2026

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions befo

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary ve

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions befo

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary ve

Payload is a free and open source headless content management system. In @payloadcms/plugin-ecommerce versions before 3.

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary ve

MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. Starting in version 1.

Dell Container Storage Modules, versions prior to 1.18.0 contain(s) an Use of Insufficiently Random Values vulnerability

Dell Container Storage Modules (CSM), versions prior to 1.18.0, contains a Missing Authentication for Critical Function

Dell Container Storage Modules (CSM) versions prior to 1.18.0, contains an Improper Certificate Validation vulnerability

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertion of Sensitive Information into Log File

External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernete

SimpleChat is a secure AI conversation application with personal and group workspaces for document-grounded interactions

SimpleChat is a secure AI conversation application with personal and group workspaces for document-grounded interactions

Kiota is an OpenAPI based HTTP Client code generator. From 0.5.0 until 1.35.0, Kiota's Java and PHP documentation-commen

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the r

HortusFox before 6.2 contains a remote code execution vulnerability in ThemeModule::startImport() where an uploaded ZIP

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Felisify Inf

Mooncake Store master through 0.3.13.post1 contains a missing authorization vulnerability that allows unauthenticated at

Mooncake Store master through 0.3.13.post1 contains a missing authentication vulnerability that allows unauthenticated a

A vulnerability was determined in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2

lrzsz before 0.13.0 contains an OS command injection vulnerability in the lrz receive utility's pipe mode that allows re

lrzsz before 0.13.0 contains a path traversal vulnerability in the lrz receive utility's restricted mode that allows mal

libmikmod before 3.3.14 contains an integer overflow in the Oktalyzer loader OKT_doPBOD() that allows attackers to cause

libmikmod before 3.3.14 contains an integer overflow vulnerability in DSM_Load() in load_dsm.c that allows attackers to

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.10, the

Smarty before 4.5.8 and 5.x before 5.8.5 contains a code injection vulnerability where the top-level nocache_hash is nev

A vulnerability was found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The

PLANKA 2.2.0 through 2.2.1 fails to limit incorrect TOTP codes submitted to POST /api/access-tokens/verify-totp, allowin

A vulnerability has been found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2

Craft CMS 5.10.13.2 contains an authenticated remote code execution vulnerability in the Control Panel action app/render

In the WibuKey driver for Windows below Version 6.72, insufficient validation of user input when calculating the size of

In the Linux kernel, the following vulnerability has been resolved: xfrm: add missing rcu_read_lock(), skb_dst_force()

In the Linux kernel, the following vulnerability has been resolved: esp: downgrade zerocopy managed frags before mutati

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Clear association under lock if siw_qp_mo

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: validate access flags before swapping the

In the Linux kernel, the following vulnerability has been resolved: xfrm: hold net_device reference under RCU in bundle

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Restore HMM_PFN_WRITE check in ODP write

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: insert mcg into mcg_tree only after rxe_m

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Reject unregistering netdevs in ib_get_e

In the Linux kernel, the following vulnerability has been resolved: IB/isert: wait for deferred control PDU completions

In the Linux kernel, the following vulnerability has been resolved: wifi: libipw: reject too-short beacon and probe res

In the Linux kernel, the following vulnerability has been resolved: wifi: libipw: reject too-short association response

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: don't free driver-owned scan reques

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: don't filter by BSS type when remov

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: unlist vifs when their netdev is un

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: get the wiphy out of a dying networ

In the Linux kernel, the following vulnerability has been resolved: dmaengine: pxa: fix double counting of the hw descr

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: hold reference on ct until fl

In the Linux kernel, the following vulnerability has been resolved: smb: client: validate absolute native symlink targe