2026

The user-mode verification handler for the device_deinit() system call, z_vrfy_device_deinit() in kernel/device.c, valid

The ARM64 MMU back-end allocated address space identifiers (ASIDs) for memory domains with a bare round-robin counter in

The LE Audio Broadcast Sink in subsys/bluetooth/audio/bap_broadcast_sink.c copies subgroup metadata from a received Basi

dynamic_object_create() in kernel/userspace/userspace.c computed the backing allocation for a dynamically allocated kern

In Progress® Telerik® Report Server prior to version 12.2.26.1007, a stored cross-site scripting vulnerability in the sh

In Progress® Telerik® Report Server prior to version 12.2.26.1007, incorrect privilege assignment in the service-agent S

Executable Regular Expression Error vulnerability in WP Media WP Rocket wp-rocket allows Code Injection.This issue affec

The FooSales WordPress plugin before 1.43.3 does not verify that an authenticated caller is entitled to act as the user

The Ocean Pro Demos and Ocean eComm Treasure Box plugins for WordPress is vulnerable to Stored Cross-Site Scripting via

The AWP Classifieds WordPress plugin before 4.4.9 does not validate the type of files extracted from an uploaded ZIP arc

Backdrop CMS 1.34 before 1.34.5 and 1.35 before 1.35.1 doesn't sufficiently protect configuration exports when deliverin

A type confusion vulnerability in the _read_flags function (src/commands/cmd_dispatcher.c) in FalkorDB before 4.20.0 all

An improper authentication vulnerability in the is_authenticated function (src/bolt/bolt_api.c) in FalkorDB before 4.20.

A stack-based buffer overflow in the _RdbLoadEntity function of the RDB graph decoders (src/serializers/decoders/*/decod

HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because

Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted

Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/toolchain go.sum entry and

Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/fips140 and operates a mal

Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit

When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connecti

Missing authorization in Azure Event Grid allows an authorized attacker to perform spoofing over a network.

Exposure of sensitive information to an unauthorized actor in Azure API Center allows an unauthorized attacker to disclo

A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams

When parsing a Range header containing a large number of small ranges, FileServer(FS), ServeContent, and ServeFile(FS) c

Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cann

When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.T

When http.Transport sends an HTTP/1 CONNECT request with a non-empty Request.Body, it writes the body directly to the co

Strawberry GraphQL is a library for creating GraphQL APIs. From 0.217.0 until 0.326.1, PermissionExtension.resolve() on

A flaw was found in ansible-core. When installing a collection with `ansible-galaxy collection install`, the archive ext

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffe

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial of service due to a path

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffe

IBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a denial of service due to a race condition r

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to imp

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffe

IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server) PR

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary commands due to imprope

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a stack

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to delete arbitrary files due to improper li

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffe

IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection. A remote unauthenticated attacker coul

fast-jwt provides fast JSON Web Token (JWT) implementation. In 6.2.4, fast-jwt can classify raw serialized public JWK or

fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to 6.3.0, fast-jwt createVerifier accepts a validly si

fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to 6.3.1, fast-jwt createVerifier accepts an unsigned

An issue in libming through 0.4.8 allows a remote attacker to cause a denial of service via the readtag_file() in src/bl

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cro