2026

ClipBucket v5 is an open source video sharing platform. Prior to 5.5.3 - #40, a Time-of-Check to Time-of-Use (TOCTOU) ra

SiYuan is a personal knowledge management system. Prior to 3.5.5, the /api/file/getFile endpoint uses case-sensitive str

Connections received from the proxy port may not count towards total accepted connections, resulting in server crashes i

The affected products are vulnerable to an uncaught exception that could allow an unauthenticated attacker to remotely c

Exposure of Sensitive System Information to an Unauthorized Actor vulnerability in Microcom ZeusWeb allows Web Applicati

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.8 before 18.6.6, 18.7 before 18.7.4, and 1

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4 before 18.6.6, 18.7 before 18.7.4, and 1

A weak authentication vulnerability has been reported to affect File Station 5. The remote attackers can then exploit th

The /dbviewer/ web endpoint in METIS WIC devices is exposed without authentication. A remote attacker can access and exp

A specially-crafted file can cause libjxl's decoder to write pixel data to uninitialized unallocated memory. Soon after

MiniGal Nano versions 0.3.5 and prior contain a path traversal vulnerability in index.php via the dir parameter. The app

An issue in Sunbird-Ed SunbirdEd-portal v1.13.4 allows attackers to obtain sensitive information. The application disabl

Directory traversal vulnerability in OpenSatKit 2.2.1 allows attackers to gain access to sensitive information or delete

Race in DevTools in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in spe

An issue in Statping-ng v.0.91.0 allows an attacker to obtain sensitive information via a crafted request to the api par

An issue in Statping-ng v.0.91.0 allows an attacker to obtain sensitive information via a crafted request to the admin p

ASTPP 4.0.1 contains an information disclosure vulnerability that allows unauthenticated attackers to download database

AVideo Platform 8.1 contains an information disclosure vulnerability that allows attackers to enumerate user details thr

P2PWIFICAM2 for iOS 10.4.1 contains a denial of service vulnerability that allows attackers to crash the application by

BOOTP Turbo 2.0 contains a denial of service vulnerability that allows attackers to crash the application by overwriting

KeePass Password Safe versions before 2.44 contain a denial of service vulnerability in the help system's HTML handling.

APKF Product Key Finder 2.5.8.0 contains a denial of service vulnerability that allows attackers to crash the applicatio

GTalk Password Finder 2.2.1 contains a denial of service vulnerability that allows attackers to crash the application by

Redir 3.3 contains a stack overflow vulnerability in the doproxyconnect() function that allows attackers to crash the ap

Backup Key Recovery 2.2.5 contains a denial of service vulnerability that allows attackers to crash the application by o

SpotDialup 1.6.7 contains a denial of service vulnerability in the registration name input field that allows attackers t

SpotOutlook 1.2.6 contains a denial of service vulnerability in the registration name input field that allows attackers

TaskCanvas 1.4.0 contains a denial of service vulnerability in the registration code input field that allows attackers t

Top Password Firefox Password Recovery 2.8 contains a denial of service vulnerability that allows attackers to crash the

Top Password Software Dialup Password Recovery 1.30 contains a denial of service vulnerability that allows attackers to

ZIP Password Recovery 2.30 contains a denial of service vulnerability that allows attackers to crash the application by

Backup Key Recovery 2.2.5 contains a denial of service vulnerability that allows attackers to crash the application by s

BlueAuditor 1.7.2.0 contains a denial of service vulnerability in the registration name input field that allows attacker

Dnss Domain Name Search Software contains a denial of service vulnerability that allows attackers to crash the applicati

Dnss Domain Name Search Software contains a denial of service vulnerability that allows attackers to crash the applicati

Duplicate Cleaner Pro 4.1.3 contains a denial of service vulnerability that allows attackers to crash the application by

NBMonitor 1.6.6.0 contains a denial of service vulnerability in its registration key input that allows attackers to cras

NetShareWatcher 1.5.8.0 contains a buffer overflow vulnerability in the registration key input that allows attackers to

NetShareWatcher 1.5.8.0 contains a buffer overflow vulnerability in the registration name input that allows attackers to

NetworkSleuth 3.0.0.0 contains a denial of service vulnerability that allows attackers to crash the application by suppl

Office Product Key Finder 1.5.4 contains a denial of service vulnerability that allows attackers to crash the applicatio

RemShutdown 2.9.0.0 contains a denial of service vulnerability in its registration key input that allows attackers to cr

RemShutdown 2.9.0.0 contains a denial of service vulnerability that allows attackers to crash the application by overflo

ShareAlarmPro contains a denial of service vulnerability that allows attackers to crash the application by supplying an

SpotDialup 1.6.7 contains a denial of service vulnerability in the registration key input field that allows attackers to

SpotFTP 3.0.0.0 contains a buffer overflow vulnerability in the registration key input field that allows attackers to cr

SpotFTP 3.0.0.0 contains a denial of service vulnerability in the registration name input field that allows attackers to

SpotIE 2.9.5 contains a denial of service vulnerability in the registration key input that allows attackers to crash the

SpotIM 2.2 contains a denial of service vulnerability that allows attackers to crash the application by inputting a larg

SpotMSN 2.4.6 contains a denial of service vulnerability in the registration name input field that allows attackers to c