2026

In the Linux kernel, the following vulnerability has been resolved: crypto: iaa - Fix out-of-bounds index in find_empty

In the Linux kernel, the following vulnerability has been resolved: hfs: ensure sb->s_fs_info is always cleaned up Whe

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: Fix alignment fault in rtw_core_enable

UTT HiPER 810 / nv810v4 router firmware v1.5.0-140603 was discovered to contain insecure default credentials for the tel

ZoneMinder v1.36.34 is vulnerable to Command Injection in web/views/image.php. The application passes unsanitized user i

mayswind ezbookkeeping versions 1.2.0 and earlier contain a critical vulnerability in JSON and XML file import processin

Deserialization of Untrusted Data vulnerability in OpenText™ Directory Services allows Object Injection.  The vulnerabi

A flaw has been found in ChaiScript up to 6.1.0. This affects the function chaiscript::Type_Info::bare_equal of the file

An unauthenticated stack-based buffer overflow vulnerability exists in the HTTP API endpoint /cgi-bin/api.values.get. A

Jenkins 2.550 and earlier, LTS 2.541.1 and earlier accepts Run Parameter values that refer to builds the user submitting

Jenkins 2.483 through 2.550 (both inclusive), LTS 2.492.1 through 2.541.1 (both inclusive) does not escape the user-prov

In the Linux kernel, the following vulnerability has been resolved: mm/slab: Add alloc_tagging_slab_free_hook for memcg

In the Linux kernel, the following vulnerability has been resolved: gpio: loongson-64bit: Fix incorrect NULL check afte

In the Linux kernel, the following vulnerability has been resolved: riscv: trace: fix snapshot deadlock with sbi ecall

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix use-after-free in iscsit_d

In the Linux kernel, the following vulnerability has been resolved: x86/vmware: Fix hypercall clobbers Fedora QA repor

In the Linux kernel, the following vulnerability has been resolved: btrfs: reject new transactions if the fs is fully r

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Disable MMIO access during SMU Mode 1 r

In the Linux kernel, the following vulnerability has been resolved: bonding: annotate data-races around slave->last_rx

In the Linux kernel, the following vulnerability has been resolved: mm, swap: restore swap_space attr aviod kernel pani

The Advanced AJAX Product Filters plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugi

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't WARN for connections on inval

In the Linux kernel, the following vulnerability has been resolved: md: suspend array while updating raid_disks via sys

An arbitrary code execution vulnerability exists in the Code Stream directive functionality of OpenCFD OpenFOAM 2506. A

A vulnerability was detected in ChaiScript up to 6.1.0. The impacted element is the function chaiscript::str_less::opera

A weakness has been identified in huggingface smolagents 1.24.0. Impacted is the function requests.get/requests.post of

Path traversal vulnerability in the AMR Printer Management 1.01 Beta web service, which allows remote attackers to read

Reflected Cross-Site Scripting (XSS) vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack

Reflected Cross-Site Scripting (XSS) vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack

Reflected Cross-Site Scripting (XSS) vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack

Reflected Cross-Site Scripting (XSS) vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack

Reflected Cross-Site Scripting (XSS) vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack

Improper Access Control (IDOR) in the Graylog API, version 2.2.3, which occurs when modifying the user ID in the URL. An

Not properly invalidated session vulnerability in Graylog Web Interface, version 2.2.3, due to incorrect management of s

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Key Softwar

A vulnerability has been identified in Rexroth IndraWorks. This flaw allows an attacker to execute arbitrary code on the

A vulnerability has been identified in Rexroth IndraWorks. This flaw allows an attacker to execute arbitrary code on the

A vulnerability has been identified in the UA.Testclient utility, which is included in Rexroth IndraWorks. All versions

A vulnerability has been identified in the OPC.Testclient utility, which is included in Rexroth IndraWorks. All versions

When hours are entered in time@work, version 7.0.5, it performs a query to display the projects assigned to the user. If

NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user

NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution. A successful exploit

NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution. A successful exploit

NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution. A successful exploit

NVIDIA NeMo Framework for all platforms contains a vulnerability in a voice-preprocessing script, where malicious input

NVIDIA NeMo Framework for all platforms contains a vulnerability in the ASR Evaluator utility, where a user could cause

NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful expl

NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution in distributed enviro

NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by loading a maliciou