2026

A vulnerability was found in Open5GS up to 2.7.1. This affects the function hss_ogs_diam_s6a_air_cb/hss_ogs_diam_s6a_ulr

Django REST framework is a toolkit for building Web APIs. Prior to 3.17.2, Django REST Framework's request.data parsing

NetBox 4.5.8 contains an ORM injection vulnerability that allows authenticated attackers, including those with read-only

OpenIM Server v3.8.3 contains a missing authorization vulnerability that allows any authenticated user to access admin-o

An issue in MongoDB Server could allow an authenticated user with direct network access to a shard to improperly commit

An issue in MongoDB Server's JavaScript scripting engine could allow an authenticated user with write privileges to caus

An issue in MongoDB Server could allow an authenticated user, including one with no assigned privileges, to cause the se

An issue in MongoDB Server's $graphLookup aggregation stage could allow an authenticated user able to issue aggregation

An issue in MongoDB Server's Atlas Vector Search feature could allow an authenticated user with read access to one view

An issue in MongoDB Server's aggregation framework could allow an authenticated user with only read privileges to perfor

An issue in MongoDB Server could allow a party with a valid client certificate and a corresponding user account to authe

An issue in MongoDB Server could allow an authenticated user with limited, database-scoped privileges to modify diagnost

An issue in MongoDB Server's query subsystem could allow an authenticated user with read privileges to cause the server

An issue in MongoDB Server's geospatial validation could allow an authenticated user with write privileges to cause an i

An issue in MongoDB Server's query planner could allow an authenticated user with read-level privileges to cause the ser

An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action ag

An issue in MongoDB Server's applyOps command could allow an authenticated user with specific non-default privileges to

An issue in MongoDB Server's handling of certain query predicates against time-series collections with a metaField could

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.17.0, shutdown_client_connection() in sr

Nmap versions up to and including 7.99 contains a denial of service vulnerability that allows remote attackers to crash

Cap v0.3.1 contains a broken access control vulnerability in the POST /api/video/comment endpoint that allows authentica

Improper link resolution before file access ('link following') in Microsoft OneDrive allows an authorized attacker to el

Turso CLI is the command line interface (CLI) to the open-source database Turso. Versions prior to 1.0.26 persist the us

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A

Improper input validation for some Intel(R) Xeon(R) processors within firmware may allow an escalation of privilege. Sta

Activepieces is an open source AI workflow automation platform. Prior to 0.83.0, the /api/redirect OAuth callback endpoi

Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security featur

CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an a

Improper link resolution before file access ('link following') in Windows Management Services allows an authorized attac

Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally

Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally

Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally.

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.

Buffer over-read in Windows Network File System allows an unauthorized attacker to deny service over a network.

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.