2026

An attacker may exploit the use of weak CBC-based cipher suites in the device’s SSH service to potentially observe or ma

A flaw was found in Keycloak’s WebAuthn registration component. This vulnerability allows an attacker to bypass the conf

IM-LogicDesigner module of intra-mart Accel Platform contains insecure deserialization issue. This can be exploited only

A flaw was found in rubyipmi, a gem used in the Baseboard Management Controller (BMC) component of Red Hat Satellite. An

A flaw was found in Keycloak. An administrator with `manage-users` permission can bypass the "Only administrators can vi

A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation component. This vulnerability allows

A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Event Streams. This vulnerabilit

A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Event Stream API. This vulnerabi

n authorization flaw in Foreman's GraphQL API allows low-privileged users to access metadata beyond their assigned permi

A flaw was found in uv. This vulnerability allows an attacker to execute malicious code during package resolution or ins

A weakness has been identified in SourceCodester Doctor Appointment System 1.0. Affected by this issue is some unknown f

Insufficient protection mechanisms in the Health Module may lead to partial information disclosure.

The SmartRemote module has insufficient restrictions on loading URLs, which may lead to some information leakage.

The Xpro Addons — 140+ Widgets for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the p

The Automotive Car Dealership Business WordPress Theme for WordPress is vulnerable to Stored Cross-Site Scripting via th

The Listee theme for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.1.6. This i

A security flaw has been discovered in Totolink N300RH 6.1c.1353_B20190305. Affected by this vulnerability is the functi

A weakness has been identified in snowflakedb snowflake-jdbc up to 4.0.1. Impacted is the function SdkProxyRoutePlanner

telnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by abusing systemd service creden

The installers for multiple products provided by Soliton Systems K.K. contain an issue with incorrect default permission

A security vulnerability has been detected in jizhiCMS up to 2.5.6. Affected is the function findAll in the library frph

A weakness has been identified in Sanluan PublicCMS 6.202506.d. This impacts the function saveMetadata of the file Templ

A security flaw has been discovered in youlaitech youlai-mall 2.0.0. This affects the function listPagedSpuForApp of the

In the query parser in OpenStack Vitrage before 12.0.1, 13.0.0, 14.0.0, and 15.0.0, a user allowed to access the Vitrage

The WP Recipe Maker plugin for WordPress is vulnerable to an Insecure Direct Object Reference (IDOR) in versions up to,

Since the encryption algorithm used to protect firmware updates is itself encrypted using key material available to an a

A vulnerability was identified in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3. The impacted element is the function Save

The Fluent Forms Pro Add On Pack plugin for WordPress is vulnerable to Insufficient Verification of Data Authenticity in

In OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal deserialization (runtime/intern.c) enables re

In OpenClaw before 2026.2.23, tools.exec.safeBins validation for sort could be bypassed via GNU long-option abbreviation

A vulnerability was determined in berry-lang berry up to 1.1.0. The affected element is the function scan_string of the

A vulnerability was found in libvips 8.19.0. Impacted is the function vips_extract_area_build of the file libvips/conver

A vulnerability has been found in libvips 8.19.0. This issue affects the function vips_extract_band_build of the file li

A flaw has been found in libvips 8.19.0. This vulnerability affects the function vips_unpremultiply_build of the file li

A vulnerability was detected in libvips 8.19.0. This affects the function vips_bandrank_build of the file libvips/conver

A weakness has been identified in Tenda F453 1.0.0.3. This affects the function fromAddressNat of the file /goform/addre

A security flaw has been discovered in Tenda F453 1.0.0.3. Affected by this issue is the function frmL7ProtForm of the f

An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker t

An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker

An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker

An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated atta

An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in EFM-Networks, Inc. IpTIME T5008, EFM-Network

Stack-based Buffer Overflow vulnerability in SimTech Systems, Inc. ThinkWise allows Remote Code Inclusion.This issue aff

An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker

An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker

An arbitrary file-read vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling unauthenticated attackers to

A stack based buffer overflow exists in an API route of XWEB Pro version 1.12.1 and prior, enabling unauthenticated att

An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker

A vulnerability was identified in Tenda F453 1.0.0.3. Affected by this vulnerability is the function formWrlsafeset of t