2026

Tanium addressed an arbitrary file deletion vulnerability in End-User Notifications Endpoint Tools.

SumatraPDF is a multi-format reader for Windows. In 3.5.0 through 3.5.2, SumatraPDF's update mechanism disables TLS host

PowerDocu contains a Windows GUI executable to perform technical documentations. Prior to 2.4.0, PowerDocu contains a cr

my little forum is a PHP and MySQL based internet forum that displays the messages in classical threaded view. Prior to

SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, a heap out-of-bounds read vulnerability exists in

unity-cli is a command line utility for the Unity Game Engine. Prior to 1.8.2 , the sign-package command in @rage-agains

Adminer is open-source database management software. Adminer v5.4.1 and earlier has a version check mechanism where admi

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, previ

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, previ

PolarLearn is a free and open-source learning program. In 0-PRERELEASE-16 and earlier, the group chat WebSocket at wss:/

SandboxJS is a JavaScript sandboxing library. Prior to 0.8.31, a sandbox escape vulnerability allows sandboxed code to m

SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, the PDF reader allows execution of a malicious bi

PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, The admin authorizatio

PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, User-controlled query

PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, The application logs h

PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the application enable

PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the application derive

Hollo is a federated single-user microblogging software designed to be federated through ActivityPub. Prior to 0.6.20 an

ZAI Shell is an autonomous SysOps agent designed to navigate, repair, and secure complex environments. Prior to 9.0.3, t

Tanium addressed an uncontrolled resource consumption vulnerability in Tanium Server.

Tanium addressed a local privilege escalation vulnerability in Tanium Server.

Tanium addressed a local privilege escalation vulnerability in Tanium Module Server.

FroshAdminer is the Adminer plugin for Shopware Platform. Prior to 2.2.1, the Adminer route (/admin/adminer) was accessi

PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the backend/src/routes

PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the backend/src/routes

PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the code evaluation en

PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the GET /api/students/

Sliver is a command and control framework that uses a custom Wireguard netstack. Prior to 1.7.0, the DNS C2 listener acc

Faraday is an HTTP client library abstraction layer that provides a common interface over many adapters. Prior to 2.14.1

Super-linter is a combination of multiple linters to run as a GitHub Action or standalone. From 6.0.0 to 8.3.0, the Supe

captive browser, a dedicated Chrome instance to log into captive portals without messing with DNS settings. In 25.05 and

Axios is a promise based HTTP client for the browser and Node.js. Prior to versions 0.30.3 and 1.13.5, the mergeConfig f

LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. The LangSmith SDK's distributed tracing

A security vulnerability has been detected in AprilRobotics apriltag up to 3.4.5. Affected by this vulnerability is the

A vulnerability was identified in CCExtractor up to 183. This affects the function parse_PAT/parse_PMT in the library sr

Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. Prior to 2.14.2, a security v

Craft is a platform for creating digital experiences. In versions 4.0.0-RC1 through 4.16.17 and 5.0.0-RC1 through 5.8.21

Craft is a platform for creating digital experiences. In Craft versions from 4.0.0-RC1 to before 4.17.0-beta.1 and 5.9.0

Craft is a platform for creating digital experiences. In Craft versions 4.0.0-RC1 through 4.16.17 and 5.0.0-RC1 through

Craft is a platform for creating digital experiences. In Craft versions 4.0.0-RC1 through 4.16.17 and 5.0.0-RC1 through

Craft is a platform for creating digital experiences. In Craft versions 4.0.0-RC1 through 4.16.17 and 5.0.0-RC1 through

Craft is a platform for creating digital experiences. In Craft versions 4.0.0-RC1 through 4.16.17 and 5.0.0-RC1 through

Craft CMS is a content management system. In Craft versions 3.5.0 through 4.16.17 and 5.0.0-RC1 through 5.8.21, the save

Craft is a platform for creating digital experiences. From 5.0.0-RC1 to 5.8.21, Craft has a stored XSS via Entry Type na

Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. Prior to 2.20.0, FileStore maps cache keys to fil

Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. Prior to 2.20.0, in litestar.middleware.allowed_h

Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. Prior to 2.20.0, CORSConfig.allowed_origins_regex

FileRise is a self-hosted web file manager / WebDAV server. Versions prior to 3.3.0, the application contains an unauthe

FileRise is a self-hosted web file manager / WebDAV server. Prior to 3.3.0, an HTML Injection vulnerability allows an au

MarkUs is a web application for the submission and grading of student assignments. Prior to 2.9.1, instructors are able