2026

A flaw was found in `cockpit-ws`. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Serv

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's

AnyCable is a realtime server for reliable two-way communication that supports any backend. Prior to 1.6.15, the telemet

AnyCable is a realtime server for reliable two-way communication that supports any backend. Prior to 1.6.15, the Pusher-

Capsule is a multi-tenancy and policy-based framework for Kubernetes. From 0.13.0 until 0.13.7, hostnameRegexHandler.OnU

Capsule is a multi-tenancy and policy-based framework for Kubernetes. From 0.13.0 until 0.13.7, the Tenant update valida

Azkaban through 4.0.0 omits project permission checks in the ScheduleServlet fetchSchedule action, allowing authenticate

Mealie before 3.21.0 fails to validate user ownership in the ratings and favorites endpoints, allowing authenticated att

WinFsp through 2.2.26215 contains a null pointer dereference vulnerability in the kernel driver's Fast I/O device contro

A security vulnerability has been detected in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf7

A weakness has been identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This vu

Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active

libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.3, the no-icef full-item branch of un

libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.3, a crafted image item containing a

libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, the public heif_region_item_add_region_inli

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 use

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 cont

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 cont

CM2507 IP cameras automatically execute a predetermined script from removable media without verifying its authenticity o

Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active

The code in pppd that formats a response to a PEAP Request packet in peap_response() copies an entire TLS record of up t

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / a

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / a

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / a

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / a

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / a

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / a

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / a

http4k is a functional toolkit for Kotlin HTTP applications. Prior to 4.51.0.0, 5.42.0.0, and 6.50.0.0, DigestAuthProvid

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cro

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cro

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 generates an error m

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cro

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cro

IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to obtain sensitive information about the fi

IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 a

IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 transmits data in clear text that could allow an

IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 could allow an authenticated user to bypass inpu

IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4.0 through 3.2.4.16 is vulnerable to cross-

IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 stores sensitive information in source cod

IBM TS4300 1.1.0.1 through 1.7.1.1 could allow an authenticated user to cause a denial of service in the email service d

IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 could allow an attacker on a shared networ

IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 006 could allow an authenticated user to obtain sensitive information fr

A flaw was found in the multicluster-observability-addon. A remote attacker can access a debug endpoint without authenti

SQLBot through 1.10.1 fails to verify dashboard ownership in update_resource and update_canvas endpoints, allowing authe