2026

Memory Corruption when processing camera operations due to out-of-bounds write during driver updates.

Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware u

Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.

Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated me

Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.

Unauthenticated Broken Access Control in WP Event Solution <= 4.1.25 versions.

Contributor Broken Access Control in WDS MCP Content Manager <= 3.10.4 versions.

Missing Authorization vulnerability in iatoai IATO MCP iato-mcp allows Exploiting Incorrectly Configured Access Control

Authorization Bypass Through User-Controlled Key vulnerability in ZWEISCHNEIDER Faktur Pro for WooCommerce woorechnung a

A security vulnerability has been detected in vllm-project vLLM up to 0.31.0. This impacts the function conv_ssm_forward

A flaw has been found in imgproxy up to 4.0.17. Affected by this vulnerability is the function sanitizeElement of the fi

A security vulnerability has been detected in uptrace up to 2.1.0-beta.8. Affected by this vulnerability is the function

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected is an unknown function. Execut

A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function o

A vulnerability was determined in PHPGurukul User Registration & Login and User Management System 3.3. The impacted elem

A security flaw has been discovered in jishenghua jshERP up to 3.5. Affected is the function updateAccountHeadAndDetail

A vulnerability was found in chillzhuang SpringBlade up to 5.0.1. The impacted element is an unknown function of the fil

A vulnerability was found in newbee-ltd newbee-mall up to 2.7.5. This impacts an unknown function of the file /jshERP-bo

A vulnerability has been found in PickMall Lilishop up to 4.2.4. This affects an unknown function of the file /buyer/tra

A vulnerability was found in yogeshojha reNgine up to 2.2.0. Affected by this vulnerability is the function subdomain_di

Punk versions from 0.48 before 0.55 for Perl route Extended CONNECT requests to any GET route without an Origin check in

A flaw was found in sssd. A local attacker can trigger a Denial of Service (DoS) by sending a specially crafted Pluggabl

A flaw was found in SSSD. A local attacker with access to the Name Service Switch (NSS) responder UNIX socket can trigge

A flaw was found in sssd. A local attacker can cause a Denial of Service (DoS) by sending a crafted Pluggable Authentica

A flaw was found in SSSD. An unprivileged local user can repeatedly request lookups for nonexistent entries through the

A flaw was found in SSSD. When configured with the Entra ID identity provider, input lookup names containing single quot

A flaw was found in SSSD. A local user can cause a denial of service (DoS) by disrupting system authentication services.

A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LD

A weakness has been identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c9

A flaw was found in sssd. A remote attacker can cause a denial of service (DoS) by submitting a certificate that lacks a

A flaw was found in SSSD. A local attacker can exploit this issue by sending a specially crafted request with an invalid

A flaw was found in SSSD's NFS idmap plugin. When retrieving cached user or group names, the plugin detects if an entry

A flaw was found in SSSD. An issue in the Kerberos Credential Manager (KCM) responder allows a local user to cause a Den

A flaw was found in SSSD. A use-after-free vulnerability exists in the Kerberos Credential Manager (KCM) responder durin

A flaw was found in SSSD. When configured to enforce account expiration using LDAP (Lightweight Directory Access Protoco

A flaw was found in SSSD. An unprivileged local user can repeatedly request master automount map updates through the aut

A flaw was found in SSSD. In configurations where the autofs responder service is enabled, memory allocated during succe

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to Jopli

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.1

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, a caller can use the request-level m

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, the Rust frontend's track_http_metri

vLLM is an inference and serving engine for large language models. From 0.24.0 until 0.30.0, the Qwen2VLVideoBackend and

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, structured-output request failures c

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, OpenAI-compatible request models acc

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, flash late-interaction scoring at th

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, the /inference/v1/generate endpoint

vLLM is an inference and serving engine for large language models. Prior to 0.28.0, the default mirrored multimodal LRU

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecos

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecos

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecos