Recent Advisories

Severity ID Title Vendor Product Date Type
MEDIUM 4.8 CVE-2026-13573

llvm llvm-project ValueSymbolTable ValueSymbolTable.cpp insert stack-based overflow_CVE-2026-13573

A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function llvm::StringMap::insert in the library /lib/IR/ValueSymbolTa...

llvm llvm-project 22.1.0 CVE
MEDIUM 5.3 CVE-2026-13572

itsourcecode Hospital Management System insertbillingrecord.php sql injection_CVE-2026-13572

A vulnerability has been found in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /insertbilli...

itsourcecode Hospital Management System 1.0 CVE
MEDIUM 6.9 CVE-2026-13571

SourceCodester Simple Food Ordering System cart.php logic error_CVE-2026-13571

A flaw has been found in SourceCodester Simple Food Ordering System 1.0. The affected element is an unknown function of the file /cart.php. Executi...

SourceCodester Simple Food Ordering System 1.0 CVE
MEDIUM 4.6 CVE-2026-38571

CVE-2026-38571_CVE-2026-38571

Cleartext storage and exposure of WPA2 credentials, and missing authentication on the rr/wr memory read/write commands, in the unauthenticated UART...

n/a n/a n/a CVE
MEDIUM 5.4 CVE-2026-50767

CVE-2026-50767_CVE-2026-50767

A stored cross-site scripting (XSS) vulnerability in the item type administration page of Koha Library Management System through 25.11 allows an au...

n/a n/a n/a CVE
MEDIUM 5.4 CVE-2026-50766

CVE-2026-50766_CVE-2026-50766

A stored cross-site scripting (XSS) vulnerability in the OPAC item detail page of Koha Library Management System through 25.11 allows an authentica...

n/a n/a n/a CVE
MEDIUM 6.1 CVE-2026-50765

CVE-2026-50765_CVE-2026-50765

Cross-Site Scripting (XSS) vulnerability in the patron restriction type administration page of Koha Library Management System through 25.11 allows ...

n/a n/a n/a CVE
MEDIUM 5.5 CVE-2026-36908

CVE-2026-36908_CVE-2026-36908

A stack overflow in the AP4_Array::EnsureCapacity component of axiomatic-systems Bento4 before v1.8.9allows attackers to cause a Denial of Service ...

n/a n/a n/a CVE
MEDIUM 5.5 CVE-2026-36907

CVE-2026-36907_CVE-2026-36907

A stack overflow in the AP4_StsdAtom::AP4_StsdAtom component of axiomatic-systems Bento4 before v1.8.9allows attackers to cause a Denial of Service...

n/a n/a n/a CVE
MEDIUM 4.8 CVE-2026-9677

Shariff for WordPress <= 1.0.11 - Admin+ Stored Cross-Site Scripting_CVE-2026-9677

The Shariff for WordPress Shariff for WordPress plugin through 1.0.11 does not sanitize or escape the shariff_infourl setting before outputting it ...

Unknown Shariff for WordPress CVE