CVEs published April 13, 2026

A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024.

A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024.

A weakness has been identified in Totolink A7100RU 7.4cu.2313.

A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024.

A vulnerability was found in Totolink A7100RU 7.4cu.2313_b20191024.

A vulnerability has been found in Totolink A7100RU 7.4cu.2313_b20191024.

A flaw has been found in Totolink A7100RU 7.4cu.2313_b20191024.

Pachno 1.0.6 contains a deserialization vulnerability that allows unauthenticated attackers to execute arbitrary code by injecting malicious serialized objects into cache files.

Pachno 1.0.6 contains an XML external entity injection vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting unsafe XML parsing in the TextParser helper.

The following vulnerability has been resolved: netfilter: nf_conntrack_expect: use expect->helper Use expect->helper in ctnetlink and /proc to dump the helper name.

The forgot password API does not implement rate limiting for the target email address. which can be used for an Email Bombing attack.

Totara LMS v19.1.5 and before is vulnerable to Incorrect Access Control.

An issue in the <code>pickle</code> protocol of Pyro v3.x allows attackers to execute arbitrary code via supplying a crafted pickled string message.

An Improper Access Control vulnerability could allow a malicious actor with access to the UniFi Play network to enable SSH to make unauthorized changes to the system.

A series of Improper Input Validation vulnerabilities could allow a Command Injection by a malicious actor with access to the UniFi Play network.

A malicious actor with access to the UniFi Play network could exploit a Path Traversal vulnerability found in the device firmware to write files on the system that could be used for a remote code execution…

A Code Injection and Missing Authentication vulnerability in Google Agent Development Kit (ADK) versions 1.7.0 (and 2.0.0a1) through 1.28.1 (and 2.0.0a2) on Python (OSS), Cloud Run, and GKE allows an…

Solstice::Session versions through 1440 for Perl generates session ids insecurely.

Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.

An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms during integration of Microsoft Teams that enables an unauthenticated user to access and…

A vulnerability was determined in Tenda F456 1.0.0.5.

A vulnerability was found in Tenda F456 1.0.0.5.

A vulnerability has been found in Tenda F456 1.0.0.5.

A flaw has been found in Tenda F456 1.0.0.5.

A vulnerability was detected in Tenda F456 1.0.0.5.

A weakness has been identified in Totolink A3002MU B20211125.1046.

A security vulnerability has been detected in UTT HiPER 1200GW up to 2.5.3-170306.

A flaw has been found in TOTOLINK A7000R up to 9.1.0u.6115.

A vulnerability was detected in Totolink A800R 4.1.2cu.5137_B20200730.

A vulnerability was detected in Tenda F451 1.0.0.7_cn_svn7958.

A security vulnerability has been detected in Tenda F451 1.0.0.7_cn_svn7958.

A weakness has been identified in Tenda F451 1.0.0.7_cn_svn7958.

Pachno 1.0.6 contains an unrestricted file upload vulnerability that allows authenticated users to upload arbitrary file types by bypassing ineffective extension filtering to the /uploadfile endpoint.

Deserialization of Untrusted Data vulnerability in Apache Storm.

Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via custom fields.

Dag Authors, who normally should not be able to execute code in the webserver context could craft XCom payload causing the webserver to execute arbitrary code.

Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via module search.

Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via WebServerModuleDebug.

Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via Network Report.

The `/registercrd` endpoint in KubePlus 4.14 in the kubeconfiggenerator component is vulnerable to command injection.

A certificate validation vulnerability in Palo Alto Networks Autonomous Digital Experience Manager on Windows allows an unauthenticated attacker with adjacent network access to execute arbitrary code with…

An SQL injection vulnerability exists where the ProductQuery::hasVariant and VariantQuery::hasProduct properties bypass the input sanitization blocklist added to ElementIndexesController in a prior security…

A stored code execution vulnerability in the user name field allows a low-privileged attacker to execute arbitrary code in the context of any user who passively visits a comment page, resulting in high…

The Product Filter for WooCommerce by WBW WordPress plugin before 3.1.3 does not sanitize and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection…

An attacker can control a server-side HTTP request by supplying a crafted URL, causing the server to initiate requests to arbitrary destinations.

An integer overflow vulnerability exists through version 1.8.1 within the jvp_string_append() and jvp_string_copy_replace_bad functions, where concatenating strings with a combined length exceeding 2^31…

Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a memory allocation fails with a `MemoryError` and the decompression instance is re-used.

simple-git enables running native Git commands from JavaScript.

Integer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.

Totara LMS v19.1.5 and before is vulnerable to HTML Injection.

The following vulnerability has been resolved: net: bonding: fix use-after-free in bond_xmit_broadcast() bond_xmit_broadcast() reuses the original skb for the last slave (determined by…

A vulnerability in the `TFSMLayer` class of the `keras` package, version 3.13.0, allows attacker-controlled TensorFlow SavedModels to be loaded during deserialization of `.keras` models, even when…

Permission bypass vulnerability in the LBS module.

There is an SQL injection vulnerability in the Commerce TotalRevenue widget which allows any authenticated control panel user to achieve remote code execution through a four-step exploitation chain.

Crypt::SecretBuffer versions before 0.019 for Perl is suseceptible to timing attacks.

ImageMagick is free and open-source software used for editing and manipulating digital images.

ImageMagick is free and open-source software used for editing and manipulating digital images.

An untrusted peer could crash a validator by publishing a signed tendermint proposal message where signer == validators.num_validators().

The following vulnerability has been resolved: net/x25: Fix overflow when accumulating packets Add a check to ensure that `x25_sock.fraglen` does not overflow.

A heap buffer overflow in the av_bprint_finalize() function of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input.

An improper resource deallocation and closure vulnerability in the tools/zmqsend.c component of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input file.

An out-of-bounds read in the read_global_param() function (libavcodec/av1dec.c) of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input.

An Improper Access Control vulnerability could allow a malicious actor with access to the UniFi Play network to obtain UniFi Play WiFi credentials.

An Improper Input Validation vulnerability could allow a malicious actor with access to the UniFi Play network to cause the device to stop responding.

Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.

Heap-based buffer overflow vulnerability in Samsung Open Source Escargot allows out-of-bounds write.This issue affects Escargot:commit hash  97e8115ab1110bc502b4b5e4a0c689a71520d335 .

A security flaw has been discovered in nocobase plugin-workflow-javascript up to 2.0.23.

A security flaw has been discovered in PHPGurukul Daily Expense Tracking System 1.1.

A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0.

A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0.

A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0.

A security flaw has been discovered in code-projects Simple Content Management System 1.0.

A vulnerability was identified in code-projects Simple Content Management System 1.0.

A vulnerability was detected in code-projects Faculty Management System 1.0.

A security vulnerability has been detected in code-projects Vehicle Showroom Management System 1.0.

A weakness has been identified in code-projects Vehicle Showroom Management System 1.0.

A security flaw has been discovered in code-projects Lost and Found Thing Management 1.0.

A vulnerability was identified in code-projects Lost and Found Thing Management 1.0.

A vulnerability was determined in code-projects Simple ChatBox up to 1.0.

A flaw has been found in Totolink N300RH 6.1c.1353_B20190305.

A vulnerability was identified in code-projects Vehicle Showroom Management System 1.0.

A vulnerability was determined in code-projects Vehicle Showroom Management System 1.0.

A vulnerability was found in code-projects Vehicle Showroom Management System 1.0.

A flaw has been found in code-projects Vehicle Showroom Management System 1.0.

A vulnerability was detected in code-projects Vehicle Showroom Management System 1.0.

A vulnerability was identified in tushar-2223 Hotel Management System up to bb1f3b3666124b888f1e4bcf51b6fba9fbb01d15.

Sourcecodester Online Thesis Archiving System v1.0 is vulnerale to SQL injection in the file /otas/view_archive.php.

UAF vulnerability in the communication module.

LibreNMS versions before 26.3.0 are affected by an authenticated remote code execution vulnerability by abusing the Binary Locations config and the Netcommand feature.

Pachno 1.0.6 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary HTML and script code by injecting malicious payloads into POST parameters.

Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via Event Response execution.

Unrestricted Upload of File with Dangerous Type vulnerability allows Remote Code Execution via file upload.

Mitgation of CVE-2026-4519 was incomplete.

The ZTE ZXEDM iEMS product has a password reset vulnerability for any user.Because the management of the cloud EMS portal does not properly control access to the user list acquisition function, attackers…

Server-Side Request Forgery via SW-URL Header vulnerability in Apache SkyWalking MCP.

The following vulnerability has been resolved: ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() When ec_install_handlers() returns -EPROBE_DEFER on reduced-hardware platforms, it has…

Access of resource using incompatible type ('type confusion') vulnerability in Samsung Open Source Escargot allows Pointer Manipulation.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.

Vulnerability of improper permission control in the theme setting module.

Boundary-unlimited vulnerability in the application read module.

Incorrect privilege assignment in Bluetooth in Maintenance mode prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Extend Unlock.

Improper check for exceptional conditions in Recents prior to SMR Apr-2026 Release 1 allows physical attacker to bypass App Pinning.

Improper check for exceptional conditions in Device Care prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Knox Guard.

Improper input validation in data related to network restrictions prior to SMR Apr-2026 Release 1 allows physical attackers to bypass the restrictions.

Bluetooth ACPI Drivers provided by Dynabook Inc. contain a stack-based buffer overflow vulnerability.

Out-of-bounds write vulnerability in the file system.

Out-of-bounds read vulnerability in Samsung Open Source Escargot allows Resource Leak Exposure.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.

Improper input validation in Retail Mode prior to SMR Apr-2026 Release 1 allows local attackers to trigger privileged functions.

Pachno 1.0.6 contains an authentication bypass vulnerability in the runSwitchUser() action that allows authenticated low-privilege users to escalate privileges by manipulating the original_username cookie.

Pachno 1.0.6 contains an open redirection vulnerability that allows attackers to redirect users to arbitrary external websites by manipulating the return_to parameter.

The jv_parse_sized() API in libjq accepts a counted buffer with an explicit length parameter, but its error-handling path formats the input buffer using %s in jv_string_fmt(), which reads until a NUL…

An issue in the Bluetooth RFCOMM service of Parani M10 Motorcycle Intercom v2.1.3 allows unauthorized attackers to cause a Denial of Service (DoS) via supplying crafted RFCOMM frames.

Missing Authorization vulnerability allows Exposure of Sensitive Information via configuration endpoint.

Out-of-bounds read vulnerability in Samsung Open Source Escargot allows Resource Leak Exposure.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.

Exposure of sensitive information in S Share prior to SMR Apr-2026 Release 1 allows adjacent attacker to access sensitive information.

A weakness has been identified in DbGate up to 7.1.4.

A security flaw has been discovered in code-projects Easy Blog Site 1.0.

A vulnerability was determined in itsourcecode Construction Management System 1.0.

A vulnerability was found in itsourcecode Construction Management System 1.0.

A security flaw has been discovered in farion1231 cc-switch up to 3.12.3.

A vulnerability was determined in danielmiessler Personal_AI_Infrastructure up to 2.3.0.

Race condition vulnerability in the power consumption statistics module.

Race condition vulnerability in the thermal management module.

ImageMagick is free and open-source software used for editing and manipulating digital images.

ImageMagick is free and open-source software used for editing and manipulating digital images.

Functions jv_setpath(), jv_getpath(), and delpaths_sorted() in jq's src/jv_aux.c use unbounded recursion whose depth is controlled by the length of a caller-supplied path array, with no depth limit enforced.

A stack overflow in the experimental/tinyobj_loader_opt.h file of tinyobjloader commit d56555b allows attackers to cause a Denial of Service (DoS) via supplying a crafted .mtl file.

Deserialization of untrusted data vulnerability in Samsung Open Source Escargot Java Script allows denial of service condition via process abort.

The User Registration & Membership plugin for WordPress is vulnerable to Open Redirect in versions up to and including 5.1.4.

The _strindices builtin in jq's src/builtin.c passes its arguments directly to jv_string_indexes() without verifying they are strings, and jv_string_indexes() in src/jv.c relies solely on assert() checks…

Stack overflow vulnerability in the media platform.

A HTML Injection vulnerability exists in the Dashboard module of Vtiger CRM 8.4.0.

UAF vulnerability in the kernel module.

ImageMagick is free and open-source software used for editing and manipulating digital images.

Out-of-bounds write vulnerability in the kernel module.

UAF vulnerability in the kernel module.

Double free vulnerability in the multi-mode input system.

ImageMagick is free and open-source software used for editing and manipulating digital images.

ImageMagick is free and open-source software used for editing and manipulating digital images.

ImageMagick is free and open-source software used for editing and manipulating digital images.

ImageMagick is free and open-source software used for editing and manipulating digital images.

ImageMagick is free and open-source software used for editing and manipulating digital images.

The following vulnerability has been resolved: netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD __build_packet_message() manually constructs the NFULA_PAYLOAD netlink attribute…

The following vulnerability has been resolved: netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp process_sdp() declares union nf_inet_addr rtp_addr on the stack and passes it…

The following vulnerability has been resolved: rds: ib: reject FRMR registration before IB connection is established rds_ib_get_mr() extracts the rds_ib_connection from conn->c_transport_data and passes…

The following vulnerability has been resolved: netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP Weiming Shi says: xt_match and xt_target structs registered with…

The following vulnerability has been resolved: net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() m2sm() converts a u32 slope to a u64 scaled value.

The following vulnerability has been resolved: net/sched: cls_flow: fix NULL pointer dereference on shared blocks flow_change() calls tcf_block_q() and dereferences q->handle to derive a default baseclass.

The following vulnerability has been resolved: net/sched: cls_fw: fix NULL pointer dereference on shared blocks The old-method path in fw_classify() calls tcf_block_q() and dereferences q->handle.

The following vulnerability has been resolved: bridge: mrp: reject zero test interval to avoid OOM panic br_mrp_start_test() and br_mrp_start_in_test() accept the user-supplied interval value from netlink…

The following vulnerability has been resolved: netfilter: ipset: drop logically empty buckets in mtype_del mtype_del() counts empty slots below n->pos in k, but it only drops the bucket when both n->pos…

This can result in a WARN splat + drop of the netlink message, but other than this there are no ill effects.

The following vulnerability has been resolved: ipv6: avoid overflows in ip6_datagram_send_ctl() Yiming Qian reported : <quote> I believe I found a locally triggerable kernel bug in the IPv6 sendmsg…

Incorrect default permission in Galaxy Wearable prior to version 2.2.68.26 allows local attackers to access sensitive information.

A vulnerability was identified in CodeAstro Online Job Portal 1.0.

Stored Cross Site Scripting in NightWolf Penetration Testing Platform allows attack trigger and run malicious script in user's browser

Stored Cross-Site Scripting (XSS) via Unsanitized Topology Metadata in Apache Storm UI Versions Affected: before 2.8.6 Description: The Storm UI visualization component interpolates topology metadata…

The POST /api/v1/Email/importEml endpoint contains an Insecure Direct Object Reference (IDOR) vulnerability where the attacker-supplied fileId parameter is used to fetch any attachment directly from the…

Improper Neutralization of Input During Web Page Generation vulnerability allows Stored Cross-Site Scripting via event comments.

A vulnerability was determined in aandrew-me ytDownloader up to 3.20.2.

A vulnerability was found in code-projects Simple ChatBox 1.0.

It was possible in many places across the ChurchCRM application to create a link that, when visited by an authenticated user, would redirect them to any URL chosen by an attacker if they clicked 'Cancel'…

ImageMagick is free and open-source software used for editing and manipulating digital images.

Integer overflow or wraparound vulnerability in Samsung Open Source Escargot allows undefined behavior.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.

Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.

ImageMagick is free and open-source software used for editing and manipulating digital images.

LibreNMS versions before 26.3.0 are affected by an authenticated Cross-site Scripting vulnerability on the showconfig page.

A vulnerability was identified in HummerRisk up to 1.5.0.

UAF vulnerability in the communication module.

Versions 9.3.3 and below have a stored HTML injection vulnerability that allows any authenticated user with standard (non-administrative) privileges to inject arbitrary HTML into system-generated email…

A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows allows a local Windows administrator to disable the agent.

The bson_validate function may return early on specific inputs and incorrectly report success.

A vulnerability was found in aandrew-me ytDownloader up to 3.20.2.

A vulnerability has been found in code-projects Simple ChatBox up to 1.0.

A vulnerability has been found in code-projects Simple Laundry System 1.0.

Pachno 1.0.6 contains a cross-site request forgery vulnerability that allows attackers to perform arbitrary actions in authenticated user context by exploiting missing CSRF protections on state-changing…

Versions 9.3.3 and below have an authenticated Server-Side Request Forgery (SSRF) vulnerability that allows bypassing the internal-host validation logic by using alternative IPv4 representations such as…

Access control vulnerability in the memo module.

UAF vulnerability in the communication module.

An issue was discovered in HAProxy before 3.3.6.

A security vulnerability has been detected in DbGate up to 7.1.4.

A vulnerability has been found in PHPGurukul Company Visitor Management System 2.0.

The POST /api/v1/Attachment/fromImageUrl endpoint is vulnerable to Server-Side Request Forgery (SSRF) via a DNS rebinding (TOCTOU) condition.

A vulnerability was identified in uclouvain openjpeg up to 2.5.4.

External control of file name in AODManager prior to SMR Apr-2026 Release 1 allows privileged local attacker to create file with system privilege.

Improper access control in Samsung Camera prior to version 16.5.00.28 allows local attacker to access location data.

Sourcecodester Online Thesis Archiving System v1.0 is vulnerable to SQL injection in the file /otas/admin/curriculum/manage_curriculum.php.

Sourcecodester Online Thesis Archiving System v1.0 is vulnerable to SQL injection in /otas/projects_per_department.php.

Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL Injection in the file /rsms/admin/services/view_service.php.

Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL injection in the file /rsms/admin/inquiries/view_details.php.

Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL injection in the file /rsms/admin/clients/manage_client.php

Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerale to SQL injection in the file/rsms/admin/repairs/view_details.php.

Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL injection in the file /rsms/admin/repairs/manage_repair.php.

Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in the file /orms/admin/activities/manage_activity.php.

Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL Injection in the file /orms/admin/rooms/manage_room.php.

Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in /orms/admin/rooms/view_room.php.

Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in /orms/admin/reservations/view_details.php.

Sourcecodester Cab Management System 1.0 is vulnerable to SQL Injection in the file /cms/admin/bookings/view_booking.php.

Sourcecodester Cab Management System v1.0 is vulnerable to SQL injection in the file /cms/admin/categories/view_category.php.

Sourcecodester Online Reviewer System v1.0 is vulnerable to SQL Injection in the file /system/system/admins/assessments/examproper/questions-view.php.

Sourcecodester Online Reviewer System v1.0 is vulnerale to SQL Injection in the file /system/system/admins/assessments/examproper/exam-update.php.

Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/load_student.php.

Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/load_admin.php.

Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/load_book.php.

UAF vulnerability in the screen management module.

A weakness has been identified in code-projects Simple Content Management System 1.0.

Improper access control in Samsung DeX prior to SMR Apr-2026 Release 1 allows physical attackers to access to hidden notification contents.

Race condition vulnerability in the event notification module.

Race condition vulnerability in the notification service.

The PaymentsController::actionPay discloses some order data to unauthenticated users when an order number is provided and the email check fails during an anonymous payment.