2026

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. St

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Pr

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. St

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Pr

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Pr

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Pr

IBM webMethods Integration Server 11.1 IBM webMethods Integration is vulnerable to an XML external entity injection (XXE

Path Traversal in avatar attachments in Docmost v0.21.0 allows an unauthenticated malicious actor to disclose local file

An out-of-bounds read vulnerability exists in the xls_dumpSummary() function of libxls 1.6.3 due to insufficient validat

A heap-buffer-overflow and use-after-free vulnerability exists in the xls_getCSS() function of libxls 1.6.3 due to insuf

An authentication bypass vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Pr

A potential command injection vulnerability was reported in the Tianxi AI Agent PC Application, distributed exclusively

A potential improper authorization vulnerability was reported in the Lenovo File Manager Android Application, distribute

A potential improper permissions vulnerability was reported in the Lenovo Filez Client application that could allow a lo

The cstruct package before 6.3.0 for OCaml mishandles indexes.

A missing authorization vulnerability in OpenNMS Horizon allows configuration changes without authentication. The Spring

isomorphic-git before 1.42.0 contains a prototype pollution vulnerability in the getRemoteInfo function that allows a ma

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C Driver can caus

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C++ Driver can ca

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Java Driver can c

Consul and Consul Enterprise are vulnerable to an authorization bypass in the Connect service mesh that may allow a serv

The consul-template library is vulnerable to an information disclosure issue in its error handling path that may allow V

Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog node-write path that may allow an

zstd-jni versions 1.5.5-6 through 1.5.7-13 contain an out-of-bounds read vulnerability in Zstd.getFrameContentSize that

passport-saml-encrypted through 0.1.13 contains an XML signature wrapping vulnerability where signature verification and

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadIntTemplates in src/classify/intprot

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, UNICHARSET::load_via_fgets in src/ccutil/unicharse

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, the callback form of GenericVector::read in src/cc

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Go Driver can cau

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Ruby Driver can c

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Python Driver can

Improper neutralization of special elements in data query logic in the embedded-document relation handling of the MongoD

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C# Driver can cau

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Rust Driver can c

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB PHP Library can c

Improper neutralization of special elements in data query logic in the MongoDB integration for Laravel can cause an arra

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, FullyConnected::DeSerialize in src/lstm/fullyconne

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadNormProtos in src/classify/normmatch

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.75.

FileRun before 2026.3.0 contains a PHP object injection vulnerability that allows authenticated attackers to execute arb

FileRun before 2026.3.0 contains a SQL injection vulnerability that allows delegated or simple administrators to execute

FileRun before 2026.3.0 contains an OS command injection vulnerability caused by a no-op redefinition of escapeshellcmd(

FileRun before 2026.3.0 contains an OS command injection vulnerability in the PhotoProofSheet handler that allows authen

Anchor CMS through 0.12.7 fails to enforce role-based access control in admin user-management endpoints, allowing any au

knowns through 0.33.0 exempts the project.set action from permission guard checks unconditionally, allowing read-only ag

knowns through 0.33.0 fails to properly validate template destination paths in the code generation template engine, allo

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.64.

rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1

Traefik is an open source HTTP reverse proxy and load balancer. Prior to 2.11.56, and from 3.0.0 until 3.7.12, a client-