CVE-2025-24815 - Nokia MantaRay NM is subject to an unrestricted file upload vulnerability due to insufficient file t

CVE-2026-45822 - decode-uri-component through 0.4.1 is vulnerable to denial of service. The decode() function splits

CVE-2026-12578 - The affected product is vulnerable to a deserialization of untrusted data, which may allow an attack

CVE-2026-9576 - The Fluent Booking WordPress plugin before 2.1.2 does not verify ownership of the requested group_i

CVE-2026-56809 - Multiple laser printers and MFPs (multifunction printers) which implement Ricoh Web Image Monitor co

CVE-2026-56808 - DGM3103SCT provided by AVTECH Security Corporation contains an OS command injection vulnerability, w

CVE-2026-56137 - RPG MAKER MV and MZ provided by Gotcha Gotcha Games Inc. contain an OS command injection vulnerabili

CVE-2026-14164 - A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially c

CVE-2026-12819 - Delta Electronics DVP12SE PLC exposes a Modbus TCP service over a specified port without authenticat

CVE-2026-12818 - Delta Electronics DVP12SE PLCs are susceptible to a resource allocation vulnerability without limits

CVE-2026-12240 - The Export User Data plugin for WordPress is vulnerable to arbitrary file deletion due to insufficie

CVE-2026-11590 - The WP Support Plus Responsive Ticket System WordPress plugin through 9.1.2 does not sanitize user-s

CVE-2026-11589 - The WP Support Plus Responsive Ticket System WordPress plugin through 9.1.2 does not properly valida

CVE-2026-11581 - The Kali Forms — Contact Form & Drag-and-Drop Builder WordPress plugin before 2.4.13 does not saniti

CVE-2026-8944 - The Plugin for Google Analytics by IO technologies plugin for WordPress is vulnerable to Cross-Site

CVE-2026-12560 - The Editorial Rating – Product Review & Rating System plugin for WordPress is vulnerable to Stored C

CVE-2026-12349 - The Premium Addons for KingComposer plugin for WordPress is vulnerable to unauthorized modification

CVE-2026-12073 - The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to privil

CVE-2026-11367 - The PixMagix – WordPress Image Editor plugin for WordPress is vulnerable to Directory Traversal in a

CVE-2026-14160 - Time-of-check time-of-use (TOCTOU) race condition vulnerability in Samsung Open Source Escargot allo

CVE-2026-12114 - The Team Members – Multi Language Supported Team Plugin plugin for WordPress is vulnerable to Stored

CVE-2026-58302 - rtapi_app in linuxcnc-uspace in LinuxCNC before 2.9.9 allows privilege escalation. It is installed S

CVE-2026-12243 - NLTK version 3.9.4 is vulnerable to a path traversal attack due to an incomplete fix for GitHub Issu

CVE-2026-8023 - Zephyr's HTTP server (subsys/net/lib/http) provides a static-filesystem resource type (HTTP_RESOURCE

CVE-2026-7656 - The IPv6 Neighbor Discovery handlers in subsys/net/ip/ipv6_nbr.c (handle_ra_input, handle_ns_input,

CVE-2026-51219 - A heap buffer overflow in the HighPriorityASDUQueue_hasUnconfirmedIMessages function of lib60870 v2.

CVE-2026-51218 - A heap buffer overflow in the TS7Worker::PerformFunctionWrite() function (/core/s7_server.cpp) of sn

CVE-2026-10648 - mcumgr_serial_process_frag() in subsys/mgmt/mcumgr/transport/src/serial_util.c calls net_buf_reset()

CVE-2026-57997 - Strapi users-permissions plugin fails to restrict JWT algorithms when plugin::users-permissions.jwt.

CVE-2026-51221 - A buffer overflow in the Get_Attribute_List function of EIPStackGroup OpENer commit 76b95c allows at

CVE-2026-34592 - Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.

CVE-2026-10647 - The USB CDC-NCM device class (subsys/usb/device_next/class/usbd_cdc_ncm.c) ignores the return value

CVE-2026-55957 - Missing Critical Step in Authentication vulnerability in Apache Tomcat when the JNDIRealm was config

CVE-2026-55956 - Improper Authorization vulnerability in Apache Tomcat leads to security constraints specified for th

CVE-2026-55955 - Improper Authentication vulnerability in Apache Tomcat allowed a replay attack against the Encryptio

CVE-2026-55276 - Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat meant that special roles

CVE-2026-53434 - Detection of Error Condition Without Action vulnerability in Apache Tomcat when configuring CRLs for

CVE-2026-53404 - Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat's rewrite valve meant th

CVE-2026-50229 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in the n

CVE-2026-41896 - Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.

CVE-2026-34597 - Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.

CVE-2026-34594 - Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.

CVE-2026-13758 - CryptX versions before 0.088_001 for Perl compare AEAD authentication tags in non-constant time in t

CVE-2026-57919 - PBackupVSS.exe in Matrix42 Empirum before 25.5 and 26.x before 26.2 creates a named pipe (\\.\pipe\P

CVE-2026-57498 - Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.

CVE-2026-56018 - JavaScript::Minifier::XS versions before 0.16 for Perl leak memory on every call to minify(), allowi

CVE-2026-56017 - JavaScript::Minifier::XS versions before 0.16 for Perl crash with a NULL pointer dereference when th

CVE-2026-54889 - Improper Neutralization of Input During Web Page Generation (XSS) vulnerability in leandrocp mdex al

CVE-2026-54888 - Uncontrolled Recursion vulnerability in leandrocp mdex allows denial of service via deeply nested Ma

CVE-2026-53429 - Missing Release of Memory after Effective Lifetime vulnerability in leandrocp mdex and mdex_native a

CVE-2026-53426 - Allocation of Resources Without Limits or Throttling vulnerability in leandrocp MDEx allows Excessiv

CVE-2026-43746 - A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari

CVE-2026-43745 - An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Sa

CVE-2026-43743 - A race condition was addressed with improved state handling. This issue is fixed in iOS 26.5.2 and i

CVE-2026-43742 - A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari

CVE-2026-43740 - The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.

CVE-2026-43735 - The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and i

CVE-2026-43734 - A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari

CVE-2026-43732 - A path handling issue was addressed with improved validation. This issue is fixed in Safari 26.5.2,

CVE-2026-43731 - A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari

CVE-2026-43727 - A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari

CVE-2026-43726 - A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari

CVE-2026-43725 - The issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 26

CVE-2026-43724 - The issue was addressed with improved input sanitization. This issue is fixed in iOS 26.5.2 and iPad

CVE-2026-43722 - The issue was addressed with improved input sanitization. This issue is fixed in iOS 26.5.2 and iPad

CVE-2026-43721 - This issue was addressed through improved state management. This issue is fixed in Safari 26.5.2, iO

CVE-2026-43720 - A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari

CVE-2026-43718 - A stack overflow was addressed with improved input validation. This issue is fixed in Safari 26.5.2,

CVE-2026-43717 - A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari

CVE-2026-43716 - The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.

CVE-2026-43715 - A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari

CVE-2026-43713 - A permissions issue was addressed with additional restrictions. This issue is fixed in Safari 26.5.2

CVE-2026-43712 - The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.

CVE-2026-43709 - A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari

CVE-2026-43708 - The issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 26

CVE-2026-43707 - A memory corruption issue was addressed with improved memory handling. This issue is fixed in Safari

CVE-2026-43706 - A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.5.2

CVE-2026-43705 - A type confusion issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS

CVE-2026-43704 - A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari

CVE-2026-43703 - The issue was addressed with improved memory handling. This issue is fixed in iOS 26.5.2 and iPadOS

CVE-2026-43701 - The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and i

CVE-2026-43700 - A cross-origin issue was addressed with improved tracking of security origins. This issue is fixed i

CVE-2026-43699 - A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari

CVE-2026-43676 - An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Sa

CVE-2026-43663 - The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.

CVE-2026-39872 - The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.

CVE-2026-39868 - This issue was addressed with improved input validation. This issue is fixed in iOS 26.5.2 and iPadO

CVE-2026-37637 - An issue in Alexantr filemanager v.1.0 allows a remote attacker to execute arbitrary code via the fi

CVE-2026-31016 - Cross Site Request Forgery vulnerability in Squidex.io Squidex CMS v.7.21.0 and before allows a remo

CVE-2026-28979 - An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Sa

CVE-2026-13763 - Inconsistent interpretation of HTTP/2 requests in AWS Application Load Balancer with AWS WAF enabled

CVE-2026-13762 - Inconsistent interpretation of HTTP/2 requests in Amazon CloudFront with AWS WAF enabled might allow

CVE-2026-13593 - CSS::Minifier::XS versions before 0.14 for Perl have a memory leak when the entire document is minif

CVE-2026-13008 - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-57700. Reason:

CVE-2026-58000 - luci-proto-openvpn through 0.11.1, fixed in commit e4ff45e, contains a command injection vulnerabili

CVE-2026-57999 - luci-app-tailscale-community contains a command injection vulnerability in the tailscale.do_login RP

CVE-2026-53428 - Memory Allocation with Excessive Size Value vulnerability in leandrocp mdex allows an unauthenticate

CVE-2026-53427 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-13757 - A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribu

CVE-2026-57960 - Hi.Events through 1.9.0 public check-in list endpoints use short_id as sole access control, allowing

CVE-2026-57959 - Hi.Events through 1.9.0 contains a promo code validation vulnerability where reservation validates u

CVE-2026-57958 - Mixpost through 2.6.0 contains a reflected cross-site scripting vulnerability that allows unauthenti

CVE-2026-57957 - Papermark through 0.22.0 contains a cross-origin resource sharing (CORS) misconfiguration vulnerabil

CVE-2026-57956 - SigNoz before 0.133.0 contains a broken access control vulnerability that allows authenticated users

CVE-2026-57955 - SigNoz through 0.130.1 contains a SQL injection vulnerability that allows authenticated attackers to

CVE-2026-57954 - Elide through 7.1.17 fails to enforce @ReadPermission on client-supplied sort expressions in Sorting

CVE-2026-57953 - Mythic before 3.4.0.60 contains an authorization bypass vulnerability that allows authenticated spec

CVE-2026-57952 - Mythic before 3.4.0.60 contains an authorization bypass vulnerability in four REST endpoints (c2prof

CVE-2026-57951 - Mythic before 3.4.0.60 contains a broken hasura permission filter on the payload_build_step table wi

CVE-2026-57950 - ruoyi-vue-pro through 2026.05, fixed in commit 5d1fd70 contains a broken access control vulnerabilit

CVE-2026-57949 - ruoyi-vue-pro through 2026.05, fixed in commit c779a47, contains a missing authorization vulnerabili

CVE-2026-57948 - Pinpoint through version 3.1.0 contains an insecure session management vulnerability that allows att

CVE-2026-57947 - Pinpoint through 3.1.0 contains a server-side request forgery vulnerability in the webhook registrat

CVE-2026-57946 - Invidious before version 2.20260626.0 contains a broken access control vulnerability that allows una

CVE-2026-57945 - PhotoPrism before 260601-a7d098548 contains a broken access control vulnerability that allows authen

CVE-2026-57943 - LibrePhotos before 1.0.0 contains a broken object level authorization vulnerability in the SetPhotos

CVE-2026-57942 - LibreTranslate through 1.9.7, fixed in commit 397fd22, contains an IP spoofing vulnerability in the

CVE-2026-56783 - Parseable before 2.9.2 contains an information disclosure vulnerability in the notification-target A

CVE-2026-56782 - Gorse before 0.5.10 contains an authentication bypass vulnerability in the /api/dump and /api/restor

CVE-2026-56781 - Teable before 2026-06-15T04-43-24Z.1912 contains an improper access control vulnerability that allow

CVE-2026-56780 - Modoboa before 2.9.0 contains an insecure direct object reference vulnerability in the PUT /api/v1/a

CVE-2026-56285 - Nitter's /video media proxy endpoint fails to validate target URLs against Twitter/X domains and use

CVE-2026-36848 - Gigamon GVOS v5.16.1 and below is vulnerable to Directory Traversal in the GVOS H-VUE subsystem.

CVE-2026-13592 - A vulnerability was detected in liftoff-sr CIPster up to e8e9dba09bf56962807d3504b783ccdb6287f3e4. A

CVE-2026-11720 - A path traversal vulnerability exists in the HTTP tool URL builder of googleapis/mcp-toolbox. When

CVE-2026-13752 - Improper neutralization of parameters in Snowflake CLI versions prior to 3.19 allowed unintended SQL

CVE-2026-13751 - Improper handling of untrusted remote references in Snowflake CLI versions prior to 3.19 allowed ser

CVE-2026-13591 - A weakness has been identified in DeepMyst Mysti 0.4.0. Affected is the function _isTrackedConversat

CVE-2026-13590 - A security flaw has been discovered in seladb PcapPlusPlus 25.05. This impacts the function pcpp::Mo

CVE-2026-13589 - A vulnerability was identified in seladb PcapPlusPlus 25.05. This affects the function pcpp::TelnetL

CVE-2026-13588 - A vulnerability was determined in seladb PcapPlusPlus 25.05. The impacted element is the function pc

CVE-2026-12912 - A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a speci

CVE-2026-12672 - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in

CVE-2026-9105 - An authenticated stack-based buffer overflow vulnerability exists in the web management interface of

CVE-2026-41052 - Improper privilege handling could be used by users with Project Owner role to escalate privileges, i

CVE-2026-13750 - Insertion of sensitive information into log files in Snowflake CLI versions prior to 3.19 allowed pl

CVE-2026-13749 - Improper neutralization in the Snowpark annotation processor callback template in Snowflake CLI vers

CVE-2026-13748 - Improper restriction of file path resolution in Snowflake CLI versions prior to 3.19 allowed arbitra

CVE-2026-13746 - Improper neutralization of local CLI parameters in Snowflake CLI versions prior to 3.19 allowed unin

CVE-2026-13744 - Improper neutralization of attacker-controlled content in Snowflake CLI versions prior to 3.19 allow

CVE-2026-13742 - Honeywell IQ MultiAccess, all versions prior to and including version 28, contain an improper digita

CVE-2026-13587 - A vulnerability was found in seladb PcapPlusPlus 25.05. The affected element is the function parse_b

CVE-2026-13583 - A vulnerability has been found in Edimax EW-7478APC 1.04. Impacted is the function formUSBFolder of

CVE-2026-13582 - A flaw has been found in Edimax EW-7478APC 1.04. This issue affects the function formUSBAccount of t

CVE-2026-13581 - A vulnerability was detected in Edimax EW-7478APC 1.04. This vulnerability affects the function form

CVE-2026-13580 - A security vulnerability has been detected in Edimax EW-7478APC 1.04. This affects the function form

CVE-2026-13437 - Insertion of sensitive information into sent data in the AI Agent job API in Devolutions PowerShell

CVE-2026-57525 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-57523 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-57341 - Unauthenticated Insecure Direct Object References (IDOR) in Colissimo Officiel : Méthodes de livrais

CVE-2026-57340 - Unauthenticated Broken Access Control in Japanized For WooCommerce <= 2.9.12 versions.

CVE-2026-57339 - Unauthenticated Broken Access Control in Business Directory <= 6.4.23 versions.

CVE-2026-57338 - Unauthenticated Cross Site Scripting (XSS) in ARForms <= 7.1.2 versions.

CVE-2026-57337 - Unauthenticated Cross Site Scripting (XSS) in Landing Page Builder <= 1.5.3.5 versions.

CVE-2026-57336 - Unauthenticated Cross Site Scripting (XSS) in Jobify <= 4.3.2 versions.

CVE-2026-57335 - Subscriber Broken Access Control in Ads by WPQuads <= 3.0.3 versions.

CVE-2026-57334 - Unauthenticated Broken Access Control in WP User Frontend <= 4.3.7 versions.

CVE-2026-57333 - Unauthenticated Cross Site Scripting (XSS) in Link Whisper Free <= 0.9.4 versions.

CVE-2026-57332 - Subscriber Broken Access Control in Wallet System for WooCommerce <= 2.7.6 versions.

CVE-2026-57331 - Performer Arbitrary File Deletion in Paid Videochat Turnkey Site <= 7.4.8 versions.

CVE-2026-57330 - Subscriber Cross Site Scripting (XSS) in MasterStudy LMS <= 3.7.27 versions.

CVE-2026-57329 - Subscriber Cross Site Scripting (XSS) in WooCommerce Designer Pro <= 1.9.34 versions.

CVE-2026-57328 - Subscriber Cross Site Scripting (XSS) in Business Directory <= 6.4.22 versions.

CVE-2026-57327 - Subscriber Broken Access Control in MainWP <= 6.1.1 versions.

CVE-2026-57326 - Unauthenticated Cross Site Scripting (XSS) in Business Directory <= 6.4.22 versions.

CVE-2026-57320 - Unauthenticated Cross Site Scripting (XSS) in BEAR <= 1.1.8 versions.

CVE-2026-56290 - Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0 -

CVE-2026-56124 - phpUploader before 2.0.2 contains an unauthenticated information disclosure vulnerability that allow

CVE-2026-55844 - Home Assistant is open source home automation software that puts local control and privacy first. Pr

CVE-2026-55607 - Claude Code is an agentic coding tool. From 2.1.38 until 2.1.163, Claude Code's worktree handling a

CVE-2026-49049 - The Helix3 plugin for Joomla exposes an ajax handler task, that allows unauthenticated attackers to

CVE-2026-46406 - Claude Code is an agentic coding tool. From 2.1.59 until 2.1.128, the Claude Code /copy command wro

CVE-2026-13579 - A weakness has been identified in itsourcecode Hospital Management System 1.0. Affected by this issu

CVE-2026-13578 - A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Affected by this

CVE-2026-13574 - A vulnerability was determined in llvm llvm-project up to 22.1.6. This impacts the function GCReloca

CVE-2026-13573 - A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function llvm::StringM

CVE-2026-13572 - A vulnerability has been found in itsourcecode Hospital Management System 1.0. The impacted element

CVE-2026-13571 - A flaw has been found in SourceCodester Simple Food Ordering System 1.0. The affected element is an

CVE-2026-56457 - HCL DevOps Deploy / HCL Launch is susceptible to an exposure of sensitive information vulnerability

CVE-2026-54371 - attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr ut

CVE-2026-54370 - acl before version 2.4.0 contains a time-of-check to time-of-use (TOCTOU) race condition vulnerabili

CVE-2026-54369 - acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based fun

CVE-2026-40524 - FrontAccounting before 2.4.20 contains a SQL injection vulnerability in the get_gl_transactions() fu

CVE-2026-40523 - FrontAccounting before 2.4.20 contains a SQL injection vulnerability in the Audit Trail report handl

CVE-2026-40522 - FrontAccounting before 2.4.20 contains a SQL injection vulnerability in the Bank Statement report ha

CVE-2026-40521 - FrontAccounting before 2.4.20 contains a path traversal vulnerability in the attachment upload handl

CVE-2026-13676 - fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode (IDN) hostnames for HTT

CVE-2026-13570 - A vulnerability was detected in SourceCodester Inventory Management System 1.0. Impacted is an unkno

CVE-2026-13569 - A security vulnerability has been detected in weng-xianhu EyouCMS up to 1.7.1. This issue affects so

CVE-2026-13568 - A weakness has been identified in SourceCodester Inventory Management System 1.0. This vulnerability

CVE-2026-13567 - A security flaw has been discovered in code-projects Online Music Site 1.0. This affects an unknown

CVE-2026-13566 - A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by

CVE-2026-13565 - A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0/1.php. Affect

CVE-2026-13165 - SzafirHost verifies the downloaded native library archive with one JarFile parser (reading the Centr

CVE-2026-12856 - A flaw was found in the vscode-java extension, which provides Java language support for Visual Studi

CVE-2026-12616 - The /v1/upload/sbom endpoint extracts the iss claim from the attacker-supplied JWT with signature ve

CVE-2026-11979 - libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when runnin

CVE-2026-41992 - GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by im

CVE-2026-41991 - GNU gzip contains a vulnerability in the gzexe utility related to insecure temporary file handling.

CVE-2026-13564 - A vulnerability was found in Edimax EW-7478APC 1.04. Affected is the function formPPPoESetup of the

CVE-2026-13563 - A vulnerability has been found in Edimax EW-7478APC 1.04. This impacts the function formL2TPSetup of

CVE-2026-13562 - A flaw has been found in Edimax EW-7478APC 1.04. This affects the function formiNICSiteSurvey of the

CVE-2026-13561 - A vulnerability was detected in Edimax EW-7478APC 1.04. The impacted element is the function formiNI

CVE-2026-13560 - A security vulnerability has been detected in Edimax EW-7478APC 1.04. The affected element is the fu

CVE-2026-13559 - A weakness has been identified in code-projects Real State Services 1.0. Impacted is an unknown func

CVE-2026-13558 - A security flaw has been discovered in CodeAstro Complaint Management System 1.0. This issue affects

CVE-2026-57346 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Epip

CVE-2026-25707 - A relative path traversal bug problem when processing repository metadata in libzypp before 17.38.10

CVE-2026-13601 - A flaw was found in Yelp due to an overly permissive Content Security Policy (CSP) implementation pr

CVE-2026-13557 - A vulnerability was identified in itsourcecode Online Hotel Management System 1.0. This vulnerabilit

CVE-2026-13556 - A vulnerability was determined in itsourcecode Online Hotel Management System 1.0. This affects an u

CVE-2026-13555 - A vulnerability was found in itsourcecode Online Hotel Management System 1.0. Affected by this issue

CVE-2026-13554 - A vulnerability has been found in itsourcecode Online Hotel Management System 1.0. Affected by this

CVE-2026-13553 - A flaw has been found in itsourcecode Online Hotel Management System 1.0. Affected is an unknown fun

CVE-2026-13552 - A vulnerability was detected in itsourcecode Online Hotel Management System 1.0. This impacts an unk

CVE-2026-9267 - Eclipse tinydtls before commit b3efd41ad111a4920f599f51ffa4f5e9f1e72221 contains an out-of-bounds re

CVE-2026-57966 - A path traversal vulnerability was found in spice-vdagent. This flaw allows a malicious or compromis

CVE-2026-57965 - A flaw was found in spice-vdagent. A malicious or compromised SPICE host can trigger an integer over

CVE-2026-57676 - Authorization Bypass Through User-Controlled Key vulnerability in Matteo Manna Simple User Avatar al

CVE-2026-22078 - Because O+ Connect's IPC service does not authenticate clients, external applications can escalate p

CVE-2026-13595 - A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Mi

CVE-2026-13551 - A security vulnerability has been detected in itsourcecode Baptism Information Management System 1.0

CVE-2026-13550 - A weakness has been identified in itsourcecode Baptism Information Management System 1.0. The impact

CVE-2026-13549 - A security flaw has been discovered in CodeAstro Complaint Management System 1.0. The affected eleme

CVE-2026-13548 - A vulnerability was identified in itsourcecode Hospital Management System 1.0. Impacted is an unknow

CVE-2026-13547 - A vulnerability was determined in Hanwang e-Face General Management Platform 6.3.5.4. This issue aff

CVE-2026-13546 - A vulnerability was found in Feehi CMS up to 2.1.1. This vulnerability affects unknown code of the f

CVE-2026-13545 - A vulnerability has been found in D-Link DCS-935L 1.10.01. This affects the function sub_400E40 of t

CVE-2026-9676 - The F4 Post Tree WordPress plugin before 2.0.5 does not perform capability checks or CSRF/nonce veri

CVE-2026-13544 - A flaw has been found in Feehi CMS up to 2.1.1. Affected by this issue is some unknown functionality

CVE-2026-13543 - A vulnerability was detected in Documenso up to 2.11.0. Affected by this vulnerability is an unknown

CVE-2026-13542 - A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. Affected

CVE-2026-13541 - A weakness has been identified in itsourcecode Hospital Management System 1.0. This impacts an unkno

CVE-2026-13540 - A security flaw has been discovered in GitBucket up to 4.46.1. This affects the function Git.cloneRe

CVE-2026-13539 - A vulnerability was identified in Wavlink WL-NU516U1-A M16U1_V240425. The impacted element is the fu

CVE-2026-10083 - The APCu Manager WordPress plugin before 4.5.0 does not escape APCu object-cache keys before renderi

CVE-2025-7386 - Information exposure vulnerability in Hitachi Storage Navigator. This issue affects Hitachi Virtual

CVE-2025-2902 - Improper Authorization Vulnerability of Maintenance Utility in Hitachi Virtual Storage Platform. Th

CVE-2025-0824 - Lack of validation for firmware update in Hitachi Hitachi Virtual Storage Platform One Block 23, 24,

CVE-2026-53325 - In the Linux kernel, the following vulnerability has been resolved: agp/amd64: Fix broken error pro

CVE-2026-13538 - A vulnerability was determined in Wavlink WL-NU516U1-A M16U1_V240425. The affected element is the fu

CVE-2026-13537 - A vulnerability was found in CodeAstro Human Resource Management System 1.0. Impacted is an unknown

CVE-2026-13536 - A vulnerability has been found in GotoHTTP up to 10.2. This issue affects some unknown processing of

CVE-2026-13535 - A flaw has been found in CodeAstro Human Resource Management System 1.0. This vulnerability affects

CVE-2026-13534 - A vulnerability was detected in CherryHQ cherry-studio up to 1.9.7. This affects the function sha256

CVE-2026-13533 - A security vulnerability has been detected in agentejo Cockpit CMS up to 0.12.2. Affected by this is

CVE-2026-13532 - A weakness has been identified in itsourcecode Hospital Management System 1.0. Affected by this vuln

CVE-2026-13531 - A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Affected is an u

CVE-2026-13530 - A vulnerability was identified in itsourcecode Hospital Management System 1.0. This impacts an unkno

CVE-2026-13529 - A vulnerability was determined in YzmCMS up to 7.5. This affects an unknown function of the file /ap