2026

ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-se

ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in th

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the

ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation.

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny service over a network.

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.

Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated at

Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated us

Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated at

Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated us

Omnispace Agora Project before 26.10.0 contains a reflected cross-site scripting vulnerability that allows unauthenticat

Time-of-check time-of-use (toctou) race condition in Linux Kernel allows an authorized attacker to elevate privileges lo

Xorbits Xoscar through 0.11.2 contains an unauthenticated deserialization vulnerability that allows remote attackers to

ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation.

ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation.

Symantec Endpoint Detection and Response (SEDR) Console, prior to 4.13, may be susceptible to a Cross-Site Scripting (XS

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 is affected by an information disclosure vulnerabil

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a Reader-role attacker to obtain versio

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 is affected by a privilege escalation vulnerability

Indico is a feature-rich event management system. Indico 3.3.3 through 3.3.13 incorrectly uses the ambient web-session u

When the authorize() method is called with a maxAge parameter, the auth0.js library does not validate the auth_time clai

When a username for an Active Directory connection is a domain without a local part, the auth0-lock library initiates th

The auth0/nextjs-auth0 SDK validates that the returnTo parameter is a same-origin URL. The SDK then stores this value an

ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result i

ColdFusion is affected by an Incorrect Authorization vulnerability that could lead to disclosure of sensitive memory. An

ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation.

ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result i

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low

ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in th

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the

ColdFusion is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the

ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in th

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low

ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result i

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the

ColdFusion is affected by an Improper Input Validation vulnerability that could result in an application denial-of-servi

ColdFusion is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrar

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the

ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation.