2026

OpenProject is an open-source, web-based project management software. In versions prior to 16.6.9, 17.0.6, 17.1.3, and 1

OpenProject is an open-source, web-based project management software. Versions prior to 16.6.9, 17.0.6, 17.1.3, and 17.2

Devise is an authentication solution for Rails based on Warden. Prior to version 5.0.3, a race condition in Devise's Con

StudioCMS is a server-side-rendered, Astro native, headless content management system. Prior to 0.4.4, the REST API `get

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-17 and 6.9

ClipBucket v5 is an open source video sharing platform. An authenticated time-based blind SQL injection vulnerability ex

SAMtools is a program for reading, manipulating and writing bioinformatics file formats. Starting in version 1.17, in th

SAMtools is a program for reading, manipulating and writing bioinformatics file formats. The `mpileup` command outputs D

OmniGen2-RL contains an unauthenticated remote code execution vulnerability in the reward server component that allows r

OpenEMR is a free and open source electronic health records and medical practice management application. In versions up

Improper certificate validation in Devolutions Hub Reporting Service 2025.3.1.1 and earlier allows a network attacker t

HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA se

HTSlib is a library for reading and writing bioinformatics file formats. GZI files are used to index block-compressed GZ

HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA se

HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA se

HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA se

HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA se

DISPUTED: The project has clarified that the documentation was incorrect, and that pkgutil.get_data() has the same secur

HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA se

HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA se

HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA se

Microsoft Dynamics 365 Customer Engagement (on-premises) 1612 (9.0.2.3034) allows the generation of customized reports v

Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.2, in Central Browser mode, Glance

Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.2, in Central Browser mode, the `/

Glances is an open-source system cross-platform monitoring tool. Glances recently added DNS rebinding protection for the

Glances is an open-source system cross-platform monitoring tool. The GHSA-x46r fix (commit 39161f0) addressed SQL inject

HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA se

The WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02) exposes an unprotected UART interface through accessible hard

A command injection vulnerability exists in the web management interface of the WiFi Extender WDR201A (HW V2.1, FW LFMZX

The WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02) implements a broken authentication mechanism in its web manag

The web interface of the WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02) contains hardcoded credential disclosure

A stored cross-site scripting (XSS) vulnerability exists in the NotChatbot WebChat widget thru 1.4.4. User-supplied inpu

An arbitrary file upload vulnerability in aaPanel v7.57.0 allows attackers to execute arbitrary code via uploading a cra

A lack of path validation in aaPanel v7.57.0 allows attackers to execute a local file inclusion (LFI), leadingot sensiti

An issue in the VirtualHost configuration handling/parser component of aaPanel v7.57.0 allows attackers to cause a Regul

nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 lib

Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.174, 15G and 16G versions prior to 7.10.9

Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.181, 15G and 16G versions prior to 7.20.1

Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToE

In the Linux kernel, the following vulnerability has been resolved: net/sched: Only allow act_ct to bind to clsact/ingr

In the Linux kernel, the following vulnerability has been resolved: apparmor: validate DFA start states are in bounds i

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix unprivileged local user can do privil

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix IS_CHECKPOINTED flag inconsistency issue

In the Linux kernel, the following vulnerability has been resolved: fbdev: rivafb: fix divide error in nv3_arb() A use

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on node footer in {rea

In the Linux kernel, the following vulnerability has been resolved: Revert "drm/amd: Check if ASPM is enabled from PCIe

In the Linux kernel, the following vulnerability has been resolved: io_uring/zcrx: fix page array leak d9f595b9a65e ("

In the Linux kernel, the following vulnerability has been resolved: gve: Fix stats report corruption on queue count cha

In the Linux kernel, the following vulnerability has been resolved: nvme-fc: release admin tagset if init fails nvme_f

In the Linux kernel, the following vulnerability has been resolved: regmap: maple: free entry on mas_store_gfp() failur