2026

CMAK through 3.0.0.6 fails to install a cross-site request forgery filter, allowing attackers to perform state-changing

SafeLine through 9.4.1 derives the management console session-signing secret from a time-seeded math/rand generator, all

BC Security Empire before 6.7.1 fails to validate the multipart filename parameter in upload endpoints, allowing authent

A vulnerability in the APIs of Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection attacks

A vulnerability in the REST API of Cisco ISE could allow an authenticated, remote attacker to upload or copy arbitrary f

A vulnerability in Cisco Adaptive Security Device Manager (ASDM) single sign-on (SSO) handler for Cisco Secure FMC Softw

A vulnerability in the remote diagnostics debugger of Cisco Secure FMC Software could allow an authenticated, remote att

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering t

Tina is a headless content management system. Prior to @tinacms/auth 1.1.4 and next-tinacms-azure 15.0.1, isAuthorized a

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering t

A vulnerability in the RADIUS feature of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote att

A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote

A vulnerability in a critical API for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to downl

A vulnerability in a specific file download API of Cisco Secure FMC Software could allow an authenticated, remote attack

A vulnerability in Cisco Secure FMC Software could allow an authenticated, remote attacker to execute arbitrary commands

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appl

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appl

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appl

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appl

A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software and Cisco Secure FTD So

A vulnerability in Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection attacks on an affect

A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software and Cisco Secure FTD So

A vulnerability in Datagram TLS (DTLS) message handling of Cisco Secure Firewall Adaptive Security Appliance (ASA) Softw

A vulnerability in the certification authentication feature of Internet Key Exchange version 2 (IKEv2) for Cisco Se

A vulnerability in Cisco ISE could allow an unauthenticated, remote attacker to conduct SQL injection attacks on an affe

A vulnerability in the EIGRP implementation in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisc

A vulnerability in the system rate-limiting process for syslog message 419002 of Cisco Secure Firewall Adaptive Security

A vulnerability in the TLS 1.3 implementation in Cisco Secure Firewall Threat Defense (FTD) Software could allow an unau

DD-WRT firmware, as deployed on TP-Link TL-WR740N v1 through v4 hardware, stores sensitive authentication credentials in

Apache NiFi Registry 0.4.0 through 2.11.0 are subject to path manipulation when storing extension bundle content using g

Tanium addressed a SQL injection vulnerability in Threat Response.

Tanium addressed a SQL injection vulnerability in Asset.

Tanium addressed a SQL injection vulnerability in Asset.

Improper validation of pod identifier uniqueness in aws-network-policy-agent in Amazon EKS Network Policy Agent before v

Apache NiFi 2.11.0 supports migrating the contents of a version-controlled Process Group into a Connector using REST API

A remote attacker could cause excessive resource consumption by supplying specially crafted request parameters, potentia

Apache NiFi 2.11.0 disabled support for gzip-encoded HTTP requests for the application REST API and rejected requests th

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering t

SigNoz versions 0.88.0 through 0.141.0 fail to apply authorization wrappers to trace-funnel analytics endpoints in the H

Skipper is an HTTP router and reverse proxy for service composition. Prior to version 0.27.37, the opaAuthorizeRequestWi

CoreDNS is a DNS server written in Go. Prior to 1.14.7, the DNS-over-HTTPS, DNS-over-HTTP/3, DNS-over-QUIC, and DNS-over

CoreDNS is a DNS server written in Go. Prior to 1.14.7, the DNS-over-HTTPS, DNS-over-HTTP/3, DNS-over-QUIC, and DNS-over

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to versio

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to versio

An issue in Howyar Technologies Inc SysReturn Versions prior to 11.3.034 and fixed in v.11.3.0.34 allows a local attcker

Redocly CLI makes OpenAPI validation, linting, and documentation workflows easier. Prior to version 2.33.0 of @redocly/r

Wire provides gRPC and protocol buffers for Android, Kotlin, Swift, and Java. Prior to 6.4.5 and 7.0.0-alpha04, Wire pro

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. St

A Null Pointer Dereference in the mk_sched_event_close function (mk_server/mk_scheduler.c) of Monkey through commit 4fb0

Quickwit through 0.9.0 fails to validate the host and scheme of the queue_url parameter in SQS file sources, allowing at