Browse CVEs

HIGH 7.2 CVE-2026-18325 The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Forged … No fix yet Fix from $1,9502026-08-06 HIGH 7.2 CVE-2026-16636 The FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP Provider plugin for WordPress is vulnerable to Stor… No fix yet Fix from $1,9502026-08-06 HIGH 8.8 CVE-2026-15991 The File Manager plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the connector function in … No fix yet Fix from $1,9502026-08-06 HIGH 7.3 CVE-2026-18991 A security vulnerability has been detected in nanocoai NanoClaw up to 2.0.64. This affects an unknown part of the file container/agent-runner/src/mcp… No fix yet Fix from $1,9502026-08-06 HIGH 7.3 CVE-2026-18990 A vulnerability was detected in letta-ai LettaBot 0.2.0. Impacted is an unknown function of the file src/api/server.ts of the component API Status Ro… No fix yet Fix from $1,9502026-08-06 MEDIUM 5.3 CVE-2026-18974 A vulnerability was found in heshengtao super-agent-party up to 0.4.1. This affects the function get_file_content of the file server.py of the compon… No fix yet Fix from $1,6002026-08-06 HIGH 7.3 CVE-2026-18973 A vulnerability has been found in heshengtao super-agent-party up to 0.4.1. The impacted element is the function sanitize_proxy_url of the file serve… No fix yet Fix from $1,9502026-08-06 CRITICAL 9.8 CVE-2026-67873 A heap-based buffer overflow exists in lib60870-C 2.4.0 in the server-side FileSegment ASDU encoding path. The issue occurs because FileSegment_encod… No fix yet Fix from $2,3002026-08-06 HIGH 7.5 CVE-2026-67872 An issue in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the event monitored-item queue resize handling No fix yet Fix from $1,9502026-08-06 HIGH 7.5 CVE-2026-67871 Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the AddNodes, address_space_bs.c, sop… No fix yet Fix from $1,9502026-08-06 CRITICAL 9.8 CVE-2026-67870 In open62541 v1.5.5, the server-side AddReferences implementation contains an incomplete validation flaw for non-local ExpandedNodeId targets. A remo… No fix yet Fix from $2,3002026-08-06 CRITICAL 9.8 CVE-2026-52466 Open Library Foundation VuFind v11.0.3 and v4.1 is vulnerable to toInorrect Access Control. The application fails to stop processing an incoming requ… No fix yet Fix from $2,3002026-08-06 HIGH 7.5 CVE-2026-67869 Buffer Overflow vulnerability in open62541 v1.5.5 allows a remote attacker to cause a denial of service via the Service_Call validates input argument… No fix yet Fix from $1,9502026-08-06 HIGH 7.3 CVE-2026-18970 A flaw has been found in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260617. The affected element is an unknown function of t… No fix yet Fix from $1,9502026-08-06 HIGH 7.3 CVE-2026-18969 A vulnerability was detected in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260617. Impacted is an unknown function of the fi… No fix yet Fix from $1,9502026-08-06 HIGH 7.5 CVE-2026-67867 Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the Alarm/Conditions wrapper when pro… No fix yet Fix from $1,9502026-08-05 HIGH 7.5 CVE-2026-67866 Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the LockedStaMac_ProcessMsg_DeleteMon… No fix yet Fix from $1,9502026-08-05 MEDIUM 6.8 CVE-2026-19023 Untrusted pointer dereference in the render_bin_output function in the h5dump tool in HDF5 before 2.3.0 allows attackers to cause a denial of service… No fix yet Fix from $1,6002026-08-05 HIGH 7.5 CVE-2026-67863 In open62541 1.5.5, a server-side use-after-free exists in the local MonitoredItem callback path. The issue occurs when UA_Subscription_localPublish … No fix yet Fix from $1,9502026-08-05 MEDIUM 6.8 CVE-2026-19025 H5O__layout_decode in H5Olayout.c in HDF5 through 2.3.0 does not validate that a chunked dataset's stored chunk-layout dimensionality matches its dat… No fix yet Fix from $1,6002026-08-05 HIGH 8.2 CVE-2026-19024 NULL pointer dereference in H5Pget_fill_value in HDF5 before 2.3.0 allows attackers to cause a denial of service via a dataset whose version 1 or 2 f… No fix yet Fix from $1,9502026-08-05 HIGH 7.5 CVE-2026-67865 S2OPC 1.7.3 contains an out-of-bounds read in RepublishResponse handling. This allows a remote attacker to cause a denial of service No fix yet Fix from $1,9502026-08-05 HIGH 7.5 CVE-2026-67864 An issue in open62541 v.1.5.5 and before allows a remote attacker to cause a denial of service via the NodeManagement type-instantiation logic compon… No fix yet Fix from $1,9502026-08-05 CRITICAL 9.8 CVE-2025-63823 My Safetipin Android Application 5.2.1 contains Hardcoded credentials in the authentication module, which allows remote attackers to bypass authentic… No fix yet Fix from $2,3002026-08-05 HIGH 8.1 CVE-2025-63822 SirenGPS Android Application 2.19.44 is vulnerable to Incorrect Access Control. An authenticated attacker can manipulate user identifier parameters t… No fix yet Fix from $1,9502026-08-05 MEDIUM 5.4 CVE-2026-18959 A flaw has been found in yushine InnoShop up to 0.8.2. Affected by this issue is the function FileManagerController::destroyFiles of the file innopac… No fix yet Fix from $1,6002026-08-05 HIGH 8.1 CVE-2026-18411 The KARR Security System and SWDS dealer-installed automotive anti-theft systems use a shared Bluetooth authentication key across affected devices. A… No fix yet Fix from $1,9502026-08-05 HIGH 8.4 CVE-2026-17583 The affected Thermo Fisher Applied Biosystems Genetic Analyzers are vulnerable because .fsa/.hid output files can be edited. An attacker could tampe… No fix yet Fix from $1,9502026-08-05 MEDIUM 6.5 CVE-2026-70616 boringproxy through 0.10.0 contains a resource exhaustion vulnerability that allows any authenticated user to permanently exhaust server file descrip… No fix yet Fix from $1,6002026-08-05 CRITICAL 9.9 CVE-2026-70615 boringproxy through 0.10.0 contains a newline injection vulnerability that allows authenticated low-privileged users with tunnel-creation permission … No fix yet Fix from $2,3002026-08-05