CVE-2026-7808 - justhtml before 1.16.0 contains multiple HTML sanitization bypass issues that can allow active/dange

CVE-2026-77088 - justhtml versions 0.9.0 through 1.21.0 contain a cross-site scripting vulnerability in to_markdown()

CVE-2026-74793 - justhtml before 3.11.0 contains a cross-site scripting vulnerability where the default sanitizer byp

CVE-2026-6827 - justhtml before 1.17.0 contains multiple security issues in sanitization, serialization, and program

CVE-2026-5751 - justhtml versions 1.13.0 and earlier contain a parser-differential / mutation cross-site scripting (

CVE-2026-5389 - justhtml versions before 1.13.0 contain a cross-site scripting vulnerability in the to_markdown() fu

CVE-2026-5388 - justhtml before 1.15.0 contains multiple security issues in URL sanitization helpers (clean_url_valu

CVE-2026-4671 - justhtml before 1.18.0 contains multiple low-severity denial-of-service issues in CSS selector handl

CVE-2026-78155 - privilege escalation in StackGres operator allows a low-privilege tenant who owns a database to gain

CVE-2026-78115 - A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. Affected is

CVE-2026-78112 - A flaw has been found in itsourcecode Hospital Management System Project in PHP 1.0. This impacts an

CVE-2026-10053 - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.8 before 19.0.6, 19.1

CVE-2026-77116 - Brave Popup Builder (slug: brave-popup-builder) has a broken access control issue in versions throug

CVE-2026-77115 - Brave Popup Builder (brave-popup-builder) up to version 0.8.5 reflects UTM query parameters into pop

CVE-2026-77003 - The Content Mask WordPress plugin before 1.8.5.5 does not check the capability required to publish t

CVE-2026-14853 - The WooCommerce Bookings WordPress plugin before 3.9.0 does not perform a capability check on one of

CVE-2026-13598 - The RestrictMate WordPress plugin before 1.3.0 does not restrict the user role supplied during acco

CVE-2026-78063 - A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function form

CVE-2026-78062 - A vulnerability was identified in vas3k TaxHacker up to 0.8.2. The affected element is the function

CVE-2026-78061 - A vulnerability was determined in vas3k TaxHacker up to 0.8.2. Impacted is the function buildImapCon

CVE-2026-78060 - A vulnerability was found in SourceCodester Stock Management System 1.0. This issue affects some unk

CVE-2026-78059 - A vulnerability has been found in SourceCodester Stock Management System 1.0. This vulnerability aff

CVE-2026-78057 - A flaw has been found in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe53

CVE-2026-78056 - A vulnerability was detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb

CVE-2026-78055 - A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0.

CVE-2026-78136 - chirpmyradio CHIRP before 39178db allows eval injection via crafted CSV data. This occurs in _clean_

CVE-2026-78054 - A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. Affected is

CVE-2026-78051 - A vulnerability was determined in alexta69 MeTube up to 2026.06.10. The impacted element is an unkno

CVE-2026-78050 - A vulnerability was found in Comfast CF-N1-S 2.6.0.1. The affected element is the function sub_41AD7

CVE-2026-5723 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-18027 - The WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels plugin for W

CVE-2026-16149 - The Security Hardener plugin for WordPress is vulnerable to Missing Authorization in all versions up

CVE-2026-0551 - The PPWP – Password Protect Pages plugin for WordPress is vulnerable to PHP Object Injection in all

CVE-2026-78122 - docker-socket-proxy fails to properly gate read endpoints in the /containers Docker API namespace wh

CVE-2026-78049 - A vulnerability has been found in Systerel S2OPC up to 1.7.3. Impacted is the function SOPC_NodeMgtH

CVE-2026-19684 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-47895 - In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that resul

CVE-2026-12999 - The Infineon Airoc Wi-Fi driver's transmit callback airoc_mgmt_send() in drivers/wifi/infineon/airoc

CVE-2026-74733 - In the Linux kernel, the following vulnerability has been resolved: gpio: pca953x: fix pca953x_irq_

CVE-2026-74732 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-74731 - In the Linux kernel, the following vulnerability has been resolved: sched_ext: Skip sub-disable tea

CVE-2026-74730 - In the Linux kernel, the following vulnerability has been resolved: NFS: Pin the 'struct nfs_server

CVE-2026-74729 - In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: lpc-snoop: Fix use

CVE-2026-74728 - In the Linux kernel, the following vulnerability has been resolved: xfs: handle NULL b_addr in xfs_

CVE-2026-74727 - In the Linux kernel, the following vulnerability has been resolved: ovpn: skip rehash for peers alr

CVE-2026-74726 - In the Linux kernel, the following vulnerability has been resolved: bonding: alb: re-check primary_

CVE-2026-74725 - In the Linux kernel, the following vulnerability has been resolved: enic: fix tx_hang_reset use-aft

CVE-2026-74724 - In the Linux kernel, the following vulnerability has been resolved: ipvs: avoid out-of-bounds write

CVE-2026-74723 - In the Linux kernel, the following vulnerability has been resolved: btrfs: lzo: reject inline exten

CVE-2026-74722 - In the Linux kernel, the following vulnerability has been resolved: btrfs: fix memory leak in btrfs

CVE-2026-74721 - In the Linux kernel, the following vulnerability has been resolved: accel/amxdna: Fix page-insertio

CVE-2026-74720 - In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer state for

CVE-2026-74719 - In the Linux kernel, the following vulnerability has been resolved: net/smc: fix qentry overwrite f

CVE-2026-74718 - In the Linux kernel, the following vulnerability has been resolved: devlink: fix net namespace refe

CVE-2026-74717 - In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fw_tracer, return NUL

CVE-2026-74716 - In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix locally expl

CVE-2026-74715 - In the Linux kernel, the following vulnerability has been resolved: bpf: Fix netns reference imbala

CVE-2026-74714 - In the Linux kernel, the following vulnerability has been resolved: bpf: tcp: Fix use-after-free in

CVE-2026-74713 - In the Linux kernel, the following vulnerability has been resolved: vhost_iotlb: bound map allocati

CVE-2026-74712 - In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: Fix buffer length in

CVE-2026-74711 - In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus) Fix type confusi

CVE-2026-74710 - In the Linux kernel, the following vulnerability has been resolved: xsk: require at least 16 bytes

CVE-2026-74709 - In the Linux kernel, the following vulnerability has been resolved: xsk: clear metadata pointer whe

CVE-2026-74708 - In the Linux kernel, the following vulnerability has been resolved: xsk: validate launch-time metad

CVE-2026-74707 - In the Linux kernel, the following vulnerability has been resolved: xsk: validate metadata when pro

CVE-2026-74706 - In the Linux kernel, the following vulnerability has been resolved: bnge: Fix NULL pointer derefere

CVE-2026-74705 - In the Linux kernel, the following vulnerability has been resolved: udp: fix potential use-after-fr

CVE-2026-74704 - In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_cake: drop WARN_

CVE-2026-74703 - In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: Validate T10 PI sca

CVE-2026-74702 - In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: reject feature chan

CVE-2026-74701 - In the Linux kernel, the following vulnerability has been resolved: net/openvswitch: check Ethernet

CVE-2026-74700 - In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: Always acqu

CVE-2026-74699 - In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix memory leak in exec

CVE-2026-74698 - In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix BQL reset on SQ

CVE-2026-74697 - In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Disable EOP for TPA on

CVE-2026-74696 - In the Linux kernel, the following vulnerability has been resolved: tcp: fix TFO max_qlen accountin

CVE-2026-74695 - In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_flow_table: drop

CVE-2026-74694 - In the Linux kernel, the following vulnerability has been resolved: net/ncsi: fix heap OOB read in

CVE-2026-74693 - In the Linux kernel, the following vulnerability has been resolved: net: prestera: validate firmwar

CVE-2026-74692 - In the Linux kernel, the following vulnerability has been resolved: net/smc: fix TOCTOU race betwee

CVE-2026-74691 - In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Tear down DMA

CVE-2026-74690 - In the Linux kernel, the following vulnerability has been resolved: s390/ism: Fix UAF of sba and ie

CVE-2026-74689 - In the Linux kernel, the following vulnerability has been resolved: net/atm: fix slab-out-of-bounds

CVE-2026-74688 - In the Linux kernel, the following vulnerability has been resolved: sctp: clear control chunk trans

CVE-2026-74687 - In the Linux kernel, the following vulnerability has been resolved: watchdog: at91sam9_wdt: prevent

CVE-2026-74686 - In the Linux kernel, the following vulnerability has been resolved: rqspinlock: Reset tail when pre

CVE-2026-74685 - In the Linux kernel, the following vulnerability has been resolved: hwmon: (ltc4282) Clamp negative

CVE-2026-74684 - In the Linux kernel, the following vulnerability has been resolved: net: tap: set skb->dev before p

CVE-2026-74683 - In the Linux kernel, the following vulnerability has been resolved: Input: evdev - sanitize event t

CVE-2026-74682 - In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix OOB write

CVE-2026-74681 - In the Linux kernel, the following vulnerability has been resolved: usb: misc: usbio: check ibuf_le

CVE-2026-74680 - In the Linux kernel, the following vulnerability has been resolved: usb: atm: cxacru: properly kill

CVE-2026-74679 - In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_ncm: Use unsigne

CVE-2026-74678 - In the Linux kernel, the following vulnerability has been resolved: net: usb: ax88179_178a: fix skb

CVE-2026-74677 - In the Linux kernel, the following vulnerability has been resolved: net: usb: ipheth: fix carrier_w

CVE-2026-74676 - In the Linux kernel, the following vulnerability has been resolved: vt: add permission check for KD

CVE-2026-74675 - In the Linux kernel, the following vulnerability has been resolved: vt: stabilize tty reference in

CVE-2026-74674 - In the Linux kernel, the following vulnerability has been resolved: mm: fix incorrect flush address

CVE-2026-74673 - In the Linux kernel, the following vulnerability has been resolved: Input: evdev - fix information

CVE-2026-74672 - In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: acquire init_mm loc

CVE-2026-74671 - In the Linux kernel, the following vulnerability has been resolved: ima: fix out-of-bounds read in

CVE-2026-74670 - In the Linux kernel, the following vulnerability has been resolved: ipvs: stop estimator after disa

CVE-2026-74669 - In the Linux kernel, the following vulnerability has been resolved: ipvs: clear IPv4 options after

CVE-2026-74668 - In the Linux kernel, the following vulnerability has been resolved: packet: use consistent hard_hea

CVE-2026-74667 - In the Linux kernel, the following vulnerability has been resolved: net/packet: reset the MAC heade

CVE-2026-74666 - In the Linux kernel, the following vulnerability has been resolved: packet: synchronize pressure cl

CVE-2026-74665 - In the Linux kernel, the following vulnerability has been resolved: net: fix skb length accounting

CVE-2026-74664 - In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reallocate up

CVE-2026-74663 - In the Linux kernel, the following vulnerability has been resolved: net/sched: reject overly deep q

CVE-2026-74662 - In the Linux kernel, the following vulnerability has been resolved: inet: frags: publish queues bef

CVE-2026-74661 - In the Linux kernel, the following vulnerability has been resolved: mac802154: fix netdev use-after

CVE-2026-74660 - In the Linux kernel, the following vulnerability has been resolved: netfilter: ebt_nflog: pin the N

CVE-2026-74659 - In the Linux kernel, the following vulnerability has been resolved: net: bridge: mrp: fix uninitial

CVE-2026-74658 - In the Linux kernel, the following vulnerability has been resolved: futex: Prevent robust futex exi

CVE-2026-74657 - In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix fib_nlmsg_size() for

CVE-2026-74656 - In the Linux kernel, the following vulnerability has been resolved: ipv4: fix use-after-free in fib

CVE-2026-74655 - In the Linux kernel, the following vulnerability has been resolved: serial: qcom-geni: fix TX DMA b

CVE-2026-74654 - In the Linux kernel, the following vulnerability has been resolved: serial: 8250_dma: Clear stale R

CVE-2026-74653 - In the Linux kernel, the following vulnerability has been resolved: serial: 8250_of: clear stuck em

CVE-2026-74652 - In the Linux kernel, the following vulnerability has been resolved: serial: amba-pl011: cancel RS48

CVE-2026-74651 - In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB rea

CVE-2026-74650 - In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB rea

CVE-2026-74649 - In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix missing

CVE-2026-74648 - In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: validate mo

CVE-2026-74647 - In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Remove buffer fr

CVE-2026-74646 - In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: take fl->lock wh

CVE-2026-74645 - In the Linux kernel, the following vulnerability has been resolved: mm/damon/lru_sort: error out fo

CVE-2026-74644 - In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: putback fo

CVE-2026-74643 - In the Linux kernel, the following vulnerability has been resolved: samples/damon/mtier: error out

CVE-2026-74642 - In the Linux kernel, the following vulnerability has been resolved: ALSA: usb: Fix UAF at delayed r

CVE-2026-74641 - In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: bound the hwdep mm

CVE-2026-74640 - In the Linux kernel, the following vulnerability has been resolved: ALSA: FCP: fix OOB write in fcp

CVE-2026-74639 - In the Linux kernel, the following vulnerability has been resolved: ALSA: us144mkii: re-anchor capt

CVE-2026-74638 - In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Serialize the schedule

CVE-2026-74637 - In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix group leader use

CVE-2026-74636 - In the Linux kernel, the following vulnerability has been resolved: tracing: Fix race between updat

CVE-2026-74635 - In the Linux kernel, the following vulnerability has been resolved: fbdev: bitblit: bound-check gly

CVE-2026-74634 - In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Prevent subbuf ord

CVE-2026-74633 - In the Linux kernel, the following vulnerability has been resolved: tracing: Fix NULL pointer deref

CVE-2026-74632 - In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: fix huge_zero_p

CVE-2026-74631 - In the Linux kernel, the following vulnerability has been resolved: net: smc: fix splice entry life

CVE-2026-74630 - In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent in6_dev_get() fro

CVE-2026-74629 - In the Linux kernel, the following vulnerability has been resolved: net/dibs: Correct freeing of dm

CVE-2026-74628 - In the Linux kernel, the following vulnerability has been resolved: net/x25: fix use-after-free of

CVE-2026-74627 - In the Linux kernel, the following vulnerability has been resolved: net: devmem: prevent net-iov /

CVE-2026-74626 - In the Linux kernel, the following vulnerability has been resolved: NTB: ntb_netdev: Preserve RX qu

CVE-2026-74625 - In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: release temp

CVE-2026-74624 - In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack: defer

CVE-2026-74623 - In the Linux kernel, the following vulnerability has been resolved: net: atlantic: free stranded TX

CVE-2026-74622 - In the Linux kernel, the following vulnerability has been resolved: net: atlantic: free RX pages of

CVE-2026-74621 - In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: fix sk_buff

CVE-2026-74620 - In the Linux kernel, the following vulnerability has been resolved: net/sched: act_gact, act_police

CVE-2026-74619 - In the Linux kernel, the following vulnerability has been resolved: ovl: don't warn when the mount

CVE-2026-74618 - In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: don't warn when th

CVE-2026-74617 - In the Linux kernel, the following vulnerability has been resolved: dibs: initialise dibs->lock in

CVE-2026-74616 - In the Linux kernel, the following vulnerability has been resolved: xdp: reject clones that overrun

CVE-2026-74615 - In the Linux kernel, the following vulnerability has been resolved: vxlan: do not arm the ageing ti

CVE-2026-74614 - In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: read virtqueues u

CVE-2026-74613 - In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: avoid refilling t

CVE-2026-74612 - In the Linux kernel, the following vulnerability has been resolved: veth: fix skb length accounting

CVE-2026-74611 - In the Linux kernel, the following vulnerability has been resolved: tls: rx: restore msg_iter befor

CVE-2026-74610 - In the Linux kernel, the following vulnerability has been resolved: tls: don't leave a full plainte

CVE-2026-74609 - In the Linux kernel, the following vulnerability has been resolved: tipc: read le->link under the n

CVE-2026-74608 - In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix use-after-free

CVE-2026-74607 - In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Serialize accesses to

CVE-2026-74606 - In the Linux kernel, the following vulnerability has been resolved: eventfs: Fix use-after-free in

CVE-2026-74605 - In the Linux kernel, the following vulnerability has been resolved: eventfs: Use children field for

CVE-2026-74604 - In the Linux kernel, the following vulnerability has been resolved: Revert "thermal/drivers/hwmon:

CVE-2026-74603 - In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: Fix board ID over-rea

CVE-2026-74602 - In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Initialise reader

CVE-2026-74601 - In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Use current_contex

CVE-2026-74600 - In the Linux kernel, the following vulnerability has been resolved: mm/page_table_check: skip speci

CVE-2026-74599 - In the Linux kernel, the following vulnerability has been resolved: mm/ptdump: always stabilise aga

CVE-2026-74598 - In the Linux kernel, the following vulnerability has been resolved: ipv6: fix Route Information opt

CVE-2026-74597 - In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: clear skb2->cb[] in

CVE-2026-74596 - In the Linux kernel, the following vulnerability has been resolved: fs,fsverity: remove check for f

CVE-2026-74595 - In the Linux kernel, the following vulnerability has been resolved: fscrypt: use the mount idmap fo

CVE-2026-74594 - In the Linux kernel, the following vulnerability has been resolved: sched/psi: Shut down rtpoll_tim

CVE-2026-74593 - In the Linux kernel, the following vulnerability has been resolved: sched_ext: Take cgroup_lock() f

CVE-2026-74592 - In the Linux kernel, the following vulnerability has been resolved: ima: Instantiate file_truncate

CVE-2026-74591 - In the Linux kernel, the following vulnerability has been resolved: mm/filemap: __filemap_add_folio

CVE-2026-74590 - In the Linux kernel, the following vulnerability has been resolved: fsverity: Fix bpf_get_fsverity_

CVE-2026-74589 - In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix sk_redir use-

CVE-2026-74588 - In the Linux kernel, the following vulnerability has been resolved: sctp: keep chunk->transport in

CVE-2026-74587 - In the Linux kernel, the following vulnerability has been resolved: sctp: fix use-after-free of cac

CVE-2026-74586 - In the Linux kernel, the following vulnerability has been resolved: sctp: clear new_transport when

CVE-2026-74585 - In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Bound the DROM dua

CVE-2026-4703 - The WS Form LITE – Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to PHP Object

CVE-2026-77992 - Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik < 4.7.2

CVE-2026-77027 - Joomla Extension - fabrikar.com - Unauthenticated stored XSS in Fabrik < 4.7.2 - The handling of use

CVE-2026-76609 - Joomla Extension - fabrikar.com - Unauthenticated modification of any comment in Fabrik < 4.7.2 - Th

CVE-2026-76608 - Joomla Extension - fabrikar.com - Unauthenticated disclosure of any commenter's email address in Fab

CVE-2026-76607 - Joomla Extension - fabrikar.com - Missing ACL check in download element in Fabrik < 4.7.2.

CVE-2026-76606 - Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik < 4.7.2.

CVE-2026-76605 - Joomla Extension - fabrikar.com - Remote code execution via image element in Fabrik < 4.7.2.

CVE-2026-76604 - Joomla Extension - fabrikar.com - Unauthenticated remote code execution via PHP form element in Fabr

CVE-2026-76603 - Joomla Extension - fabrikar.com - Unauthenticated row disclosure via form.inlineedit in Fabrik < 4.7

CVE-2026-76602 - Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik < 4.7.2 - The

CVE-2026-76601 - Joomla Extension - fabrikar.com - Unauthenticated row reordering in Fabrik < 4.7.2 - The order plugi

CVE-2026-76600 - Joomla Extension - fabrikar.com - Unauthenticated deletion of any comment in Fabrik < 4.7.2 - The De

CVE-2026-76599 - Joomla Extension - fabrikar.com - Unauthenticated database table list and table-prefix disclosure in

CVE-2026-76598 - Joomla Extension - fabrikar.com - Unauthenticated arbitrary directory listing via onAjax_getFolders

CVE-2026-76597 - Joomla Extension - fabrikar.com - Unauthenticated arbitrary file upload to web root via list email p

CVE-2026-76596 - Joomla Extension - fabrikar.com - Unauthenticated table truncation via list.doempty in Fabrik < 4.7.

CVE-2026-76571 - Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter i

CVE-2026-74584 - In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: zero shared page

CVE-2026-70626 - NLTK versions before 3.9.4 contain a symlink escape vulnerability in CorpusReader.open() that allows

CVE-2026-6258 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-68768 - hashcat contains a heap-based buffer overflow (out-of-bounds write) in the outfile_write() function

CVE-2026-68767 - hashcat's fgetl() function in src/filehandling.c writes a null terminator one byte past the caller's

CVE-2026-68766 - hashcat fails to restrict command-line options when parsing restore files, allowing attackers to inj

CVE-2026-66393 - NLTK versions before 3.9.4 contain an unbounded recursion vulnerability in JSONTaggedDecoder.decode_

CVE-2026-65915 - NLTK versions before 3.10.0 contain a logic bug in FileSystemPathPointer.open() where the sandbox va

CVE-2026-63312 - NLTK before 3.10.0 contains an arbitrary local file read vulnerability in StreamBackedCorpusView tha

CVE-2026-63311 - NLTK before 3.10.0 (affected versions <= 3.9.4) contains a server-side request forgery (SSRF) vulner

CVE-2026-63310 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-62388 - NLTK versions before 3.10.0 default to ENFORCE=False in pathsec.py, causing all security validation

CVE-2026-62385 - NLTK versions before 3.10.0 contain a path traversal vulnerability in FramenetCorpusReader and NKJPC

CVE-2026-62384 - NLTK versions before 3.10.2 contain a symlink-based sandbox bypass in FramenetCorpusReader that allo

CVE-2026-62383 - nltk versions before 3.10.2 contain a symlink-based arbitrary file read vulnerability in IPIPANCorpu

CVE-2026-75870 - Punk versions before 0.18 for Perl allow session cookie forgery via an empty default HMAC key when a

CVE-2026-75866 - Punk::OAuth2::Server versions through 0.03 for Perl issue access tokens outside a client's registere

CVE-2026-71514 - NLTK 3.9.4 through 3.10.2 contains a path traversal vulnerability in CrubadanCorpusReader. _load_lan

CVE-2026-71513 - NLTK before 3.10.3 contains a remote code execution vulnerability in AllowlistUnpickler that validat

CVE-2026-68769 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-5093 - The GreenShift – Animation and Page Builder Blocks plugin for WordPress is vulnerable to unauthorize

CVE-2026-4561 - The MC4WP: Mailchimp for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting

CVE-2026-4559 - The Image Photo Gallery Final Tiles Grid plugin for WordPress is vulnerable to Stored Cross-Site Scr

CVE-2026-2996 - The Advanced Product Fields (Product Addons) for WooCommerce plugin for WordPress is vulnerable to I

CVE-2026-62382 - PasswordPusher versions v1.45.11 through v2.9.5 contain an improper authorization vulnerability in t

CVE-2026-62381 - luci-lib-px5g (LuCI) contains a heap-based buffer overflow in the native ASN.1 encoding routine asn1

CVE-2026-62380 - Netty (io.netty:netty-codec-socks) versions 4.2.0.Final through 4.2.16.Final and 4.1.x through 4.1.1

CVE-2026-62243 - Netty (io.netty:netty-handler) versions from 4.2.0.Final through 4.2.16.Final and versions through 4

CVE-2026-62204 - SiYuan versions before v3.7.4 fail to validate that packageName matches the downloaded package conte

CVE-2026-60084 - SiYuan versions before v3.7.4 contain an arbitrary file deletion vulnerability in the /api/search/re

CVE-2026-60083 - SiYuan versions before v3.8.0 contain an incomplete path blocklist in the MCP file tool that fails t

CVE-2026-59809 - SiYuan before v3.8.0 interpolates secret placeholders into the destination URL parameter of the http

CVE-2026-59808 - AVideo through commit 9c39d8c8 contains an authentication bypass vulnerability where deduplicateByEn

CVE-2026-59256 - WWBN AVideo through commit 9c39d8c8 contains an authorization bypass vulnerability where getToken()

CVE-2026-58003 - WWBN AVideo through commit 9c39d8c8 contains a cross-site request forgery vulnerability in the relea

CVE-2026-58002 - WWBN AVideo through commit 9c39d8c8b4c1f75540788d6b391740852ceb0732 contains an authorization bypass

CVE-2026-58001 - WWBN AVideo through commit 9c39d8c8 contains a cross-site request forgery vulnerability in objects/v

CVE-2026-57998 - better-npm-audit through 3.11.0, and the 4.0.0-rc.2 prerelease, builds its npm audit command by inte

CVE-2026-57944 - AVideo through commit 9c39d8c8 contains a cross-site request forgery vulnerability in channelToGalle

CVE-2026-56380 - AVideo through commit 9c39d8c8 contains an information exposure vulnerability in feed/index.php that

CVE-2026-4244 - The Post Duplicator plugin for WordPress is vulnerable to unauthorized modification of data due to a

CVE-2026-11948 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-11947 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-77988 - A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. This vulnerability affects the func

CVE-2026-66917 - Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery < 4.4.0 - An authenticated, pr