CVEs published March 28, 2026
77,396 CVEs in 2026
HTTP::Session versions before 0.54 for Perl defaults to using insecurely generated session ids.
A vulnerability was determined in Wavlink WL-WN579X3-C 231124.
The SureForms – Contact Form, Payment Form & Other Custom Form Builder plugin for WordPress is vulnerable to Payment Amount Bypass in all versions up to, and including, 2.5.2.
A weakness has been identified in code-projects Simple Food Order System 1.0.
A security flaw has been discovered in code-projects Simple Food Order System 1.0.
A vulnerability was identified in elecV2 elecV2P up to 3.8.3.
A flaw has been found in elecV2 elecV2P up to 3.8.3.
A vulnerability has been found in PromtEngineer localGPT up to 4d41c7d1713b16b216d8e062e51a5dd88b20b054.
A flaw has been found in PromtEngineer localGPT up to 4d41c7d1713b16b216d8e062e51a5dd88b20b054.
A vulnerability was detected in PromtEngineer localGPT up to 4d41c7d1713b16b216d8e062e51a5dd88b20b054.
A weakness has been identified in Sinaptik AI PandasAI up to 3.0.0.
A vulnerability was identified in Sinaptik AI PandasAI up to 0.1.4.
The eswifi socket offload driver copies user-provided payloads into a fixed buffer without checking available space; oversized sends overflow `eswifi->buf`, corrupting kernel memory (CWE-120).
The Ninja Forms - The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.14.1 via a callback function for…
A vulnerability was detected in elecV2 elecV2P up to 3.8.3.
A security vulnerability has been detected in z-9527 admin up to 72aaf2dd05cf4ec2e98f390668b41e128eec5ad2.
The following vulnerability has been resolved: nf_tables: nft_dynset: fix possible stateful expression memleak in error path If cloning the second stateful expression in the element via GFP_ATOMIC fails,…
The Quads Ads Manager for Google AdSense plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.0.98.1 due to insufficient input sanitization and output…
A vulnerability was found in elecV2 elecV2P up to 3.8.3.
A vulnerability has been found in elecV2 elecV2P up to 3.8.3.
A vulnerability was identified in kazuph mcp-docs-rag up to 0.5.0.
A vulnerability was found in PromtEngineer localGPT up to 4d41c7d1713b16b216d8e062e51a5dd88b20b054.
A security flaw has been discovered in Sinaptik AI PandasAI up to 3.0.0.
The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Improper Neutralization of CRLF Sequences ('CRLF Injection') in all versions up to, and including, 2.0.7.
A vulnerability was determined in elecV2 elecV2P up to 3.8.3.
A vulnerability was determined in wandb OpenUI up to 1.0.
A vulnerability was found in wandb OpenUI up to 1.0/3.5-turb.
A vulnerability has been found in wandb OpenUI up to 0.0.0.0/1.0.