2026

A stored cross-site scripting (XSS) vulnerability exists in the Altium Support Center AddComment endpoint due to missing

Buffer overflow in XPS font parse processing on Small Office Multifunction Printers and Laser Printers(*) which may allo

Buffer overflow in Address Book attribute tag processing on Small Office Multifunction Printers(*) which may allow an at

Buffer overflow in XPS font fpgm data processing on Small Office Multifunction Printers and Laser Printers(*) which may

Buffer overflow in CPCA list processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an

Invalid free in CPCA file deletion processing on Small Office Multifunction Printers and Laser Printers(*) which may all

Buffer overflow in XML processing of XPS file in Small Office Multifunction Printers and Laser Printers(*) which may all

Buffer overflow in print job processing by WSD on Small Office Multifunction Printers and Laser Printers(*) which may al

Nsauditor 3.2.3 contains a denial of service vulnerability in the registration code input field that allows attackers to

NBMonitor 1.6.8 contains a denial of service vulnerability that allows attackers to crash the application by overflowing

Backup Key Recovery 2.2.7 contains a denial of service vulnerability that allows attackers to crash the application by o

GravCMS 1.10.7 contains an unauthenticated vulnerability that allows remote attackers to write arbitrary YAML configurat

Grocery Crud 1.6.4 contains a SQL injection vulnerability in the order_by parameter that allows remote attackers to mani

WibuKey Runtime 6.51 contains an unquoted service path vulnerability in the WkSvW32.exe service that allows local attack

Disk Sorter Enterprise 13.6.12 contains an unquoted service path vulnerability in its Windows service configuration that

Cotonti Siena 0.9.19 contains a stored cross-site scripting vulnerability in the admin configuration panel's site title

Sync Breeze 13.6.18 contains an unquoted service path vulnerability in its Windows service configuration that allows loc

Dup Scout 13.5.28 contains an unquoted service path vulnerability in its Windows service configuration that allows local

Disk Savvy 13.6.14 contains an unquoted service path vulnerability in its Windows service configuration that allows loca

Wise Care 365 5.6.7.568 contains an unquoted service path vulnerability in the WiseBootAssistant service running with Lo

iFunbox 4.2 contains an unquoted service path vulnerability in the Apple Mobile Device Service that allows local attacke

Vianeos OctoPUS 5 contains a time-based blind SQL injection vulnerability in the 'login_user' parameter during authentic

b2evolution 7.2.2 contains a cross-site request forgery vulnerability that allows attackers to modify admin account deta

NoteBurner 2.35 contains a buffer overflow vulnerability in the license code input field that allows attackers to crash

Leawo Prof. Media 11.0.0.1 contains a denial of service vulnerability that allows attackers to crash the application by

Denver SHO-110 IP cameras expose a secondary HTTP service on TCP port 8001 that provides access to a '/snapshot' endpoin

GeoVision GeoWebServer 5.3.3 contains multiple vulnerabilities including local file inclusion, cross-site scripting, and

ZesleCP 3.1.9 contains an authenticated remote code execution vulnerability that allows attackers to create malicious FT

Telegram Desktop 2.9.2 contains a denial of service vulnerability that allows attackers to crash the application by send

Remote Mouse 4.002 contains an unquoted service path vulnerability that allows local attackers to execute arbitrary code

SmartFTP Client 10.0.2909.0 contains multiple denial of service vulnerabilities that allow attackers to crash the applic

Active WebCam 11.5 contains an unquoted service path vulnerability that allows local attackers to execute arbitrary code

Yenkee Hornet Gaming Mouse driver GM312Fltr.sys contains a buffer overrun vulnerability that allows attackers to crash t

WebsiteBaker 2.13.0 contains an authenticated remote code execution vulnerability that allows users with language editin

TotalAV 5.15.69 contains an unquoted service path vulnerability in multiple system services running with LocalSystem pri

Redragon Gaming Mouse driver contains a kernel-level vulnerability that allows attackers to trigger a denial of service

Ether MP3 CD Burner 1.3.8 contains a buffer overflow vulnerability in the registration name field that allows remote cod

Phpwcms 1.9.30 contains a file upload vulnerability that allows authenticated attackers to upload malicious SVG files wi

Odine Solutions GateKeeper 1.0 contains a SQL injection vulnerability in the trafficCycle API endpoint that allows remot

Macro Expert 4.7 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrar

Dolibarr ERP-CRM 14.0.2 contains a stored cross-site scripting vulnerability in the ticket creation module that allows l

Laravel Valet versions 1.1.4 to 2.0.3 contain a local privilege escalation vulnerability that allows users to modify the

SysGauge Server 7.9.18 contains an unquoted service path vulnerability in its binary path configuration that allows loca

Brother BRPrint Auditor 3.0.7 contains an unquoted service path vulnerability in its Windows service configurations that

Brother BRAgent 1.38 contains an unquoted service path vulnerability in the WBA_Agent_Client service running with LocalS

DiskPulse Enterprise 13.6.14 contains an unquoted service path vulnerability in its Windows service configuration that a

SmarterTrack 7922 contains an information disclosure vulnerability in the Chat Management search form that reveals agent

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Before 2.5.6, a prior patch aimed to block spawning Windows b

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Before 2.6.0, node:crypto doesn't finalize cipher. The vulner

Traefik is an HTTP reverse proxy and load balancer. Prior to 2.11.35 and 3.6.7, there is a potential vulnerability in Tr