2026

SoupAuthManager caches proxy authentication credentials without scoping them to the proxy authority (host:port). When th

Vulnerability in the Oracle Order Entry product of Oracle E-Business Suite (component: Internal Operations). Supported

A flaw was found in the keycloak-services component of Keycloak, which handles OpenID Connect (OIDC) authentication flow

A flaw was found in the SAML protocol implementation of Keycloak, an open-source identity and access management solution

HCL AION is affected by a vulnerability where certain input fields do not enforce sufficient server-side input validatio

Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and C

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version th

A vulnerability was identified in Open5GS up to 2.7.6. Affected is the function sgwc_s11_handle_create_session_request o

A security flaw has been discovered in Open5GS up to 2.7.6. Affected by this vulnerability is the function ogs_gtp2_pars

A weakness has been identified in Open5GS up to 2.7.6. Affected by this issue is the function sgwc_s5c_handle_create_ses

A generation of error message containing sensitive information vulnerability has been reported to affect HBS 3 Hybrid Ba

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below co

Exposure of sensitive information in the TeamViewer entry dashboard component in Devolutions Remote Desktop Manager 2025

Improper Export of Android Application Components in UwbTest prior to SMR Jan-2026 Release 1 allows local attackers to e

A security flaw has been discovered in lief-project LIEF up to 0.17.1. Affected by this issue is the function Parser::pa

A vulnerability was found in AcademySoftwareFoundation OpenColorIO up to 2.5.0. This issue affects the function ConvertT

This issue was addressed with improved permissions checking. This issue is fixed in macOS Sequoia 15.1. An app may be ab

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.3 and iPadOS 18.3. An app

A permissions issue was addressed with additional restrictions. This issue is fixed in Xcode 16.3. An app may be able to

A security flaw has been discovered in nicbarker clay up to 0.14. This affects the function Clay__MeasureTextCached in t

In the Linux kernel, the following vulnerability has been resolved: net/handshake: restore destructor on submit failure

In the Linux kernel, the following vulnerability has been resolved: wifi: avoid kernel-infoleak from struct iw_point s

A vulnerability was identified in GPAC up to 2.4.0. Affected is the function gf_media_export_webvtt_metadata of the file

A security flaw has been discovered in GPAC up to 2.4.0. Affected by this vulnerability is the function DumpMovieInfo of

A weakness has been identified in GPAC up to 2.4.0. Affected by this issue is the function dump_isom_rtp of the file app

Tomahawk auth timing attack due to usage of `strcmp` has been identified in Hiawatha webserver version 11.7 which allows

A flaw was found in NetworkManager. The NetworkManager package allows access to files that may belong to other users. Ne

IBM Concert 1.0.0 through 2.1.0 stores potentially sensitive information in log files that could be read by a local user

A vulnerability exists in BIG-IP Edge Client and browser VPN clients on Windows that may allow attackers to gain access

A security vulnerability has been detected in oatpp up to 1.3.1. This impacts the function oatpp::data::type::ObjectWrap

A vulnerability was detected in libuvc up to 0.0.7. Affected is the function uvc_scan_streaming of the file src/device.c

A flaw has been found in micropython up to 1.27.0. This vulnerability affects the function mp_import_all of the file py/

Tanium addressed a denial of service vulnerability in Tanium Client.

A flaw has been found in ggml-org llama.cpp up to 55abc39. Impacted is the function llama_grammar_advance_stack of the f

A vulnerability has been found in Mapnik up to 4.2.0. This vulnerability affects the function mapnik::detail::mod<...>::

A vulnerability has been found in janet-lang janet up to 1.40.1. The impacted element is the function janetc_pop_funcdef

A vulnerability was found in janet-lang janet up to 1.40.1. This affects the function os_strftime of the file src/core/o

A vulnerability was determined in janet-lang janet up to 1.40.1. This impacts the function janetc_if of the file src/cor

A vulnerability was identified in CCExtractor up to 183. This affects the function parse_PAT/parse_PMT in the library sr

A security vulnerability has been detected in AprilRobotics apriltag up to 3.4.5. Affected by this vulnerability is the

A flaw has been found in aardappel lobster up to 2025.4. Affected by this vulnerability is the function WaveFunctionColl

A vulnerability has been found in aardappel lobster up to 2025.4. Affected by this issue is the function lobster::Parser

A security vulnerability has been detected in ckolivas lrzip up to 0.651. This vulnerability affects the function ucompt

A vulnerability has been found in wasm3 up to 0.5.0. The affected element is the function NewCodePage. The manipulation

Improper initialization for some ESXi kernel mode driver for the Intel(R) Ethernet 800-Series before version 2.2.2.0 (es

Improper conditions check in some firmware for some Intel(R) NPU Drivers within Ring 3: User Applications may allow an e

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing locally.

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.3. An app may be a

A logging issue was addressed with improved data redaction. This issue is fixed in macOS Tahoe 26.3. A malicious app may

A logic issue was addressed with improved validation. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5,