CVE-2026-27404: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in LMS = 9.7 versions...

CVE-2026-57265: Improper Validation of Array Index

GeoWebPlayer also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud is an addon that can be installed with various GeoVision software GV-VMS, GV-Cloud, .... It creates a websocket server that expands the capabilities of the various web-interfaces provided by the...

UBUNTU-CVE-2026-20243

A vulnerability in the ALZ file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in ALZ...

CVE-2026-57353: Missing Authorization

Subscriber Broken Access Control in Link Whisper Premium = 2.9.0 versions...

CVE-2026-57623: Improper Validation of Specified Quantity in Input

Unauthenticated Arbitrary Code Execution in W3 Total Cache = 2.9.4 versions...

CVE-2026-57355: Missing Authorization

Subscriber Broken Access Control in Classified Listing = 5.4.2 versions...

CVE-2026-57362: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in ChatBot = 8.3.2 versions...

CVE-2026-57682: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Simple Link Directory = 15.0.5 versions...

Clam AntiVirus Toolkit 1.5.3

Clam AntiVirus is an anti-virus toolkit for Unix. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command-line scanner, and a tool for automatic updating via Internet. The programs ar...

CVE-2026-59094: Inefficient Algorithmic Complexity

Pathway through 0.31.1, fixed in commit d09722e, document store applies a caller-supplied glob pattern to indexed document paths using a hand-written recursive matcher that branches two ways on each token without memoization, giving exponential worst-case complexity. The filepathglobpattern value...

CVE-2026-57357: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Search Atlas SEO = 2.6.6 versions...

CVE-2026-57766: Cross-Site Request Forgery (CSRF)

Unauthenticated Cross Site Request Forgery CSRF in WPIDE – File Manager & Code Editor = 3.5.6 versions...

CVE-2026-57349: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in WPeMatico RSS Feed Fetcher = 2.8.17 versions...

CVE-2026-27433: Missing Authorization

Missing Authorization vulnerability in StylemixThemes Motors motors allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Motors: from n/a before 5.6.85...

CVE-2025-66076: Missing Authorization

Unauthenticated Broken Access Control in Woostify Sites Library = 1.6.2 versions...

CVE-2026-52192: Uncontrolled Resource Consumption

An issue in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of service via the gohead/sub445C5C component...

CVE-2026-57748: Improper Control of Filename for Include/Require Statement in PHP Program

Contributor Local File Inclusion in Shopify = 1.0.0 versions...

CVE-2026-27430: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in TheFox = 3.9.76 versions...

CVE-2025-69153: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Trendy Travel = 6.7 versions...

CVE-2026-52187: Buffer Copy without Checking Size of Input

Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of service via the gohead/sub483ba0 component...