2026

fastify versions before 5.12.2 treat the object resolved by a successful Ajv async validator as the value result protoco

fastify versions before 5.12.2 decide whether to compile a request schema based on JavaScript truthiness, but JSON Schem

fastify versions >= 4.0.0 and before 5.12.2 can route a malformed URL sent under one plugin prefix to the custom not-fou

Improper OCSP response validation in the Snowflake Python, Go, JDBC, and Node.js drivers allowed a revoked TLS certifica

A heap-based buffer overflow was found in Corosync's Totem Process Group (totempg) message reassembly. When processing f

PALLET CONTROL products contain an incorrect default permission vulnerability, which may allow a local attacker to execu

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Automattic WooComm

A flaw was found in libsoup. A malicious HTTP/2 server or a Man-in-the-Middle (MITM) attacker can exploit a heap use-aft

The Canva Android App before 2.376.0 did not restrict the headers returned to an external origin running in a privilege

Apache Allura: exposure of non-public information via search. This issue affects Apache Allura: through 1.20.0. Us

XING CPTrans-ME-X contains an Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497). Sens

The Hummingbird Performance WordPress plugin before 3.21.2 does not restrict a network-wide setting to network administ

The Classified Listing WordPress plugin before 6.1.1 does not verify that the caller owns or can edit the target listin

ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer over-read in ipmi_oem_fujitsu_get_sel_entry_long_text in ipm

A flaw has been found in code-projects Doctor Appointment System 1.0. This issue affects some unknown processing of the

A vulnerability was detected in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of

A security flaw has been discovered in code-projects Hospital Information System 1.0. Affected by this vulnerability is

A vulnerability was identified in code-projects Hospital Information System 1.0. Affected is the function viewReq of the

SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote

A vulnerability was determined in code-projects Hospital Information System 1.0. This impacts the function findBySearch

Software installed and run as a non-privileged user may conduct improper GPU driver IOCTL calls to create an allocation

A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61

A security flaw has been discovered in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814c

MOOS core-moos through 10.4.0 contains a buffer over-read vulnerability in CMOOSCommPkt where a four-byte packet trigger

MOOS ui-moos through 50b9c6c contains a buffer overflow vulnerability in ScopeTabPane.cpp and ScopeGrid.cpp where client

MOOS core-moos through 10.4.0 contains a remote process termination vulnerability in the SuicidalSleeper component that

MOOS core-moos through 10.4.0 contains a denial of service vulnerability in the MOOSDB HTTP server that creates unbounde

MOOS-IvP pMarineViewer through 24.8.1 fails to limit the number of tracked node identities from NODE_REPORT messages, al

MOOS-IvP uFldShoreBroker through 24.8.1 fails to limit the number of claimed communities stored in parallel vectors with

MOOS-IvP pRealm through version 24.8.1 accepts unbounded REALMCAST_REQ subscriptions without validating duration or vari

MOOS-IvP versions through 24.8.1 contain a quadratic processing vulnerability in uFldNodeComms where each new node ident

MOOS-IvP through 24.8.1 contains a denial of service vulnerability in the Demuxer::addMuxPacket() function that trusts t

MOOS-IvP through 24.8.1 contains a buffer over-read vulnerability in isQuoted(), isBraced(), and isChevroned() functions

MOOS core-moos through 10.4.0 contains a denial of service vulnerability in MOOSCommServer::ListenLoop() where the accep

MOOS core-moos through 10.4.0 fails to validate packet length declarations in CMOOSCommPkt::OnBytesWritten(), allowing u

MOOS core-moos through 10.4.0 fails to validate that serialized string lengths are non-negative in CMOOSMsg::operator>>.

MOOS-IvP through 24.8.1 contains a remote code execution vulnerability in alogsplit's SplitHandler::handlePreCheckSplitD

MOOS essential-moos through 10.0.1 contains a buffer overflow vulnerability in CMOOSUDPLink::ReadPktFromArray() that all

MOOS core-moos through 10.4.0 fails to validate client identity in MOOSDB message processing, allowing authenticated att

MOOS essential-moos through version 10.0.1 contains an unauthenticated UDP packet injection vulnerability in pMOOSBridge

MOOS-IvP uFldNodeComms through 24.8.1 trusts the source node identity from the message body rather than validating it fr

MOOS essential-moos pAntler through 10.0.1 contains a remote code execution vulnerability that allows unauthenticated at

A vulnerability was identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61

A vulnerability was identified in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code o

Missing authorization in Microsoft Fabric allows an authorized attacker to elevate privileges over a network.

Authorization bypass through user-controlled key in Azure Cosmos DB allows an authorized attacker to perform spoofing ov

Server-side request forgery (ssrf) in Power Automate allows an authorized attacker to elevate privileges over a network.

Improper neutralization of special elements in data query logic in Microsoft Discovery Studio allows an unauthorized att

There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data.   This results

There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data.   This results