2026

A missing validation of a user-controlled value in the TeamViewer DEX Client (former 1E Client) - Content Distribution S

An out-of-bounds read vulnerability in the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (Noma

An out-of-bounds read vulnerability in the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (Noma

An integer underflow in the UDP command handler of the TeamViewer DEX Client (former 1E Client) - Content Distribution S

A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior versi

A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior versi

A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior versi

Improper Link Resolution Before File Access (invoked by 1E‑Explorer‑TachyonCore‑DeleteFileByPath instruction) in TeamVie

In the Eclipse OMR port library component since release 0.2.0, an API function to return the textual names of all suppor

The Custom Login Page Customizer WordPress plugin before 2.5.4 does not have a proper password reset process, allowing a

SmarterTools SmarterMail versions prior to build 9518 contain an unauthenticated path coercion vulnerability in the bac

Hidden functionality issue exists in multiple MFPs provided by Brother Industries, Ltd., which may allow an attacker to

Multiple MFPs provided by Brother Industries, Ltd. does not properly validate server certificates, which may allow a man

A security vulnerability has been detected in SEMCMS 5.0. This vulnerability affects unknown code of the file /SEMCMS_In

A weakness has been identified in itsourcecode School Management System 1.0. This affects an unknown part of the file /r

Tanium addressed a SQL injection vulnerability in Asset.

Erugo is a self-hosted file-sharing platform. In versions up to and including 0.2.14, an authenticated low-privileged us

A security flaw has been discovered in PHPGurukul Hospital Management System 1.0. Affected by this issue is some unknown

A vulnerability was identified in jishenghua jshERP up to 3.6. Affected by this vulnerability is an unknown functionalit

A flaw has been found in Totolink A7000R 4.1cu.4154. This impacts the function CloudACMunualUpdateUserdata of the file /

soroban-sdk is a Rust SDK for Soroban contracts. Arithmetic overflow can be triggered in the `Bytes::slice`, `Vec::slice

Maker.js is a 2D vector line drawing and shape modeling for CNC and laser cutters. In versions up to and including 0.19.

`bulk_extractor` is a digital forensics exploitation tool. Starting in version 1.4, `bulk_extractor`’s embedded unrar co

A vulnerability was detected in Totolink A7000R 4.1cu.4154. This affects the function setUnloadUserData of the file /cgi

A security vulnerability has been detected in jishenghua jshERP up to 3.6. The impacted element is the function getBillI

A weakness has been identified in itsourcecode School Management System 1.0. The affected element is an unknown function

A security flaw has been discovered in D-Link DIR-823X 250416. Impacted is the function sub_41E2A0 of the file /goform/s

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color

Podman Desktop is a graphical tool for developing on containers and Kubernetes. A critical authentication bypass vulnera

NocoDB is software for building databases as spreadsheets. Prior to version 0.301.0, a stored cross-site scripting (XSS)

NocoDB is software for building databases as spreadsheets. Prior to version 0.301.0, an unvalidated redirect (open redir

NocoDB is software for building databases as spreadsheets. Prior to version 0.301.0, a blind Server-Side Request Forgery

NocoDB is software for building databases as spreadsheets. Prior to version 0.301.0, an authenticated user with org-leve

Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0, non-adm

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to versions 5.4.

Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0, permali

A security vulnerability has been detected in code-projects Online Music Site 1.0. This impacts an unknown function of t

A weakness has been identified in code-projects Online Music Site 1.0. This affects an unknown function of the file /Adm

A security flaw has been discovered in code-projects Online Music Site 1.0. The impacted element is an unknown function

A vulnerability was identified in D-Link DCS-700L 1.03.09. The affected element is the function uploadmusic of the file

An input validation vulnerability in the oneflow.index_add component of OneFlow v0.9.0 allows attackers to cause a Denia

A floating point exception (FPE) in the oneflow.reshape component of OneFlow v0.9.0 allows attackers to cause a Denial o

A floating point exception (FPE) in the oneflow.view component of OneFlow v0.9.0 allows attackers to cause a Denial of S

A segmentation violation in the oneflow.logical_or component of OneFlow v0.9.0 allows attackers to cause a Denial of Ser

An input validation vulnerability in the flow.arange() component of OneFlow v0.9.0 allows attackers to cause a Denial of

Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0, moderat

A floating-point exception (FPE) in the flow.column_stack component of OneFlow v0.9.0 allows attackers to cause a Denial

Discourse is an open source discussion platform. A privilege escalation vulnerability in versions prior to 3.5.4, 2025.1

Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0, moderat

Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0, authent