CVE-2026-10588 - A potential vulnerability could allow a local privileged attacker to disclose the address of protect

CVE-2026-10587 - A potential out-of-bounds write vulnerability could allow a local privileged attacker to modify powe

CVE-2025-45870 - LogicalDOC Enterprise up to and for v9.1.1 is vulnerable to Local File Inclusion (LFI) in the OnlyOf

CVE-2026-63082 - Perfect Support Ticketing & Document Management System through 1.7 contains a broken access control

CVE-2026-63081 - Perfect Support Ticketing & Document Management System through 1.7 contains a stored cross-site scri

CVE-2026-59867 - Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.32.5, Kiota resolved Ope

CVE-2026-59866 - Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.32.5, Kiota emitted x-ms

CVE-2026-59865 - Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.32.5, `kiota info` read

CVE-2026-59864 - Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.32.5, `kiota plugin add`

CVE-2026-57206 - SimpleChat is a secure AI conversation application with personal and group workspaces for document-g

CVE-2026-57205 - SimpleChat is a secure AI conversation application with personal and group workspaces for document-g

CVE-2026-55440 - Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior t

CVE-2026-54733 - The Microsoft 365 and Microsoft Entra ID Plugins for Moodle provide Office 365 and Azure Active Dire

CVE-2026-54568 - Microsoft UFO open-source framework for intelligent automation across devices and platforms. From 3.

CVE-2026-53598 - Prompty is a markdown file format (.prompty) for LLM prompts. Prior to 2.0.0-beta.2, Prompty loaders

CVE-2026-53597 - Prompty is a markdown file format (.prompty) for LLM prompts. From 2.0.0-alpha.1 until 2.0.0-beta.3,

CVE-2026-45695 - Kopia is a cross-platform backup tool for Windows, macOS, and Linux with fast incremental backups, c

CVE-2026-14890 - SGLang uses an expert-parallel backup subsystem that exposes a ZeroMQ PULL socket on a routable netw

CVE-2026-12379 - An Open Redirect vulnerability (CWE-601) exists in the OAuth/OIDC authentication implementation of t

CVE-2025-45868 - LogicalDOC Enterprise up to and for v9.1.1 is vulnerable to blind SQL injection in the ComparisonSer

CVE-2026-59863 - Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.32.5, Kiota honored a po

CVE-2026-59862 - Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.32.0, Kiota's Python gen

CVE-2026-59861 - Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.32.0, Kiota's Ruby gener

CVE-2026-59860 - Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.32.3, Kiota is affected

CVE-2026-59859 - Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.32.4, Kiota's PHP genera

CVE-2026-59237 - Authorization Bypass Through User-Controlled Key (CWE-639) in the Order and OrderItem REST API contr

CVE-2026-14254 - A race condition in the account lockout mechanism in Delphix Continous Data allowed the lockout thre

CVE-2026-5674 - A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker to escape s

CVE-2026-56456 - HCL DFXAnalytics is affected by an Internal File Path Disclosure vulnerability. The application dash

CVE-2026-56455 - HCL DFXAnalytics is affected by a Buffer Overflow vulnerability that can lead to a Denial of Service

CVE-2026-56454 - HCL DFXAnalytics is affected by a Deprecated Protocol vulnerability due to the use of TLS 1.0 and TL

CVE-2026-56453 - HCL DFXAnalytics is affected by an Account Takeover via Response Manipulation vulnerability. A remot

CVE-2026-35145 - HCL DFXAnalytics is affected by a Missing HTTP Strict-Transport-Security Header vulnerability. The a

CVE-2026-35143 - HCL DFXAnalytics is affected by a Missing SameSite Attribute vulnerability. The application fails to

CVE-2026-35142 - HCL DFXAnalytics is affected by an Internal IP Address Disclosure vulnerability. The application inc

CVE-2026-35141 - HCL DFXAnalytics is affected by a Login Replay Attack vulnerability. The application allows a remote

CVE-2026-35140 - HCL DFXAnalytics is affected by a Missing Secure Attribute in Encrypted Session (SSL) Cookie vulnera

CVE-2026-9494 - An information disclosure vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-advan

CVE-2026-63306 - stoatchat before 0.13.5 contains an unauthenticated server-side request forgery vulnerability in the

CVE-2026-63305 - AVideo through 29.0 contains an OS command injection vulnerability in the ffmpeg.json.php endpoint w

CVE-2026-63304 - AVideo through 29.0 contains an OS command injection vulnerability in plugin/API/standAlone/function

CVE-2026-12391 - An insecure symlink following vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-a

CVE-2026-11386 - An input validation and injection vulnerability exists in Canonical ubuntu-pro-client (formerly ubun

CVE-2025-71388 - stoatchat (delta/Revolt) versions from 20241213-1 before 20250210-1 allow users with only ViewChanne

CVE-2025-71377 - stoatchat (delta) versions before 20250210-1 (0.8.2) contain a logic error in the query messages rou

CVE-2024-58360 - stoatchat versions before 0.7.8 fail to enforce account creation restrictions including invite-only

CVE-2026-59249 - Inconsistent interpretation of HTTP requests (HTTP response smuggling) vulnerability in elixir-mint

CVE-2026-35149 - HCL DFXServer is affected by an Authentication Bypass vulnerability via server response manipulation

CVE-2026-35148 - HCL DFXServer is affected by a Missing Access Control vulnerability. This vulnerability states that

CVE-2026-35147 - HCL DFXServer is affected by a Broken Authentication vulnerability via direct API access. The applic

CVE-2026-35146 - HCL DFXServer is affected by an Unencrypted Communication vulnerability. The application permits use

CVE-2023-49900 - An unauthenticated remote attacker is able to perform remote code execution due to incorrectly sanit

CVE-2023-49899 - An unauthenticated remote attacker can execute any command on the affected device due to not correct

CVE-2026-22752 - Authentication bypass by primary weakness vulnerability in Spring Security Spring Authorization Serv

CVE-2026-7543 - The Breakdance plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fields' pa

CVE-2026-6424 - Use-after-free vulnerability in ESET Linux products potentially allowed an attacker to trigger kerne

CVE-2026-6423 - A local privilege escalation vulnerability in ESET Inspect Connector.  The vulnerability was caused

CVE-2026-58078 - Joomla Extension - themexpert.com - Unauthenticated SQL injection in Quix Page Builder Pro < 6.2.1 -

CVE-2026-15727 - The WP Bulk Delete plugin for WordPress is vulnerable to generic SQL Injection via the 'delete_user_

CVE-2026-15651 - The WP TripAdvisor Review Slider plugin for WordPress is vulnerable to generic SQL Injection via the

CVE-2026-15610 - The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulner

CVE-2026-15407 - The Themify Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to

CVE-2026-15350 - The The Cache Purger plugin for WordPress is vulnerable to authorization bypass in all versions up t

CVE-2026-15324 - The SysBasics Customize My Account for WooCommerce – Live My Account Customizer plugin for WordPress

CVE-2026-15106 - The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulner

CVE-2026-15103 - The WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell plugin for WordPress

CVE-2026-15099 - The Delicious Recipes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ste

CVE-2026-15022 - The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to generic S

CVE-2026-15021 - The wpForo Forum plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'location' Pr

CVE-2026-15008 - The Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin plugin for

CVE-2026-15005 - The Loco Translate plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions

CVE-2026-13767 - The Quiz Master Next plugin for WordPress is vulnerable to SQL Injection via stored quiz page data i

CVE-2026-13755 - The Tickera – Sell Tickets & Manage Events plugin for WordPress is vulnerable to Stored Cross-Site S

CVE-2026-13754 - The Tickera – Sell Tickets & Manage Events plugin for WordPress is vulnerable to generic SQL Injecti

CVE-2026-13741 - The Digits: WordPress Mobile Number Signup and Login plugin for WordPress is vulnerable to Privilege

CVE-2026-15925 - Improper TLS hostname verification in Snowflake Connector for Python versions prior to 4.7.1 and 3.1

CVE-2026-12979 - The FunnelKit WordPress plugin before 3.15.0.6 does not validate a user-supplied path before deleti

CVE-2026-12978 - The FunnelKit WordPress plugin before 3.15.0.6 does not escape a user-supplied parameter before ref

CVE-2026-12907 - The RTMKit WordPress plugin before 2.0.9 does not perform a proper capability check on one of its -b

CVE-2026-12906 - The RTMKit WordPress plugin before 2.0.9 does not perform a capability check in one of its AJAX acti

CVE-2026-12869 - The Header Footer Builder for Elementor WordPress plugin before 1.2.1 does not require an administra

CVE-2026-12684 - The Customer Reviews for WooCommerce WordPress plugin before 5.113.0 does not perform authentication

CVE-2026-12585 - The Abandoned Cart Lite for WooCommerce WordPress plugin before 6.8.2 does not protect the integrity

CVE-2026-12525 - The Redux Framework WordPress plugin before 4.5.13 does not restrict which user meta keys can be wri

CVE-2026-12510 - The AI Engine WordPress plugin before 3.5.5 does not verify that a user owns the chatbot conversati

CVE-2026-12492 - The Happy Coders OTP Login for WooCommerce WordPress plugin before 2.8 does not verify that a one-ti

CVE-2026-12395 - The WP Job Portal WordPress plugin before 2.5.5 does not properly sanitize and escape a parameter b

CVE-2026-11866 - The Appointment Booking Plugin WordPress plugin before 5.6.3 does not validate a CSRF nonce on seve

CVE-2026-11371 - The BetterDocs WordPress plugin before 4.5.5 does not sanitise an AI-generated documentation summar

CVE-2026-53366 - In the Linux kernel, the following vulnerability has been resolved: ipv4: account for fraggap on th