2026

Nextcloud is an open source content collaboration platform. From versions 0.9.0 to before 0.9.7, and 1.0.0 to before 1.0

Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.9, a

Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.9, a

Nextcloud is an open source content collaboration platform. From versions 0.7.0 to before 0.7.7, 0.8.0 to before 0.8.10,

Nextcloud is an open source content collaboration platform. From version 0.8.0 to before version 1.0.4, the view filter

Nextcloud is an open source content collaboration platform. From version 4.3.0 to before version 5.2.7, a removed collab

parse-nested-form-data is a tiny node module for parsing FormData by name into objects and arrays. Prior to version 1.0.

Nextcloud is an open source content collaboration platform. From versions 5.5.13 to before 5.5.17, and 6.2.0 to before 6

Nextcloud is an open source content collaboration platform. From versions 32.0.0 to before 32.0.9, and 33.0.0 to before

Nextcloud is an open source content collaboration platform. From version 1.3.6 to before version 8.4.0, an improper chec

Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.2, a

Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.9, a

Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.9, a

Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 31.0.0 to before 31.0.14,

Nextcloud is an open source content collaboration platform. From version 6.1.0 to before version 8.2.2, an attacker can

Nextcloud is an open source content collaboration platform. Prior to version 2.7.2, authenticated users can check if arb

Nextcloud is an open source content collaboration platform. Prior to version 2.7.2, a privilege escalation vulnerability

A flaw was found in rrdcached, a component of rrdtool. A local attacker with access to a rrdcached socket can exploit a

CodexBar prior to 0.32.0 contains a session cookie leakage vulnerability that allows network attackers to intercept impo

F5-TTS through version 1.1.20 contains a path traversal vulnerability in the finetune Gradio handlers that allows unauth

microtar through 0.1.0 contains a stack-based buffer overflow vulnerability in the raw_to_header() function in src/micro

Input validation bypass in SMB volume mount handling in CloudFoundry Foundation diego-release allows low-privileged CF s

OOM error is possible while attempting to add infinite amount of functions to Function Registry. Affected Spring Produc

Under infinite recursion in the routing layer, request-handling can cause OOM error. Affected Spring Products and Versi

FlexRIC v2.0.0 trusts the xapp_id field from E42 message payloads without binding it to the sender's SCTP association. T

FlexRIC v2.0.0 contains an authorization bypass in the iApp's xApp isolation mechanism. The equality function eq_xapp_ri

An issue was discovered in OpenAirInterface5G 2.4.0 (nr-softmodem) in the E2SM-KPM RAN Function's PRB utilization metric

FlexRIC v2.0.0 uses a uint16_t counter for xapp_id assignment but stores the value in uint32_t message fields. After 65,

FlexRIC v2.0.0 crashes when the near-RT RIC receives a RIC_INDICATION message with a ran_func_id that does not exist in

FlexRIC v2.0.0 contains a reachable assertion in e2ap_create_pdu() triggered when ASN.1 PER decoding fails. A remote una

FlexRIC v2.0.0 contains a reachable assertion in e2ap_recv_sctp_msg() (src/lib/ep/e2ap_ep.c). The function allocates a f

FlexRIC v2.0.0 crashes when the iApp receives an E42_RIC_SUBSCRIPTION_REQUEST referencing a non-existent E2 Node. The lo

Capsule is a multi-tenancy and policy-based framework for Kubernetes. To defend against namespace hijacking achieved thr

Kiteworks is a private data network (PDN). Prior to version 9.3.0, an Insecure Direct Object Reference (IDOR) vulnerabil

Capsule is a multi-tenancy and policy-based framework for Kubernetes. The Capsule Controller runs with cluster-admin pri

A vulnerability was detected in Bottelet DaybydayCRM up to 2.2.1. Affected is an unknown function of the component Setti

A security vulnerability has been detected in Bottelet DaybydayCRM up to 2.2.1. This impacts the function view of the fi

A weakness has been identified in Enderfga claw-orchestrator up to 3.5.5. This affects the function EmbeddedServer of th

A security flaw has been discovered in horizon921 mcpilot 0.1.0. The impacted element is an unknown function of the file

A vulnerability was identified in hiraishikentaro wezterm-mcp 0.1.0. The affected element is an unknown function of the

A vulnerability was determined in ishayoyo excel-mcp up to 1.0.2. Impacted is an unknown function of the file src/index.

A vulnerability was found in j3k0 mcp-google-workspace up to 831790e7d5c2663325733d9f5579cc339a267c4c. This issue affect

A vulnerability has been found in hekmon8 Jenkins-server-mcp 0.1.0. This vulnerability affects the function jobPath of t

In addInputMethodListener of com.android.server.inputmethod.InputMethodManagerService, there is a missing permission che

launch-editor allows users to open files with line numbers in editor from Node.js. Prior to version 2.9.0, due to the in

pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved absolute

Improper access control in the PCTCore64.sys Windows kernel driver from PC Tools Internet Security allows user-mode proc

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descripti

Sulu is an open-source PHP content management system based on the Symfony framework. Prior to versions 2.6.23 and 3.0.6,

Nextcloud is an open source content collaboration platform. Prior to version 5.2.6, a missing permissions check allowed