2026

An arbitrary file overwrite vulnerability in Tinybeans Private Family Album App v5.9.5-prod allows attackers to overwrit

An arbitrary file overwrite vulnerability in Deep Thought Industries ACE Scanner PDF Scanner v1.4.5 allows attackers to

A local file inclusion vulnerability in the upload/download flow of the VertiGIS FM application allows authenticated att

MetInfo CMS versions 7.9, 8.0, and 8.1 contain an unauthenticated PHP code injection vulnerability that allows remote at

Dell AppSync, version(s) 4.6.0, contain(s) an Incorrect Permission Assignment for Critical Resource vulnerability. A low

Dell AppSync, version(s) 4.6.0, contain(s) an UNIX Symbolic Link (Symlink) Following vulnerability. A low privileged att

A vulnerability was identified in MEPIS RM, an industrial software product developed by Metronik. The application contai

Insufficient permission validation on multiple REST API Quick Setup endpoints in Checkmk 2.5.0 (beta) before version 2.5

Blind server-side request forgery (SSRF) vulnerability in legacy connection methods of document co-authoring features in

An improper access check allows unauthorized access to webservice endpoints.

Lack of input validation leads to an arbitrary file deletion vulnerability in the autoupdate server mechanism.

Lack of output escaping for article titles leads to XSS vectors in various locations.

Lack of output escaping leads to a XSS vector in the multilingual associations component.

Improperly built order clauses lead to a SQL injection vulnerability in the articles webservice endpoint.

The ajax component was excluded from the default logged-in-user check in the administrative area. This behavior was pote

A vulnerability was detected in Harvard University IQSS Dataverse up to 6.8. This affects an unknown function of the fil

Ericsson Packet Core Controller (PCC) versions prior to 1.38 contain a vulnerability where an attacker sending a large v

A vulnerability was identified in Shandong Hoteam InforCenter PLM up to 8.3.8. The impacted element is the function uplo

A vulnerability was identified in Juju from version 3.2.0 until 3.6.19 and from version 4.0 until 4.0.4, where the inter

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force U

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race between freeing data and fs acce

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race on rawdata dereference There is

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix differential encoding verification D

In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix double free of ns_name in aa_replace_

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix missing bounds check on DEFAULT table

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix side-effect bug in match_char() macro

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix: limit the number of levels of policy

In the Linux kernel, the following vulnerability has been resolved: apparmor: replace recursive profile removal with it

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix memory leak in verify_header The fun

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Only WARN in direct MMUs when overwri

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Drop/zap existing present SPTE even w

A vulnerability was determined in AutohomeCorp frostmourne up to 1.0. The affected element is an unknown function of the

PowerStore, contains a Path Traversal vulnerability in the Service user. A low privileged attacker with local access cou

Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application version(s) 5.28.00.xx to 5.32.00.xx, contain(s) an Impro

A vulnerability was found in Sanster IOPaint 1.5.3. Impacted is the function _get_file of the file iopaint/file_manager/

A regression in the way hashes were calculated caused rules containing the address range syntax (x.x.x.x - y.y.y.y) that

A vulnerability has been found in code-projects Simple Laundry System 1.0. This issue affects some unknown processing of

A flaw has been found in code-projects Simple Laundry System 1.0. This vulnerability affects unknown code of the file /m

A vulnerability was detected in code-projects Simple Laundry System 1.0. This affects an unknown part of the file /delst

The Export All URLs WordPress plugin before 5.1 generates CSV filenames containing posts URLS (including private posts)

The Order Notification for WooCommerce WordPress plugin before 3.6.3 overrides WooCommerce's permission checks to grant

Out of bounds read in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to perform an out of

Inappropriate implementation in WebGL in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to obtain poten

Use after free in Compositing in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the

Use after free in Navigation in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the

Use after free in WebView in Google Chrome on Android prior to 146.0.7680.178 allowed a remote attacker who had compromi

Use after free in PDF in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code insid

Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via

Use after free in WebGL in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code ins

Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the render