2026

Tenda W308R v2 V5.07.48 contains a cookie session weakness vulnerability that allows unauthenticated attackers to modify

Alloksoft Video joiner 4.6.1217 contains a buffer overflow vulnerability that allows local attackers to execute arbitrar

Allok soft WMV to AVI MPEG DVD WMV Converter 4.6.1217 contains a buffer overflow vulnerability that allows local attacke

SysGauge 4.5.18 contains a buffer overflow vulnerability in the proxy configuration handler that allows local attackers

LifeSize ClearSea 3.1.4 contains directory traversal vulnerabilities that allow authenticated attackers to download and

VideoFlow Digital Video Protection DVP 2.10 contains an authenticated directory traversal vulnerability that allows atta

VideoFlow Digital Video Protection DVP 2.10 contains an authenticated remote code execution vulnerability that allows au

MyBB Recent threads 17.0 contains a persistent cross-site scripting vulnerability that allows attackers to inject malici

BuddyPress Xprofile Custom Fields Type 2.6.3 contains an arbitrary file deletion vulnerability that allows authenticated

SysGauge Pro 4.6.12 contains a local buffer overflow vulnerability in the Register function that allows local attackers

PDFunite 0.41.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by process

librsvg2-bin 2.40.13 contains a buffer overflow vulnerability that allows local attackers to cause a denial of service b

Free Download Manager 2.0 Build 417 contains a local buffer overflow vulnerability in the URL import functionality that

Allok Video to DVD Burner 2.6.1217 contains a stack-based buffer overflow vulnerability in the License Name field that a

Allok AVI to DVD SVCD VCD Converter 4.0.1217 contains a structured exception handling (SEH) based buffer overflow vulner

Easy MPEG to DVD Burner 1.7.11 contains a structured exception handling (SEH) local buffer overflow vulnerability that a

XATABoost CMS 1.0.0 contains a union-based SQL injection vulnerability that allows unauthenticated attackers to manipula

Prime95 29.4b8 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by exploit

Merge PACS 7.0 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions

AgentFlow contains an arbitrary code execution vulnerability that allows attackers to execute local Python pipeline file

AgentFlow's local web API accepts non-JSON content types on POST /api/runs and POST /api/runs/validate endpoints without

Integer underflow in the DHCPv6 sub-option parser in FreeRTOS-Plus-TCP before V4.4.1 and V4.2.6 allows an adjacent netwo

Integer underflow in the ICMP and ICMPv6 echo reply handlers in FreeRTOS-Plus-TCP before V4.4.1 and V4.2.6 allows an adj

Insufficient packet validation in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network actor to bypass

A weakness has been identified in florensiawidjaja BioinfoMCP up to 7ada7918b9e515604d3c0ae264d3a9af10bf6e54. This vulne

A security flaw has been discovered in NousResearch hermes-agent 0.8.0. This affects the function _check_sensitive_path

Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.0.0 to befo

Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.4.0 to befo

Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.8.0 to befo

Dell/Alienware Purchased Apps, versions prior to 1.1.31.0, contain an Improper Link Resolution Before File Access ('Link

Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.0.0 to befo

A vulnerability was identified in NousResearch hermes-agent 0.8.0. Affected by this issue is some unknown functionality

A vulnerability was determined in SourceCodester Pizzafy Ecommerce System 1.0. Affected by this vulnerability is an unkn

This vulnerability impacts all versions of IdentityIQ and allows an authenticated identity that is the requestor or assi

Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 1.0.0 to befo

DocsGPT is a GPT-powered chat for documentation. From version 0.15.0 to before version 0.16.0, an attacker accessing bot

A vulnerability was found in SourceCodester Pizzafy Ecommerce System 1.0. Affected is the function save_menu of the file

A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. This impacts the function dele

A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects the function save_supplier

An authorization flaw in the user management command could allow an authenticated user to make limited changes to authen

Computing the MD5 checksum of a malformed BSON object under specific conditions may cause loss of availability in MongoD

A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewal

A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted ser

A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be access

A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0. The impacted element is the func

A security vulnerability has been detected in EyouCMS up to 1.7.9. The affected element is the function GetSortData of t

A weakness has been identified in EyouCMS up to 1.7.9. Impacted is the function editFile of the file application/admin/l

A flaw has been found in fatbobman mail-mcp-bridge up to 1.3.3. Affected is an unknown function of the file src/mail_mcp

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILG

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TUBITAK BILGEM Software