Login
OS command injection in RadiX AX6600 WiFi 6 Tri-Band Gaming Router
RadiX AX6600 WiFi 6 Tri-Band Gaming Router provided by Micro-Star International Co., Ltd. contains an OS command injection vulnerability.
Reading view
ThingsBoard vulnerable to prototype pollution
ThingsBoard contains a prototype pollution vulnerability.
Improper file access permission settings in the installers for Optical Disc Archive Software for Windows
Optical Disc Archive Software for Windows provided by Sony Corporation is configured with improper file access permission settings.
Multiple vulnerabilities in Canon EOS Network Setting Tool
PC Software EOS Network Setting Tool provided by Canon Inc. contains multiple vulnerabilities.
Privilege escalation vulnerability in multiple RICOH and KONICA MINOLTA JAPAN printer drivers
Multiple printer drivers provided by RICOH and KONICA MINOLTA JAPAN contain a privilege escalation vulnerability.
CamView installer insecurely loads Dynamic Link Libraries
CamView installer provided by ARUCOM Inc. insecurely loads Dynamic Link Libraries.
Multiple TP-Link products vulnerable to cleartext transmission of sensitive information
Multiple TP-Link products provided by TP-Link Systems Inc. contain Cleartext Transmission of Sensitive Information (CWE-319) vulnerability.
WordPress Plugin "Zoho Mail for WordPress" vulnerable to cross-site request forgery
WordPress plugin "Zoho Mail for WordPress" provided by Zoho Corporation contains a cross-site request forgery vulnerability.
TP-Link Archer BE450 and BE7200 vulnerable to OS command injection
Archer BE450 and BE7200 provided by TP-Link contain an OS command injection vulnerability.
Multiple vulnerabilities in ServerView Agents for Windows
ServerView Agents for Windows provided by Fsas Technologies Inc. contains multiple vulnerabilities.
Link following vulnerability in Canon My Image Garden for macOS and CUPS Printer Driver for macOS
My Image Garden for macOS and CUPS Printer Driver for macOS provided by Canon Inc. contain a vulnerability that allows access to unintended files or directories due to improper resolving of links when accessing files.
Jupyter Server vulnerable to open redirect
Jupyter Server provided by Jupyter Development Team contains an open redirect vulnerability.
NEC Aterm series vulnerable to OS command injection (NV26-003)
NEC Aterm series products provided by NEC Corporation contain an OS command injection vulnerability.
NEC Aterm series vulnerable to cross-site scripting (NV26-002)
Aterm series products provided by NEC Corporation contain a cross-site scripting vulnerability.
Multiple vulnerabilities in Trend Micro Endpoint security products for enterprises (May 2026)
Trend Micro Incorporated has released security updates for Endpoint security products for enterprises.
Movable Type vulnerable to missing authorization
Movable Type provided by Six Apart Ltd. contains a missing authorization vulnerability.
Android App "RoboForm Password Manager" insufficient validation of Android intents
Android App "RoboForm Password Manager" provided by Siber Systems, Inc. handles Android intents without sufficient validation.
Multiple vulnerabilities in ELECOM wireless LAN routers and access points (May 2026)
Multiple wireless LAN routers and access points provided by ELECOM CO.,LTD. contain multiple vulnerabilities.
Multiple vulnerabilities in "Musetheque V4 Information Disclosure for IPKNOWLEDGE"
Musetheque V4 Information Disclosure for IPKNOWLEDGE provided by Fujitsu Japan Limited contains multiple vulnerabilities.
WPS Office improper access restriction to its named pipe
WPS Office provided by WPS SOFTWARE PTE. LTD. fails to properly restrict access to its named pipe.
