2026

U-Boot before 2026.10-rc5 contains a buffer overflow in nfs_read_reply() function in net/nfs-common.c that allows attack

The "supplier_no" parameter used in the business allocation search feature is vulnerable to time-based blind SQL injecti

The "reportType" parameter in the product summary report feature within the balancing reports section is susceptible to

U-Boot before 2026.10-rc3 contains an out-of-bounds write vulnerability in read_slotted_partition() that fails to valida

U-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfs_read_directory_table() function when alloca

U-Boot through 2026.10-rc5 contains an out-of-bounds write vulnerability in the video_display_rle8_bitmap function in dr

U-Boot before 2026.10-rc3 with CONFIG_IP_DEFRAG enabled contains an out-of-bounds write vulnerability in the __net_defra

The file export endpoint allows any unauthenticated attacker to export arbitrary database tables by sending a crafted PO

The application accepts user-supplied session identifiers and does not regenerate the session ID after authentication. T

An attacker can construct a request that, if issued by another application user, will cause JavaScript code supplied by

The TMS file upload endpoint fails to enforce server-side file type restrictions, allowing an attacker to upload and exe

The application uses unsafe functions that allow execution of inline scripts and string evaluation functions.

The "pattern" parameter used in search function in the home page of the TMS application is vulnerable to time-based blin

The "screenID" parameter in the electronic transaction queue viewer feature within the manual transactions section is su

The "search" parameter in the view audit logs feature within the utilities section is susceptible to a time-based blind

A security vulnerability has been detected in Naichen ThinkCMF up to 8.0.7. Affected by this issue is the function MailC

A vulnerability was identified in Freedesktop Poppler up to 26.08.0. Affected is the function SplashClip::clipToPath of

The Viidure Android application embeds permanent, plaintext cloud storage credentials within its compiled code. These cr

A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT (NTR150) firmware

The central cloud storage backend for the entire dashcam platform is misconfigured with public-read permissions, allowin

Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Bar

An authenticated user with edit permission on one folder can move a library panel into another folder where they only ha

Pausing a shared (public) dashboard did not revoke its access token for the endpoints that serve frontend bootstrap data

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.11, PyEnvCfg.write() writes prompt

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.12, BatchActivator.quote() returns

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.12, download_wheel() accepts pip a

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.13, the generated activate (bash a

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Archit

A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0. This impacts the function FoFiTrueType::c

iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to

In Baicells Nova 430H, an unauthenticated device within radio range can send a malformed uplink message during connectio

A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT (NTR150) firmware

metatool-ai MetaMCP up to and including 2.4.22 is vulnerable to Code Execution in the internal MCP inspector proxy endpo

metatool-ai MetaMCP through 2.4.22 contains an insecure direct object reference (IDOR) in the MCP transport session disp

bytebase dbhub v1.2.0 was discovered to contain a SQL injection vulnerability in the /utils/sql-parser.ts component. Thi

mbailey VoiceMode <= 8.10.1 is vulnerable to OS Command Injection. The update_config MCP tool (and the "voicemode config

mark3labs mcp-filesystem-server v0.11.1 is vulnerable to Directory Traversal due to an improper link resolution in valid

Improper Access Control in ArgusMonitor.sys in Argotronic eGbR ArgusMonitor 7.4.02 and earlier allows local, low-privile

An issue in Kilo Code before v7.4.1 allows a local attacker to execute arbitrary code via the permission/allow-everythin

KitchenAsty through 0.3.0 contains a broken object level authorization (IDOR) vulnerability in the reservations API. The

A buffer overflow vulnerability exists in the API endpoint of HPE Networking Instant On that could allow an authenticate

An authenticated path traversal vulnerability exists in the command line interface of HPE Networking Instant On. Success

A buffer overflow vulnerability exists in the underlying operating system of HPE Networking Instant On. Successful explo

A sensitive information disclosure vulnerability exists in the underlying operating system of HPE Networking Instant On.

A memory corruption vulnerability in the affected interface of HPE Networking Instant On could allow an unauthenticated

A denial-of-service vulnerability exists in the API endpoint of HPE Networking Instant On that could allow an authentica

A local privilege-escalation vulnerability has been discovered in the affected daemon of HPE Networking Instant ON. Succ

An authentication bypass vulnerability in the captive portal of HPE Networking Instant On could allow an unauthenticated

An authentication bypass vulnerability exists in the PAPI protocol of HPE Networking Instant ON APs that could allow an

A format string vulnerability in the API endpoint of HPE Networking Instant ON APs could allow an authenticated remote a