2026

SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability

A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi g

A malicious actor with access to the network could exploit an Uncontrolled Recursion vulnerability found in certain UniF

Crypt::SelfCertificate versions from 1.01 through 1.05 for Perl contains malware which executes Python code from an obfu

Spree is an open source e-commerce solution built with Ruby on Rails. From 5.4.0 until 5.4.4 and 5.5.4, PATCH /api/v3/st

MCMS 6.1.1 through 6.2.1 is vulnerable to stored Cross-Site Scripting (XSS). The article content field `contentDetails`

Premiere Pro is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation

Substance3D - Modeler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution

Substance3D - Modeler is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code exe

Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result i

Substance3D - Modeler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution

Substance3D - Modeler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution

A malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability found in certain UniFi ga

A malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability found in certain UniFi ga

A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi g

A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi g

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, co

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, co

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, th

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, Ji

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, th

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, an

Adobe Experience Manager Forms JEE is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused

Adobe Experience Manager Forms JEE is affected by a Cross-Site Request Forgery (CSRF) vulnerability that could result in

Bridge is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the c

Bridge is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the co

Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context

Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context

Bridge is affected by an Uncontrolled Recursion vulnerability that could result in arbitrary code execution in the conte

Bridge is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the co

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application

Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabi

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security featur

A vulnerability was found in dgtlmoon changedetection.io up to 50389b07. This vulnerability affects the function add_wat

Missing authorization in Amazon amazon-connect-salesforce-lambda before 5.26 allows any IAM principal with lambda:Invoke

MikroTik RouterOS before 7.25beta4 contains an improper input validation vulnerability in the labelled-VPN NLRI iterator

Notepad++ is a free and open-source source code editor. Prior to 8.9.8, Notepad++ contains a stack buffer overflow in Np

Notepad++ is a free and open-source source code editor. From 8.9.7 until 8.9.8, the Notepad++ updater and signature veri

Notepad++ is a free and open-source source code editor. Prior to 8.9.8, Notepad++ contains a stack buffer overflow in Pl

Netdata is an open source observability tool. From version 2.0.0 until 2.10.4, Netdata Windows Agent MSI repair launches

Adobe Campaign Classic (ACC) is affected by an Improper Input Validation vulnerability that could result in arbitrary co

Notepad++ is a free and open-source source code editor. Prior to 8.9.8, the Folder as Workspace Run by system action in

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, va

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, va

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, _m

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, th

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, up

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, EN

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, va

Softaculous Virtualizor before 3.2.9 (Patch 9) and 3.0.0 contains an authorization bypass vulnerability in the billing m