2026

Inappropriate implementation in ANGLE in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to leak cross-o

Out of bounds read in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to perform an out of

Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the render

Use after free in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code

Object corruption in V8 in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code ins

Use after free in Web MIDI in Google Chrome on Android prior to 146.0.7680.178 allowed a remote attacker to execute arbi

Integer overflow in ANGLE in Google Chrome on Windows prior to 146.0.7680.178 allowed a remote attacker who had compromi

Insufficient policy enforcement in WebUSB in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to obtain p

Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 146.0.7680.178 allowed a remote attacker to execute arbit

Integer overflow in Codecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to perform arbitrary read/

Use after free in CSS in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code insid

Heap buffer overflow in GPU in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code

A security vulnerability has been detected in welovemedia FFmate up to 2.0.15. Affected by this issue is some unknown fu

A weakness has been identified in bufanyun HotGo 1.0/2.0. Affected by this vulnerability is an unknown functionality of

A security flaw has been discovered in z-9527 admin 1.0/2.0. Affected is an unknown function of the file /server/routes/

A vulnerability was identified in z-9527 admin 1.0/2.0. This impacts an unknown function of the file /server/routes/user

A vulnerability was found in gougucms 4.08.18. This impacts an unknown function of the file \gougucms-master\app\admin\v

Addressed a potential insecure direct object reference (IDOR) vulnerability in the signing invitation acceptance process

Improper Restriction of XML External Entity Reference vulnerability in RTI Connext Professional (Cloud Discovery Service

The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to unauthorized access of d

The application's installer runs with elevated privileges but resolves system executables and DLLs using untrusted searc

The application's list box calculate array logic keeps stale references to page or form objects after they are deleted o

The application does not detect or guard against cyclic PDF object references while handling JavaScript in PDF. When pag

The application does not properly validate the lifetime and validity of internal view cache pointers after JavaScript ch

The application does not validate the presence of required appearance (AP) data before accessing stamp annotation resour

The application's update service, when checking for updates, loads certain system libraries from a search path that incl

The application allows PDF JavaScript and document/print actions (such as WillPrint/DidPrint) to update form fields, ann

A vulnerability has been found in gougucms 4.08.18. This affects the function reg_submit of the file gougucms-master\app

XenForo before 2.3.10 and before 2.2.19 is vulnerable to stored cross-site scripting (XSS) in structured text mentions,

XenForo before 2.3.9 and before 2.2.18 allows remote code execution (RCE) by authenticated, but malicious, admin users.

XenForo before 2.3.9 and before 2.2.18 is vulnerable to cross-site scripting (XSS) related to lightbox usage in posts. A

XenForo before 2.3.9 is vulnerable to stored cross-site scripting (XSS) related to BB code rendering. An attacker can in

Buffer Over-read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers.This issue affects C

XenForo before 2.3.7 discloses filesystem paths through exception messages triggered by open_basedir restrictions. This

XenForo before 2.3.7 does not properly restrict methods callable from within templates. A loose prefix match was used in

XenForo before 2.3.7 allows information disclosure via local account page caching on shared systems. On systems where mu

XenForo before 2.3.7 contains a security issue affecting Passkeys that have been added to user accounts. An attacker may

XenForo before 2.3.5 allows OAuth2 client applications to request unauthorized scopes. This affects any customer using O

IBM Storage Protect Server 8.2.0 IBM Storage Protect Plus Server is vulnerable to SQL injection. A remote attacker could

XenForo before 2.2.17 and 2.3.1 allows open redirect via a specially crafted URL. The getDynamicRedirect() function does

A security vulnerability has been detected in code-projects BloodBank Managing System 1.0. This affects an unknown part

A weakness has been identified in itsourcecode Payroll Management System 1.0. Affected by this issue is some unknown fun

The Booking for Appointments and Events Calendar - Amelia plugin for WordPress is vulnerable to SQL Injection via the `s

A security flaw has been discovered in itsourcecode Payroll Management System 1.0. Affected by this vulnerability is an

A vulnerability was identified in Axiomatic Bento4 up to 1.6.0-641. Affected is the function AP4_BitReader::SkipBits of

A vulnerability was determined in Axiomatic Bento4 up to 1.6.0-641. This impacts the function AP4_BitReader::ReadCache o

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, t

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, t

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, t