2026

HCL Aftermarket DPC is affected by Weak Password Policy vulnerability, which makes it easier for attackers to guess weak

HCL Aftermarket DPC is affected by Spamming Vulnerability which can allow the actor to excessive spamming can consume se

HCL Aftermarket DPC is affected by Unrestricted File Upload vulnerability, allows attacker to upload and execute malicio

HCL Aftermarket DPC is affected by Session Fixation which allows attacker to takeover the user's session and use it carr

HCL Aftermarket DPC is affected by File Discovery which allows attacker could exploit this issue to read sensitive files

Vulnerability related to an unquoted service path in Small HTTP Server 3.06.36, specifically affecting the executable lo

Reflected Cross Site Scripting (XSS) vulnerabilities in GDTaller. These vulnerabilities allows an attacker execute JavaS

Reflected Cross Site Scripting (XSS) vulnerabilities in GDTaller. These vulnerabilities allows an attacker execute JavaS

Problem in the Small HTTP Server v3.06.36 service. An authenticated path traversal vulnerability in '/' allows remote us

WebOfisi E-Ticaret 4.0 contains an SQL injection vulnerability in the 'urun' GET parameter of the endpoint that allows u

OpenBiz Cubi Lite 3.0.8 contains a SQL injection vulnerability in the login form that allows unauthenticated attackers t

qdPM 9.1 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information b

Online Quiz Maker 1.0 contains SQL injection vulnerabilities in the catid and usern parameters that allow authenticated

KomSeo Cart 1.3 contains an SQL injection vulnerability that allows attackers to inject SQL commands through the 'my_ite

ASP.NET jVideo Kit 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to inject SQL comma

Library CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication b

Online Store System CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate

SAT CFDI 3.3 contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting S

School Management System CMS 1.0 contains an SQL injection vulnerability in the admin login functionality that allows at

Wecodex Hotel CMS 1.0 contains an SQL injection vulnerability in the admin login functionality that allows unauthenticat

Wecodex Restaurant CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate d

Shipping System CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authenti

plank/laravel-mediable through version 6.4.0 can allow upload of a dangerous file type when an application using the pac

Mattermost versions 11.2.x <= 11.2.2, 10.11.x <= 10.11.10, 11.4.x <= 11.4.0, 11.3.x <= 11.3.1 fail to restrict team-leve

The VSL privileged helper does utilize NSXPC for IPC. The implementation of the "shouldAcceptNewConnection" function, wh

In the Linux kernel, the following vulnerability has been resolved: icmp: fix NULL pointer dereference in icmp_tag_vali

In the Linux kernel, the following vulnerability has been resolved: nfnetlink_osf: validate individual option lengths i

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix NULL deref in mesh_matches_loca

A security vulnerability has been detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This issue affects the functio

Vulnerability of incorrect authorization in HiJiffy Chatbot allows an attacker to download private messages from other u

Vulnerability of incorrect authorization in HiJiffy Chatbot allows an attacker to download private messages from other u

A weakness has been identified in Wavlink WL-NU516U1 260227. This vulnerability affects the function ftext of the file /

A security flaw has been discovered in 648540858 wvp-GB28181-pro up to 2.7.4. This affects the function GenericFastJsonR

A flaw was found in Keycloak. An authenticated attacker can perform Server-Side Request Forgery (SSRF) by manipulating t

A security flaw has been discovered in code-projects Simple Laundry System 1.0. Affected is an unknown function of the f

A vulnerability was identified in code-projects Simple Laundry System 1.0. This impacts an unknown function of the file

A vulnerability was determined in dameng100 muucmf 1.9.5.20260309. This affects an unknown function of the file /admin/e

A vulnerability was found in dameng100 muucmf 1.9.5.20260309. The impacted element is an unknown function of the file /a

Each RPCSEC_GSS data packet is validated by a routine which checks a signature in the packet. This routine copies a por

On a system exposing an NVMe/TCP target, a remote client can trigger a kernel panic by sending a CONNECT command for an

When a challenge ACK is to be sent tcp_respond() constructs and sends the challenge ACK and consumes the mbuf that is pa

The installer of RATOC RAID Monitoring Manager for Windows allows to customize the installation folder. If the installat

The installer of RATOC RAID Monitoring Manager for Windows searches the current directory to load certain DLLs. If a use

The LeadConnector WordPress plugin before 3.0.22 does not have authorization in a REST route, allowing unauthenticated u

The WP Lightbox 2 WordPress plugin before 3.0.7 does not sanitise and escape some of its settings, which could allow hig

The Responsive Plus WordPress plugin before 3.4.3 is vulnerable to arbitrary shortcode execution due to the software al

The Shared Files WordPress plugin before 1.7.58 allows users with a role as low as Contributor to download any file on

A vulnerability has been found in dameng100 muucmf 1.9.5.20260309. The affected element is an unknown function of the fi

A flaw has been found in dameng100 muucmf 1.9.5.20260309. Impacted is an unknown function of the file /admin/Member/inde

The Elementor Website Builder plugin for WordPress is vulnerable to Incorrect Authorization to Sensitive Information Exp