2026

Integer Overflow or Wraparound vulnerability in yoyofr modizer.This issue affects modizer: before 4.1.1.

Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in themrdemonized xray-monolith.This issue a

Out-of-bounds Read vulnerability in Rinnegatamante lpp-vita.This issue affects lpp-vita: before lpp-vita r6.

improper pointer arithmetic vulnerability in ProjectSkyfire SkyFire_548.This issue affects SkyFire_548: before 5.4.8-s

Improper Control of Generation of Code ('Code Injection') vulnerability in pilgrimage233 Minecraft-Rcon-Manage.This issu

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ixray-team ixray-1.6-stcop.This issue affect

Use-after-free in the Layout: Scrolling and Overflow component. This vulnerability was fixed in Firefox 147.0.2.

Mitigation bypass in the Privacy: Anti-Tracking component. This vulnerability was fixed in Firefox 147.0.2.

Out-of-bounds Write vulnerability in ixray-team ixray-1.6-stcop.This issue affects ixray-1.6-stcop: before 1.3.

Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in ixray-team ixray-1.6-stcop.This issue affects ix

Issue summary: A type confusion vulnerability exists in the signature verification of signed PKCS#7 data where an ASN1_T

Issue summary: An invalid or NULL pointer dereference can happen in an application processing a malformed PKCS#12 file.

The vulnerability stems from an incorrect error-checking logic in the CreateCounter() function (in threadx/utility/rtos_

code-projects Mobile Shop Management System 1.0 is vulnerable to File Upload in /ExAddProduct.php.

Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer dereference in the PKCS12_item_decrypt_d2i

Issue summary: A type confusion vulnerability exists in the TimeStamp Response verification code where an ASN1_TYPE unio

Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously crafted PKCS#12 file with a BMPString (UTF-16

Issue summary: When using the low-level OCB API directly with AES-NI or<br>other hardware-accelerated code paths, inputs

xrdp is an open source RDP server. xrdp before v0.10.5 contains an unauthenticated stack-based buffer overflow vulnerabi

Issue summary: Writing large, newline-free data into a BIO chain using the line-buffering filter where the next BIO perf

Issue summary: A TLS 1.3 connection using certificate compression can be forced to allocate a large buffer before decomp

A denial-of-service vulnerability exists in the NetX IPv6 component functionality of Eclipse ThreadX NetX Duo. A special

The function _ux_host_class_storage_media_mount() is responsible for mounting partitions on a USB mass storage device. W

Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via png_creat

Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via the pngim

Issue summary: The 'openssl dgst' command-line tool silently truncates input data to 16MB when using one-shot signing al

Issue summary: If an application using the SSL_CIPHER_find() function in a QUIC protocol client or server receives an un

Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigg

Issue summary: PBMAC1 parameters in PKCS#12 files are missing validation which can trigger a stack-based buffer overflow

Testa Online Test Management System 3.4.7 contains a SQL injection vulnerability that allows attackers to manipulate dat

Dirsearch 0.4.1 contains a CSV injection vulnerability when using the --csv-report flag that allows attackers to inject

Gila CMS versions prior to 2.0.0 contain a remote code execution vulnerability that allows unauthenticated attackers to

Phpscript-sgh 0.1.0 contains a time-based blind SQL injection vulnerability in the admin interface that allows attackers

Laravel Nova 3.7.0 contains a denial of service vulnerability that allows authenticated users to crash the application b

TapinRadio 2.13.7 contains a denial of service vulnerability in the application proxy settings that allows attackers to

VestaCP 0.9.8-26 contains a session token vulnerability in the LoginAs module that allows remote attackers to manipulate

LibreNMS 1.46 contains an authenticated SQL injection vulnerability in the MAC accounting graph endpoint that allows rem

SyncBreeze 10.0.28 contains a denial of service vulnerability in the login endpoint that allows remote attackers to cras

Victor CMS 1.0 contains a file upload vulnerability that allows authenticated users to upload malicious PHP files throug

Knockpy 4.1.1 contains a CSV injection vulnerability that allows attackers to inject malicious formulas into CSV reports

Easy CD & DVD Cover Creator 4.13 contains a buffer overflow vulnerability in the serial number input field that allows a

Cassandra Web 0.5.0 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary

WinAVR version 20100110 contains an insecure permissions vulnerability that allows authenticated users to modify system

A flaw was found in GLib. An integer overflow vulnerability in its Unicode case conversion implementation can lead to me

n8n contains a critical Remote Code Execution (RCE) vulnerability in its workflow Expression evaluation system. Expressi

A flaw was found in Glib's content type parsing logic. This buffer underflow vulnerability occurs because the length of

A flaw was found in the GLib Base64 encoding routine when processing very large input data. Due to incorrect use of inte

All versions of askbot before and including 0.12.2 allow an attacker authenticated with normal user permissions to modif

A low privileged remote attacker may be able to disclose confidential information from the memory of a privileged proces

A local low privileged attacker can bypass the authentication of the Device Manager user interface, allowing them to per