kernel, the following vulnerability has been resolved: net/x25: Fix overflow when accumulating packets Ad

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_log: account for netlink heade

In the Linux kernel, the following vulnerability has been resolved: ipv6: avoid overflows in ip6_datagram_send_ctl() Y

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_expect: use expect->helper

Sourcecodester Cab Management System 1.0 is vulnerable to SQL Injection in the file /cms/admin/bookings/view_booking.php

Sourcecodester Cab Management System v1.0 is vulnerable to SQL injection in the file /cms/admin/categories/view_category

Sourcecodester Online Reviewer System v1.0 is vulnerable to SQL Injection in the file /system/system/admins/assessments/

Sourcecodester Online Reviewer System v1.0 is vulnerale to SQL Injection in the file /system/system/admins/assessments/e

Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/load_student.php.

Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/load_admin.php.

Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/load_book.php.

Server-Side Request Forgery via SW-URL Header vulnerability in Apache SkyWalking MCP. This issue affects Apache SkyWalk

LibreNMS versions before 26.3.0 are affected by an authenticated remote code execution vulnerability by abusing the Bina

LibreNMS versions before 26.3.0 are affected by an authenticated Cross-site Scripting vulnerability on the showconfig pa

Stored Cross-Site Scripting (XSS) via Unsanitized Topology Metadata in Apache Storm UI Versions Affected: before 2.8.6

Deserialization of Untrusted Data vulnerability in Apache Storm. Versions Affected: before 2.8.6. Description: When p

A vulnerability has been found in 1Panel-dev MaxKB up to 2.4.2. Impacted is an unknown function of the file ui/src/chat.

A Code Injection and Missing Authentication vulnerability in Google Agent Development Kit (ADK) versions 1.7.0 (and 2.0.

An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms duri

A certificate validation vulnerability in Palo Alto Networks Autonomous Digital Experience Manager on Windows allows an

A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows allows a local Windows admin

A flaw has been found in TOTOLINK A7000R up to 9.1.0u.6115. The affected element is the function setWiFiEasyGuestCfg of

A vulnerability was detected in code-projects Faculty Management System 1.0. Impacted is an unknown function of the file

A security vulnerability has been detected in code-projects Vehicle Showroom Management System 1.0. This issue affects s

An attacker can control a server-side HTTP request by supplying a crafted URL, causing the server to initiate requests t

Solstice::Session versions through 1440 for Perl generates session ids insecurely. The _generateSessionID method return

The ZTE ZXEDM iEMS product has a password reset vulnerability for any user.Because the management of the cloud EMS porta

The Product Filter for WooCommerce by WBW WordPress plugin before 3.1.3 does not sanitize and escape a parameter before

Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect av

Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect av

The Form Maker by 10Web WordPress plugin before 1.15.38 does not properly prepare SQL queries when the "MySQL Mapping"

A weakness has been identified in code-projects Vehicle Showroom Management System 1.0. This vulnerability affects unkno