2026

In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service,

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privileg

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privileg

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privileg

In display, there is a possible memory corruption due to uninitialized data. This could lead to local escalation of priv

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privileg

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privileg

In display, there is a possible use after free due to a race condition. This could lead to local escalation of privilege

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o

In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service,

In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service,

In Modem, there is a possible read of uninitialized heap data due to an uncaught exception. This could lead to remote de

Insufficient Verification of Data Authenticity vulnerability in TECNO Mobile com.Afmobi.Boomplayer allows Authentication

The Download Manager plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below ha

Pterodactyl is a free, open-source game server management panel. Versions 1.11.11 and below allow TOTP to be used multip

Pterodactyl is a free, open-source game server management panel. Versions 1.11.11 and below do not revoke active SFTP co

Crypt::Sodium::XS module versions prior to 0.000042, for Perl, include a vulnerable version of libsodium libsodium <= 1

badkeys is a tool and library for checking cryptographic public keys for known vulnerabilities. In versions 0.0.15 and b

A flaw has been found in code-projects Online Music Site 1.0. This affects an unknown part of the file /Administrator/PH

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. In versions 3.13.2 and below, reading mu

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. In versions 3.13.2 and below, handling o

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below allow a reques

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below allow for an i

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below contain parser

A vulnerability was detected in code-projects Online Music Site 1.0. Affected by this issue is some unknown functionalit

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below enable an atta

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below of the Python

Multiple D-Link DSL/DIR/DNS devices contain an authentication bypass and improper access control vulnerability in the dn

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below allow a zip bo

Frappe is a full-stack web application framework. Versions 14.99.5 and below and 15.0.0 through 15.80.1 include requests

Craft is a platform for creating digital experiences. In versions 5.0.0-RC1 through 5.8.20 and 3.0.0 through 4.16.16, u

Craft is a platform for creating digital experiences. Versions 5.0.0-RC1 through 5.8.20 and 4.0.0-RC1 through 4.16.16 ar

Craft is a platform for creating digital experiences. Versions 5.0.0-RC1 through 5.8.20 and 4.0.0-RC1 through 4.16.16 ar

Craft is a platform for creating digital experiences. In versions 5.0.0-RC1 through 5.8.20 and 4.0.0-RC1 through 4.16.16

Craft is a platform for creating digital experiences. In versions 5.0.0-RC1 through 5.8.20 and 4.0.0-RC1 through 4.16.16

jsPDF is a library to generate PDFs in JavaScript. Prior to version 4.0.0, user control of the first argument of the loa

Dify is an open-source LLM app development platform. Prior to version 1.11.0, the API key is exposed in plaintext to the

vega-functions provides function implementations for the Vega expression language. Prior to version 6.1.1, for sites tha

Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization design

Spinnaker is an open source, multi-cloud continuous delivery platform. Versions prior to 2025.1.6, 2025.2.3, and 2025.3.

Anthropic's MCP TypeScript SDK versions up to and including 1.25.1 contain a regular expression denial of service (ReDoS

A security vulnerability has been detected in code-projects Online Music Site 1.0. Affected by this vulnerability is an

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. In Coolify versions

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. In Coolify versions

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. In Coolify versions

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. In Coolify vstarting

A Blind Server-Side Request Forgery (SSRF) vulnerability in evershop 2.1.0 and prior allows unauthenticated attackers to