2026

Koken CMS 0.22.24 contains a file upload vulnerability that allows authenticated attackers to bypass file extension rest

NetPCLinker 1.0.0.0 contains a buffer overflow vulnerability in the Clients Control Panel DNS/IP field that allows attac

LocalSend is a free, open-source app that allows users to share files and messages with nearby devices over their local

Backstage is an open framework for building developer portals, and @backstage/plugin-techdocs-node provides common node.

Backstage is an open framework for building developer portals, and @backstage/plugin-techdocs-node provides common node.

A vulnerability was detected in D-Link DSL-6641K N8.TR069.20131126. Affected by this issue is the function ad_virtual_se

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 is vulnerable to a

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 could allow an aut

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow a user to cause a denial of service due to

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow a user to cause a denial of service due to

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 12.1.0 - 12.1.3 could allow a local user to cause a de

IBM® Db2® is vulnerable to a denial of service with a specially crafted query that uses ALTER TABLE operations.

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 - 11.5.9 could allow an authenticated user to c

IBM Db2 for Windows 12.1.0 - 12.1.3 could allow a local user with filesystem access to escalate their privileges due to

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow a user to cause a denial of service by exe

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 under specific con

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 could allow a loca

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 could allow an instance owner to execu

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 could allow a loca

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 could allow an aut

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 is vulnerable to

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow an authenticated user to cause a denial of

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 could allow an aut

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 is vulnerable to a denial of service a

Orval generates type-safe JS clients (TypeScript) from any valid OpenAPI v3 or Swagger v2 specification. Versions starti

Cybersecurity AI (CAI) is a framework for AI Security. In versions up to and including 0.5.10, the CAI (Cybersecurity AI

PsySH is a runtime developer console, interactive debugger, and REPL for PHP. Prior to versions 0.11.23 and 0.12.19, Psy

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TOTOLINK X60

# Active Storage allowed transformation methods potentially unsafe Active Storage attempts to prevent the use of pote

LobeHub is an open source human-and-AI-agent network. Prior to version 1.143.3, the file upload feature in `Knowledge Ba

Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection') v

SQL injection vulnerability in geopandas before v.1.1.2 allows an attacker to obtain sensitive information via the to_po

Salt contains an authentication protocol version downgrade weakness that can allow a malicious minion to bypass newer au

Salt's junos execution module contained an unsafe YAML decode/load usage. A specially crafted YAML payload processed by

aelsantex runcommand 2014-04-01, a plugin for DokuWiki, allows unauthenticated attackers to execute arbitrary system com

Cleartext Storage of Sensitive Information vulnerability in OpenText™ Vertica allows Retrieve Embedded Sensitive Data.  

A vulnerability was detected in SourceCodester Pet Grooming Management Software 1.0. Impacted is an unknown function of

A security vulnerability has been detected in itsourcecode School Management System 1.0. This issue affects some unknown

Insufficient epoch key slot processing in OpenVPN 2.7_alpha1 through 2.7_rc5 allows remote authenticated users to trigge

A weakness has been identified in projectworlds House Rental and Property Listing 1.0. This vulnerability affects unknow

A vulnerability has been found in bolo-solo up to 2.6.4. This impacts the function importMarkdownsSync of the file src/m

A flaw has been found in Tenda HG10 US_HG7_HG9_HG10re_300001138_en_xpon. This affects the function system of the file /b

A vulnerability was detected in Tenda HG10 US_HG7_HG9_HG10re_300001138_en_xpon. The impacted element is the function che

Atomic Alarm Clock 6.3 contains a local privilege escalation vulnerability in its service configuration that allows atta

Popcorn Time 6.2.1.14 contains an unquoted service path vulnerability that allows local non-privileged users to potentia

Andrea ST Filters Service 1.0.64.7 contains an unquoted service path vulnerability in its Windows service configuration.

Outline Service 1.3.3 contains an unquoted service path vulnerability that allows local users to potentially execute arb

OpenZ ERP 3.6.60 contains a persistent cross-site scripting vulnerability in the Employee module's name and description

Orchard Core RC1 contains a persistent cross-site scripting vulnerability that allows remote attackers to inject malicio

Tryton 5.4 contains a persistent cross-site scripting vulnerability in the user profile name input that allows remote at