2026

An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in YMFE yapi v

An issue pertaining to CWE-312: Cleartext Storage of Sensitive Information was discovered in lesspass lesspass v9.6.9 wh

An issue pertaining to CWE-319: Cleartext Transmission of Sensitive Information was discovered in Nexusoft NexusInterfac

An issue pertaining to CWE-400: Uncontrolled Resource Consumption was discovered in Nexusoft NexusInterface v3.2.0-beta.

An issue pertaining to CWE-829: Inclusion of Functionality from Untrusted Control Sphere was discovered in Miazzy oa-fro

An issue pertaining to CWE-918: Server-Side Request Forgery was discovered in oslabs-beta ThermaKube master.

An issue pertaining to CWE-532: Insertion of Sensitive Information into Log File was discovered in LupinLin1 jimeng-web-

In the Linux kernel, the following vulnerability has been resolved: fs/xattr: missing fdput() in fremovexattr error pat

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formdumpeasysetup.

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWAN_Wizard534.

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWAN_Wizard52.

An issue pertaining to CWE-400: Uncontrolled Resource Consumption was discovered in YMFE yapi v1.12.0 and allows attacke

GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malfor

GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malfor

Actual Sync Server allows authenticated users to upload files through POST /sync/upload-user-file. In versions prior to

Malicious scripts could display attacker-controlled web content under spoofed domains in Focus for iOS by stalling a _se

A vulnerability has been found in SourceCodester Resort Reservation System 1.0. The affected element is an unknown funct

The rtsock_msg_buffer() function serializes routing information into a buffer. As a part of this, it copies sockaddr st

Due to a programming error, blocklistd leaks a socket descriptor for each adverse event report it receives. Once a cert

Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permission to re

A flaw has been found in Tiandy Easy7 CMS Windows 7.17.0. Impacted is an unknown function of the file /Easy7/apps/WebSer

A vulnerability was detected in SourceCodester Patients Waiting Area Queue Management System 1.0. This issue affects som

If two sibling jails are restricted to separate filesystem trees, which is to say that neither of the two jail root dire

By default, jailed processes cannot mount filesystems, including nullfs(4). However, the allow.mount.nullfs option enab

In some cases, the `tcp-setmss` handler may free the packet data and throw an error without halting the rule processing

The rtsol(8) and rtsold(8) programs do not validate the domain search list options provided in router advertisement mess

A security vulnerability has been detected in OWASP DefectDojo up to 2.55.4. This vulnerability affects the function inp

A weakness has been identified in UTT HiPER 810G up to 1.7.7-1711. This affects the function strcpy of the file /goform/

In AWS Auth manager, the origin of the SAML authentication has been used as provided by the client and not verified agai

A user with access to the DB could craft a database entry that would result in executing code on Triggerer - which gives

A security flaw has been discovered in UTT HiPER 810G up to 1.7.7-1711. Affected by this issue is the function strcpy of

A vulnerability was identified in opencc JFlow up to 5badc00db382d7cb82dad231e6a866b18e0addfe. Affected by this vulnerab

A SQL injection vulnerability has been found in Eventobot. This vulnerability allows an attacker to retrieve, create, up

A reflected Cross-Site Scripting (XSS) vulnerability has been found in Eventobot. This vulnerability allows an attacker

A vulnerability was determined in itsourcecode Payroll Management System 1.0. Affected is an unknown function of the fil

A vulnerability was found in Tenda FH1202 1.2.0.14(408). This impacts the function fromP2pListFilter of the file /goform

Improper Input Validation vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.0.0 before 1.3.7, from

A vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.0.0 before 1.3.7, from 2.0.0 before 2.0.7. Us

In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of serv

In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of serv

In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of serv

In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of serv

In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of serv

In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of serv

In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of serv

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional

An unauthenticated remote attacker can obtain valid session tokens because they are exposed in plaintext within the URL

A high-privileged remote attacker can fully compromise the device by abusing an update signature bypass vulnerability in

A low-privileged remote attacker can trigger a stack-based buffer overflow via a crafted HTTP POST request using the ubr

Due to insufficient authorization enforcement, an unauthorized remote attacker can exploit the wwwupload.cgi endpoint to