2026

A vulnerability was found in SourceCodester/mayuri_k Best Courier Management System 1.0. Affected by this issue is some

A weakness has been identified in shsuishang modulithshop up to 829bac71f507e84684c782b9b062b8bf3b5585d6. The impacted e

A flaw was found in Keycloak. An authenticated user with the uma_protection role can bypass User-Managed Access (UMA) po

A flaw was found in Keycloak. An unauthenticated attacker can exploit this vulnerability by sending a specially crafted

A flaw was found in Keycloak. The SingleUseObjectProvider, a global key-value store, lacks proper type and namespace iso

A flaw was found in Keycloak. The SingleUseObjectProvider, a global key-value store, lacks proper type and namespace iso

A flaw was found in Keycloak. This issue allows an attacker, who controls another path on the same web server, to bypass

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mark O’Donnell MST

A security flaw has been discovered in efforthye fast-filesystem-mcp up to 3.5.1. The affected element is the function h

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix constant blinding for PROBE_MEM32 stores

In the Linux kernel, the following vulnerability has been resolved: mm/mseal: update VMA end correctly on merge Previo

In the Linux kernel, the following vulnerability has been resolved: futex: Fix UaF between futex_key_to_node_opt() and

In the Linux kernel, the following vulnerability has been resolved: tls: Purge async_hold in tls_decrypt_async_wait()

In the Linux kernel, the following vulnerability has been resolved: clsact: Fix use-after-free in init/destroy rollback

In the Linux kernel, the following vulnerability has been resolved: netfilter: bpf: defer hook memory release until rcu

A vulnerability was identified in SourceCodester Leave Application System 1.0. Impacted is an unknown function of the fi

Allocation of Resources Without Limits or Throttling vulnerability in gleam-wisp wisp allows a denial of service via mul

A vulnerability was determined in Cesanta Mongoose up to 7.20. Affected is the function mg_tls_verify_cert_signature of

A vulnerability was found in Cesanta Mongoose up to 7.20. This impacts the function handle_mdns_record of the file mongo

An unauthenticated remote attacker can access a configuration file containing database credentials. This can result in a

An unauthenticated remote attacker can exploit an unauthenticated blind SQL Injection vulnerability in the mb24api endpo

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the setinfo endpoint du

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getinfo endpoint du

Due to the improper neutralisation of special elements used in an OS command, a remote attacker can exploit an RCE vulne

SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to bypass subject sanitization and forge security

SEPPmail Secure Email Gateway before version 15.0.3 does not properly authenticate the inner message of S/MIME-encrypted

SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to forge a GINA-encrypted email.

SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to bypass subject sanitization and forge tags suc

SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to cause attacker-controlled certificates to be u

SEPPmail Secure Email Gateway before version 15.0.3 allows account takeover by abusing GINA account initialization to re

SEPPmail Secure Email Gateway before version 15.0.3 allows attackers with a specially crafted email address to claim ano

SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to hide security tags from users by crafting a lo

SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to inject HTML into notification emails about new

SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to craft a password-tag that bypasses subject san

SEPPmail Secure Email Gateway before version 15.0.3 allows an external user to modify GINA webdomain metadata and bypass

SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to upload PGP keys with UIDs that do not match th

SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker with access to a victim's GINA account to bypass

SEPPmail Secure Email Gateway before version 15.0.3 allows attackers with a specially crafted email address to read the

Code execution in AssistFeedbackService of TECNO Pova7 Pro 5G on Android allows local apps to execute arbitrary code as

A vulnerability has been found in Cesanta Mongoose up to 7.20. This affects the function mg_tls_recv_cert of the file mo

The W3 Total Cache plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 2.9.

The Webmention plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5

The Webmention plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5

A vulnerability was determined in SourceCodester Simple Customer Relationship Management System 1.0. This issue affects

A vulnerability was found in priyankark a11y-mcp up to 1.0.5. This vulnerability affects the function A11yServer of the

A vulnerability has been found in AlejandroArciniegas mcp-data-vis bc597e391f184d2187062fd567599a3cb72adf51/de5a51525a69

The MW WP Form plugin for WordPress is vulnerable to arbitrary file moving due to insufficient file path validation via

The Spam Protect for Contact Form 7 WordPress plugin before 1.2.10 allows logging to a PHP file, which could allow an at

A flaw has been found in vanna-ai vanna up to 2.0.2. Affected by this issue is some unknown functionality of the compone

A vulnerability was detected in vanna-ai vanna up to 2.0.2. Affected by this vulnerability is an unknown functionality o