2026

D-Link DIR-513 version 1.10 contains a critical-level vulnerability. When processing POST requests related to verificati

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetDDNS.

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSchedule.

An Arbitrary File Read vulnerability exists in the ImageTextPromptValue class in Exploding Gradients RAGAS v0.2.3 to v0.

Rakuten Viber Cloak mode in Android v25.7.2.0g and Windows v25.6.0.0–v25.8.1.0 uses a static and predictable TLS ClientH

Insufficient Verification of Data Authenticity, Improper Handling of Exceptional Conditions vulnerability in rustdesk-cl

Missing Authorization vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, An

Cleartext Transmission of Sensitive Information, Insufficiently Protected Credentials vulnerability in rustdesk-client R

Cleartext Transmission of Sensitive Information vulnerability in rustdesk-client RustDesk Client rustdesk-client on Wind

Cross-Site Request Forgery (CSRF) vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Li

A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient (St

Use of Password Hash With Insufficient Computational Effort, Improper Restriction of Excessive Authentication Attempts v

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution'), Use of Password Hash With Ins

A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient (Cl

Cross Site Scripting vulnerability in Koha 25.11 and before allows a remote attacker to execute arbitrary code via the N

xgrammar is an open-source library for efficient, flexible, and portable structured generation. Prior to version 0.1.32,

Mercurius is a GraphQL adapter for Fastify. Prior to version 16.4.0, a cross-site request forgery (CSRF) vulnerability w

Use of a Broken or Risky Cryptographic Algorithm vulnerability in rustdesk-server-pro RustDesk Server Pro rustdesk-serve

Use of a Broken or Risky Cryptographic Algorithm vulnerability in rustdesk-client RustDesk Client rustdesk-client on Win

Avira Internet Security contains a time-of-check time-of-use (TOCTOU) vulnerability in the Optimizer component. A privil

Avira Internet Security contains a deserialization of untrusted data vulnerability in the System Speedup component. The

Avira Internet Security contains an improper link resolution vulnerability in the Software Updater component. During the

Python-Markdown version 3.8 contain a vulnerability where malformed HTML-like sequences can cause html.parser.HTMLParser

The WowOptin: Next-Gen Popup Maker – Create Stunning Popups and Optins for Lead Generation plugin for WordPress is vulne

The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to PHP Object Injection in

In affected versions of Octopus Server it was possible to create a new API key from an existing access token resulting i

A improperly secured file management feature allows uploads of dangerous data types for unauthenticated users, leading t

In Eclipse Jetty, versions 12.0.0-12.0.31 and 12.1.0-12.0.5, class GzipHandler exposes a vulnerability when a compressed

The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs. Different

Race condition vulnerability in the device security management module. Impact: Successful exploitation of this vulnerabi

Race condition vulnerability in the permission management service. Impact: Successful exploitation of this vulnerability

Vulnerability of improper verification in the email application. Impact: Successful exploitation of this vulnerability m

Vulnerability of uninitialized pointer access in the scanning module. Impact: Successful exploitation of this vulnerabil

Buffer overflow vulnerability in the scanning module. Impact: Successful exploitation of this vulnerability may affect a

Permission bypass vulnerability in the system service framework. Impact: Successful exploitation of this vulnerability m

The Page and Post Clone plugin for WordPress is vulnerable to SQL Injection via the 'meta_key' parameter in the content_

Out-of-bounds write vulnerability in the IMS module. Impact: Successful exploitation of this vulnerability may affect av

Race condition vulnerability in the security control module. Impact: Successful exploitation of this vulnerability may a

Race condition vulnerability in the printing module. Impact: Successful exploitation of this vulnerability may affect av

Race condition vulnerability in the printing module. Impact: Successful exploitation of this vulnerability may affect av

Race condition vulnerability in the maintenance and diagnostics module. Impact: Successful exploitation of this vulnerab

Permission control vulnerability in the cellular_data module. Impact: Successful exploitation of this vulnerability may

Out-of-bounds character read vulnerability in Bluetooth. Impact: Successful exploitation of this vulnerability may affec

Data processing vulnerability in the certificate management module. Impact: Successful exploitation of this vulnerabilit

Path traversal vulnerability in the certificate management module. Impact: Successful exploitation of this vulnerability

Double free vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availab

HCL Sametime for iOS is impacted by a sensitive information disclosure. Hostnames information is written in application

The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Privilege Escalation in all versions up t

Permission control vulnerability in the resource scheduling module. Impact: Successful exploitation of this vulnerabilit

Arbitrary File Write via Path Traversal upload to Remote Code Execution in SeppMail User Web Interface. The affected fea