2026

A vulnerability was identified in spencermountain compromise up to 14.15.1. Affected is the function nlp.extend of the f

A vulnerability was determined in kofrasa mingo up to 7.2.1. This impacts the function update/updateOne/updateMany of th

A vulnerability was found in svgdotjs svg.js up to 3.2.5. This affects the function EventTarget.on of the file svgdotjs/

DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location. The co

An authorization bypass in Nexus Repository 3's component upload API allowed a user with only read/browse privileges on

Summary Cloudflare quiche was discovered to be vulnerable to memory resource exhaustion due to unbounded queuing of p

A denial-of-service security issue exists in the affected products. The security issue stems from improper handling of e

Summary Cloudflare quiche's HTTP/3 layer was discovered to be vulnerable to resource exhaustion (i.e., memory) by mea

openSIS Classic 9.3 contains an authenticated path traversal vulnerability in the legacy messaging sent-mail attachment

A path traversal security issue exists within Rockwell Automation ThinManager® software due to improper limitation of fi

A vulnerability in Sonatype Nexus Repository Manager's format-specific API key generation may allow a remote attacker to

An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] vulnera

An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] vulnera

A out-of-bounds read vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.2, FortiAuthenticator 6.5 all versio

A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all v

A denial-of-service issue exists in 5380/5480/5580 controllers boot firmware lower than version 1.072. This vulnerabilit

A denial-of-service security issue exists across all the 1756-EN2, EN3, and ENBT communication module due to improper va

A denial-of-service security issue exists in the 1719-AENTR. The security issue stems from improper handling of a UDP un

Vulnerability in Spotfire Spotfire Enterprise (Spotfire Server modules), Spotfire Spotfire Enterprise with External Cons

Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a path traversal vulnerability that allows attacke

Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a command injection vulnerability in the optional

Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a server-side request forgery (SSRF) vulnerability

Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a mass assignment vulnerability that allows unauth

Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a cross-site request forgery vulnerability that al

Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a stored cross-site scripting vulnerability that a

Easy!Appointments is a self hosted appointment scheduler. In versions up to and including 1.5.2, the booking reschedule

Buffer Overflow vulnerability in aMULE-Project aMule v.2.3.3 allows a remote attacker to cause a denial of service via t

Snowflake SQLAlchemy versions prior to 1.11.0 contain several security vulnerabilities, including: Improper handling of

A vulnerability has been found in Tenda BE12 Pro 16.03.66.23. The impacted element is the function fromVirtualSer of the

A flaw has been found in Tenda BE12 Pro 16.03.66.23. The affected element is the function fromDhcpListClient of the file

A vulnerability was detected in Tenda BE12 Pro 16.03.66.23. Impacted is the function fromSetIpBind of the file /goform/S

A path traversal vulnerability in Tenable Agent 11.2.0 and 11.1.3 and lower allows a privileged attacker to write arbitr

Path traversal in Ivanti  Xtraction before version 2026.2.1 allows a remote authenticated attacker to read arbitrary fil

An open redirect in Ivanti Xtraction before version 2026.2.1 allows a remote unauthenticated attacker to redirect users

A security issue exists within FactoryTalk® Services Platform (FTSP), allowing an attacker to bypass JWT signature valid

subsys/net/lib/lwm2m/lwm2m_pull_context.c copied the firmware-update Package URI into a fixed static buffer (context.uri

In Zephyr's kernel pipe implementation, the userspace syscall verifier z_vrfy_k_pipe_init() in kernel/pipe.c used K_SYSC

The CONFIG_USERSPACE verification handler for the k_thread_name_copy() system call (z_vrfy_k_thread_name_copy() in kerne

On Xtensa SoCs built with CONFIG_XTENSA_MPU and CONFIG_USERSPACE, arch_buffer_validate() in arch/xtensa/core/mpu.c — the

A denial-of-service security issue exists in 1734 POINT I/O™ module. The security issue stems from improper handling of

A denial-of-service issue exists in 5380/5480/5580 controllers. This vulnerability could potentially allow a malicious u

A denial-of-service issue exists in  5370/5570 controllers. This vulnerability could potentially allow a remote user to 

Out-of-bounds read vulnerability in Citrix Citrix Secure Access Client for Windows. This issue affects Citrix Secure Ac

A security vulnerability has been detected in Tenda BE12 Pro 16.03.66.23. This issue affects the function fromSafeMacFil

A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the siman.exe (Siman) compo

A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the linker.exe (Siman) comp

A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the expmt.exe (Siman) compo

A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the model.exe (Siman) compo

Improper Handling of Insufficient Permissions or Privileges vulnerability in Apache Kylin. Improper authorization in job

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Kylin