Login
Multiple TP-Link products vulnerable to cleartext transmission of sensitive information
Multiple TP-Link products provided by TP-Link Systems Inc. contain Cleartext Transmission of Sensitive Information (CWE-319) vulnerability.
Reading view
WordPress Plugin "Zoho Mail for WordPress" vulnerable to cross-site request forgery
WordPress plugin "Zoho Mail for WordPress" provided by Zoho Corporation contains a cross-site request forgery vulnerability.
TP-Link Archer BE450 and BE7200 vulnerable to OS command injection
Archer BE450 and BE7200 provided by TP-Link contain an OS command injection vulnerability.
Multiple vulnerabilities in ServerView Agents for Windows
ServerView Agents for Windows provided by Fsas Technologies Inc. contains multiple vulnerabilities.
Link following vulnerability in Canon My Image Garden for macOS and CUPS Printer Driver for macOS
My Image Garden for macOS and CUPS Printer Driver for macOS provided by Canon Inc. contain a vulnerability that allows access to unintended files or directories due to improper resolving of links when accessing files.
Jupyter Server vulnerable to open redirect
Jupyter Server provided by Jupyter Development Team contains an open redirect vulnerability.
NEC Aterm series vulnerable to OS command injection (NV26-003)
NEC Aterm series products provided by NEC Corporation contain an OS command injection vulnerability.
NEC Aterm series vulnerable to cross-site scripting (NV26-002)
Aterm series products provided by NEC Corporation contain a cross-site scripting vulnerability.
Multiple vulnerabilities in Trend Micro Endpoint security products for enterprises (May 2026)
Trend Micro Incorporated has released security updates for Endpoint security products for enterprises.
Movable Type vulnerable to missing authorization
Movable Type provided by Six Apart Ltd. contains a missing authorization vulnerability.
Android App "RoboForm Password Manager" insufficient validation of Android intents
Android App "RoboForm Password Manager" provided by Siber Systems, Inc. handles Android intents without sufficient validation.
Multiple vulnerabilities in ELECOM wireless LAN routers and access points (May 2026)
Multiple wireless LAN routers and access points provided by ELECOM CO.,LTD. contain multiple vulnerabilities.
Multiple vulnerabilities in "Musetheque V4 Information Disclosure for IPKNOWLEDGE"
Musetheque V4 Information Disclosure for IPKNOWLEDGE provided by Fujitsu Japan Limited contains multiple vulnerabilities.
WPS Office improper access restriction to its named pipe
WPS Office provided by WPS SOFTWARE PTE. LTD. fails to properly restrict access to its named pipe.
GUARDIANWALL MailSuite vulnerable to stack-based buffer overflow
GUARDIANWALL MailSuite provided by Canon Marketing Japan Inc. contains a stack-based buffer overflow vulnerability.
Android App "γγγγγγ£γ«γΏγΌ for au" vulnerable to cleartext transmission of sensitive information
Android App "γγγγγγ£γ«γΏγΌ for au" provided by KDDI CORPORATION contains Cleartext Transmission of Sensitive Information (CWE-319) vulnerability.
Bytello Share (Windows Edition) installer executable insecurely loads Dynamic Link Libraries
Bytello Share (Windows Edition) installer executable provided by Bytello insecurely loads Dynamic Link Libraries.
Multiple vulnerabilities in ELECOM wireless LAN routers and access points
Multiple wireless LAN routers and access points provided by ELECOM CO.,LTD. contain multiple vulnerabilities.
Multiple vulnerabilities in ELECOM wireless LAN routers
Multiple wireless LAN routers provided by ELECOM CO.,LTD. contain multiple vulnerabilities.
ELECOM wireless LAN routers vulnerable to OS command injection
Multiple ELECOM wireless LAN routers provided by ELECOM CO.,LTD. contain an OS command injection vulnerability.
