2026

A security vulnerability in HPE NonStop HTTP WEBSERVER can cause memory corruption which may result in a system halt.

A heap buffer overflow in HPE NonStop Debug Utilities could corrupt resume-execution address and may potentially redire

A heap buffer overflow in HPE NonStop Inspect Subsystem could corrupt resume-execution address and may potentially redir

A heap buffer overflow in HPE NonStop OCAX could corrupt address space and may potentially redirect execution flow.

A heap buffer overflow in HPE NonStop NDSREST could corrupt resume-execution address and may potentially redirect execut

A directory traversal vulnerability in HPE NonStop Python 3.x could allow  attackers to overwrite arbitrary files via a

An improper link resolution before file access ('link following') vulnerability has been reported to affect Virtualizati

A path traversal vulnerability has been reported to affect Qsirch. If exploited, the vulnerability could allow remote at

An unix symbolic link (symlink) following vulnerability has been reported to affect QuMagie. If a remote attacker gains

A cross-site scripting (XSS) vulnerability has been reported to affect QuFTP Service. If a remote attacker gains a user

An OS command injection vulnerability has been reported to affect HybridDesk Station. If exploited, the vulnerability co

An authorization bypass through user-controlled key vulnerability has been reported to affect Video Station. If exploite

A relative path traversal vulnerability has been reported to affect QuMagie. If a remote attacker gains an administrator

An unix symbolic link (symlink) following vulnerability has been reported to affect Qsync Central. If a remote attacker

A missing authentication for critical function vulnerability has been reported to affect HybridDesk Station. If exploite

A cross-site scripting (XSS) vulnerability has been reported to affect Notes Station 3. If a remote attacker gains a use

A server-side request forgery (SSRF) vulnerability has been reported to affect Download Station. If a remote attacker ga

A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, the

An incorrect permission assignment for critical resource vulnerability has been reported to affect Download Station. If

An improper isolation or compartmentalization vulnerability has been reported to affect Notes Station 3. If a local atta

An incorrect permission assignment for critical resource vulnerability has been reported to affect Notes Station 3. If a

An OS command injection vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could

A missing authentication for critical function vulnerability has been reported to affect sMedio DTCP MOVE. If exploited,

A SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they

A SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, the

Eclipse Jetty's `SessionAuthentication` retains authentication credentials in a serializable object. When the credential

An unauthenticated client may access certain protected resources when using EthereumAuthenticator if the request path co

In Eclipse Jetty, across various versions of `jetty-security`, and `jetty-eeN-security`, two or more security constraint

In Eclipse Jetty, across various versions of `jetty-server`, and `jetty-proxy`, the host whitelist/blacklist is case-sen

In Eclipse Jetty, across various versions of `jetty-security`, and `jetty-eeN-security`, and `jetty-eeN-servlet`, the Ja

"ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attac

HPE NonStop EMS Distributor is vulnerable to buffer overflow condition that may result in undesirable behavior.

When Jetty's `HttpClient` make a request to a server through a forward proxy, the server may reply with a 407 (Proxy Aut

In Eclipse Jetty, HttpClient may receive a redirect of the form: ``` /secure/../evil ``` If an attacker is a

In Eclipse Jetty, `TryPathsHandler` and `TryFilesFilter` can be configured to forward requests to template URIs such as

The smartphone application "Vehicle Inspection Certificate Viewer" contains a vulnerability in which sensitive informati

"Handmade Marketplace App - Creema" provided by CREEMA LTD. contains an open redirect vulnerability. When accessing a sp

WebCTI service for Slican IPx telephone exchanges stores temporary subscriber password in plaintext. An attacker with ac

WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection in /webcti/admin_json.php enpoint. Impr

Slican telephone exchanges use symmetric encryption for TCP/IP communication. Secret key is hardcoded in multiple binary

In Eclipse Jetty, across various versions of `jetty-annotations`, and `jetty-eeN-annotations`, the Jakarta Spec authorit

Incorrect Privilege Assignment vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, ICONICS Suite

Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and

Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and

undici is an HTTP client library for Node.js. In versions 8.11.0 and 8.11.1, its experimental WebSocket client, which is

"ゲオアプリ" provided by GEO CORPORATION contains an issue with cleartext storage of sensitive information, which may allow a

On request the `sdbootutil` script creates a world-readable debug log in /var/log/sdbootutil.log. The log file is create

There are two invocations of `qrencode` to display a QR code for scanning. These invocations leak the private data $pin

In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the MySQL message decod