2026

Wacom WTabletService 6.6.7-3 contains an unquoted service path vulnerability that allows local attackers to execute mali

Adaware Web Companion version 4.8.2078.3950 contains an unquoted service path vulnerability in the WCAssistantService th

GCafé 3.0 contains an unquoted service path vulnerability in the gbClientService that allows local attackers to potentia

Alps Pointing-device Controller 8.1202.1711.04 contains an unquoted service path vulnerability in the ApHidMonitorServic

Shrew Soft VPN Client 2.2.2 contains an unquoted service path vulnerability that allows local users to execute arbitrary

NCP Secure Entry Client 9.2 contains an unquoted service path vulnerability in multiple Windows services that allows loc

Studio 5000 Logix Designer 30.01.00 contains an unquoted service path vulnerability in the FactoryTalk Activation Servic

BartVPN 1.2.2 contains an unquoted service path vulnerability in the BartVPNService that allows local attackers to poten

ProShow Producer 9.0.3797 contains an unquoted service path vulnerability in the ScsiAccess service that allows local at

Easy-Hide-IP 5.0.0.3 contains an unquoted service path vulnerability in the EasyRedirect service that allows local attac

TexasSoft CyberPlanet 6.4.131 contains an unquoted service path vulnerability in the CCSrvProxy service that allows loca

NETGATE Data Backup 3.0.620 contains an unquoted service path vulnerability in its NGDatBckpSrv Windows service configur

Amiti Antivirus 25.0.640 contains an unquoted service path vulnerability in its Windows service configurations. Attacker

Wing FTP Server 6.0.7 contains an unquoted service path vulnerability that allows local attackers to potentially execute

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that aut

A flaw has been found in WeKan up to 8.20. Affected is the function applyWipLimit of the file models/lists.js of the com

A vulnerability was detected in WeKan up to 8.20. This impacts an unknown function of the file models/checklistItems.js

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that aut

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that aut

It was possible to improperly access the parent directory of an os.Root by opening a filename ending in "../". For examp

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color

Navidrome is an open source web-based music collection server and streamer. Prior to version 0.60.0, authenticated users

Navidrome is an open source web-based music collection server and streamer. Prior to version 0.60.0, a cross-site script

NavigaTUM is a website and API to search for rooms, buildings and other places. Prior to commit 86f34c7, there is a path

@isaacs/brace-expansion is a hybrid CJS/ESM TypeScript fork of brace-expansion. Prior to version 5.0.1, @isaacs/brace-ex

Godot MCP is a Model Context Protocol (MCP) server for interacting with the Godot game engine. Prior to version 0.1.1, a

HtmlSanitizer is a .NET library for cleaning HTML fragments and documents from constructs that can lead to XSS attacks.

Bytes is a utility library for working with bytes. From version 1.2.1 to before 1.11.1, Bytes is vulnerable to integer o

Mastodon is a free, open-source social network server based on ActivityPub. Prior to versions 4.3.19, 4.4.13, 4.5.6, Mas

SiYuan is a personal knowledge management system. Prior to version 3.5.5, the /api/file/copyFile endpoint does not valid

Devtron is an open source tool integration platform for Kubernetes. In version 2.0.0 and prior, a vulnerability exists i

jsonwebtoken is a JWT lib in rust. Prior to version 10.3.0, there is a Type Confusion vulnerability in jsonwebtoken, spe

MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. From version 1.10.0 to

JinJava is a Java-based template engine based on django template syntax, adapted to render jinja templates. Prior to ver

Magento-lts is a long-term support alternative to Magento Community Edition (CE). Prior to version 20.16.1, the admin ur

Locutus brings stdlibs of other programming languages to JavaScript for educational purposes. In versions from 2.0.12 to

cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the proc

A security vulnerability has been detected in WeKan up to 8.20. This affects the function setBoardOrgs of the file model

A weakness has been identified in ZenTao up to 21.7.6-85642. The impacted element is the function fetchHook of the file

IBM Concert 1.0.0 through 2.1.0 is vulnerable to HTTP header injection, caused by improper validation of input by the HO

IBM Concert 1.0.0 through 2.1.0 does not invalidate session after logout which could allow an authenticated user to impe

IBM Operations Analytics – Log Analysis versions 1.3.5.0 through 1.3.8.3 and IBM SmartCloud Analytics – Log Analysis are

OpenSlides is a free, web based presentation and assembly system for managing and projecting agenda, motions and electio

Wagtail is an open source content management system built on Django. Prior to versions 6.3.6, 7.0.4, 7.1.3, 7.2.2, and 7

Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.150, 25.0.82, a

Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.150, 25.0.82, a

Terraform / OpenTofu Provider adds support for Proxmox Virtual Environment. Prior to version 0.93.1, in the SSH configur