2026

A vulnerability has been found in SeldonIO MLServer up to 1.6.1. Affected is the function _extract_env of the file mlser

A flaw has been found in DeepPavlov up to 1.7.0. This impacts the function untar of the component Model Download Handler

A vulnerability was detected in MosaicML Composer up to 0.32.1. This affects the function tarball.extractall of the file

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perfor

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perfor

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restri

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restri

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perfor

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly valida

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly valida

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restri

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly valida

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly valida

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly valida

A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.62). Affect

A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.61). Affect

A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The application fails to

A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The affected software doe

A vulnerability has been identified in SIMATIC IPC BX-21A (All versions < V31.01.13), SIMATIC IPC RW-543A (All versions

Affected devices do not properly sanitize calculated signal data contained in imported calculated signal files before re

Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including

Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in se

Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before r

Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on the

Affected devices do not properly sanitize calculated signal data contained in imported CSV trace files before rendering

Affected devices do not properly validate and sanitize visual properties of calculated signals contained in imported CSV

Affected devices do not properly restrict executable content contained in imported trace files. This could allow an a

A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions < V8.0 Update

Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an

A vulnerability has been identified in Industrial Edge Cloud Device (IECD), Industrial Edge Device Kit - arm64 V1.10, In

A flaw was found in m17n-lib. An attacker who supplies crafted input to an application processing ISO-2022 encoded text

Forms using FileUpload or ImageUpload elements with a custom saveToFileMount configured stored uploaded files in the def

A security vulnerability has been detected in jbardin scp.py up to 0.16.1. The impacted element is the function _recv_fi

A weakness has been identified in beautifier js-beautify up to 1.15.1/2.0.3. The affected element is an unknown function

A vulnerability was identified in wbond certvalidator up to 0.11.1. This issue affects some unknown processing of the co

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All ver

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All ver

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All ver

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All ver

Cross-Site Scripting on the YouMind portal, specifically in the avatar update endpoint, when setting a profile picture v

The authorization middleware of the WMS MobileServer fails to require authentication in two distinct cases. First, it on

Client-Side Enforcement of Server-Side Security vulnerability in Divasoft Software and E-Commerce Inc. Biletiva Ticketin

Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Conf

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force S

Missing Authorization vulnerability in WP ManageNinja LLC FluentBoards fluent-boards allows Exploiting Incorrectly Confi

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Prime Sli

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Link Whisper INC L

Missing Authorization vulnerability in TMS Amelia ameliabooking allows Exploiting Incorrectly Configured Access Control

A vulnerability was determined in calcom cal.com and cal.diy up to 6.2.0. This vulnerability affects the function creden