2026

A command injection vulnerability exists in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gate

A vulnerability in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways could allow a remote

A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to conduc

Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways t

A privilege escalation vulnerability exists in the command line interface of HPE Networking EdgeConnect SD-WAN Gateways.

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Cloud Gateway). Supported versions

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: File down

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, The CookieJar client middleware uses unan

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, DigestAuth replay protection records last

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Event Mana

Cross Site Scripting vulnerability in za-internet GmbH C-MOR Video Surveillance <= V6.0104 allows a remote attacker to e

Concrete CMS before 9.5.3 did not enforce a destination-side authorization check and did not validate a CSRF token in th

Server-Side Request Forgery (SSRF) in the VMware synchronization feature in Devolutions Server 2026.2.16 and earlier all

Improper access control in the vault entry listing feature in Devolutions Server 2026.2.16 and earlier allows an authent

Improper certificate validation in the shared HTTP client used by synchronization and integration features in Devolution

Concrete CMS before 9.5.3 is vulnerable to Cross-Site Request Forgery (CSRF) in the theme page-template activation featu

Concrete CMS 8.5.3 through 9.5.2 enabled the OAuth 2.0 refresh-token grant using the unmodified upstream League grant, w

Concrete CMS below 9.5.3 was vulnerable to Cross-Site Request Forgery in the dashboard SEO Excluded Words page. The rese

Concrete CMS below 9.5.3 did not validate an anti-CSRF token on the block-arrangement backend endpoint (the arrange() ac

An issue in Webkul Bagisto 2.4.9 allows a remote attacker to obtain sensitive information via the add-to-cart API and th

On affected platforms running Arista EOS, under certain circumstances plaintext shared secrets for configured Terminal A

On affected platforms running Arista EOS, under certain circumstances user passwordss may be written in clear text to lo

On affected platforms running Arista EOS, under certain circumstances plaintext private keys may be written in clear tex

On affected platforms running Arista EOS with dual switch cards and with ingress Security ACLs configured on Switched Vi

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember’s chunk decoder trims the chunk-siz

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, The CookieJar client middleware stores a

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, The FollowRedirect client middleware stri

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, ResponseCookie.render writes attacker-inf

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, ResourceService and WebjarService decode

In link_load_gnss_image of link_device.c, there is a possible out-of-bounds write due to a missing bounds check. This co

In multiple functions of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. Th

In GPU, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of p

In smmu_install_nested_ste of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the cod

In multiple functions of arm-smmu-v3.c, there is a possible use-after-free due to a logic error in the code. This could

In smmu_detach_dev of arm-smmu-v3.c, there is a possible permission bypass due to a logic error in the code. This could

In platform_msg_handler_init of default_msg_handlers.c, there is a possible confused deputy due to a confused deputy. Th

In multiple functions of physmem_extmem_linux.c, there is a possible out-of-bounds read due to uninitialized data. This

In FsmReleaseKey of fsm.c, there is a possible permission bypass due to a missing permission check. This could lead to l

In multiple locations, there is a possible information disclosure due to uninitialized memory use. This could lead to lo

In smmu_detach_dev_nested of arm-smmu-v3.c, there is a possible escalation of privilege due to improper input validation

In multiple locations, there is a possible time-of-check to time-of-use due to a race condition. This could lead to loca

In ap_pmic_poll_msg_handler of ap_pmic_ipc.c, there is a possible permission bypass due to a confused deputy. This could

In multiple functions of DreamPickerReceiver.kt, there is a possible permission bypass due to a confused deputy. This co

In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local e

In acfw_ffa.c, there is a possible secret read due to a logic error in the code. This could lead to local information di

In multiple files, there is a possible permission bypass due to a confused deputy. This could lead to local escalation o

In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local e

In multiple functions of bluetooth_cco.cc, there is a possible use-after-free due to a race condition. This could lead t

In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local

In Cellular Modem, there is a possible denial of service due to improper input validation. This could lead to remote (pr