2026

FalkorDB Browser 1.9.3 contains an unauthenticated path traversal vulnerability in the file upload API that allows remot

The Gravity SMTP plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 2.1.4. Th

A plaintext storage of a password vulnerability in Synology SSL VPN Client before 1.4.5-0684 allows remote attackers to

A files or directories accessible to external parties vulnerability in Synology SSL VPN Client before 1.4.5-0684 allows

A security flaw has been discovered in musl libc up to 1.2.6. Affected is the function iconv of the file src/locale/icon

A vulnerability was identified in code-projects Vehicle Showroom Management System 1.0. This impacts an unknown function

A vulnerability was determined in code-projects Vehicle Showroom Management System 1.0. This affects an unknown function

A vulnerability was found in code-projects Vehicle Showroom Management System 1.0. The impacted element is an unknown fu

Livestatus injection in the prediction graph page in Checkmk <2.5.0b4, <2.4.0p26, and <2.3.0p47 allows an authenticated

Livestatus injection in the notification test mode in Checkmk <2.5.0b4 and <2.4.0p26 allows an authenticated user with a

Livestatus injection in the monitoring quicksearch in Checkmk <2.5.0b4 allows an authenticated attacker to inject livest

A vulnerability has been found in code-projects Vehicle Showroom Management System 1.0. The affected element is an unkno

A flaw has been found in code-projects Vehicle Showroom Management System 1.0. Impacted is an unknown function of the fi

A vulnerability was determined in CodeAstro Online Classroom 1.0. Affected is an unknown function of the file /updatedet

A vulnerability was found in code-projects Simple Laundry System 1.0. This impacts an unknown function of the file /chec

A vulnerability has been found in code-projects Simple IT Discussion Forum 1.0. This affects an unknown function of the

A stack-based buffer overflow vulnerability exists in Notepad++ version 8.9.3 in the file drop handler component. When a

OpenStack Skyline before 5.0.1, 6.0.0, and 7.0.0 has a DOM-based Cross-Site Scripting (XSS) vulnerability in the console

When configuring SSL bundles in Spring Cloud Gateway by using the configuration property spring.ssl.bundle, the configur

A flaw has been found in itsourcecode Construction Management System 1.0. The impacted element is an unknown function of

A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024. The affected element is the function setVpnAccoun

A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Impacted is the function setPptpSer

A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024. This issue affects the function setUrlFilterRul

A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. This vulnerability affects the function se

The YITH WooCommerce Wishlist WordPress plugin before 4.13.0 does not properly validate wishlist ownership in the save_t

Emocheck insecurely loads Dynamic Link Libraries (DLLs). If a crafted DLL file is placed to the same directory, an arbit

A Stored Cross-Site Scripting (XSS) vulnerability was identified in the social feature of parisneo/lollms, affecting the

The YML for Yandex Market WordPress plugin before 5.0.26 is vulnerable to Remote Code Execution via the feed generation

A vulnerability was identified in Totolink A7100RU 7.4cu.2313_b20191024. This affects the function setSyslogCfg of the f

A vulnerability was determined in Tenda i6 1.0.0.7(2204). Affected by this issue is the function R7WebsSecurityHandlerfu

A vulnerability was found in Tenda AC9 15.03.02.13. The affected element is the function decodePwd of the file /goform/W

A vulnerability has been found in Tenda AC9 15.03.02.13. Impacted is the function formQuickIndex of the file /goform/Qui

An integer overflow existed in the wolfCrypt CMAC implementation, that could be exploited to forge CMAC tags. The functi

A flaw has been found in D-Link DIR-513 1.10. This issue affects the function formAdvanceSetup of the file /goform/formA

A vulnerability was detected in D-Link DIR-513 1.10. This vulnerability affects the function formSetRoute of the file /g

A security vulnerability has been detected in D-Link DIR-513 1.10. This affects the function formSetPassword of the file

A weakness has been identified in OpenClaw up to 2026.1.26. Affected by this issue is some unknown functionality of the

The installer certificate files in the …/bootstrap/common/ssl folder do not seem to have restricted permissions on Windo

A security flaw has been discovered in CodeAstro Online Classroom 1.0/2.php. Affected by this vulnerability is an unknow

A vulnerability was found in itsourcecode Construction Management System 1.0. This affects an unknown function of the fi

A vulnerability has been found in code-projects Patient Record Management System 1.0. The impacted element is an unknown

A flaw has been found in code-projects Patient Record Management System 1.0. The affected element is an unknown function

wolfSSL_X509_verify_cert in the OpenSSL compatibility layer accepts a certificate chain in which the leaf's signature is

wolfSSL's wc_PKCS7_DecodeAuthEnvelopedData() does not properly sanitize the AES-GCM authentication tag length received a

In wolfSSL's EVP layer, the ChaCha20-Poly1305 AEAD decryption path in wolfSSL_EVP_CipherFinal (and related EVP cipher fi

wolfSSL's ECCSI signature verifier `wc_VerifyEccsiHash` decodes the `r` and `s` scalars from the signature blob via `mp_

An integer underflow issue exists in wolfSSL when parsing the Subject Alternative Name (SAN) extension of X.509 certific

The AddFunc Head & Footer Code plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `aFhfc_head_cod

A vulnerability was detected in code-projects Simple IT Discussion Forum 1.0. Impacted is an unknown function of the fil

A security vulnerability has been detected in code-projects Simple IT Discussion Forum 1.0. This issue affects some unkn