2026

Omni C20 uses hard-coded credentials that could allow an attacker to monitor log files to obtain credentials to access i

The affected products are vulnerable to command injection attack that could allow an unauthenticated attacker to execute

The Botslab G980H dash camera firmware contains an authentication vulnerability in the root account exposed through the

The Botslab G980H dash camera firmware generates the default WiFi password using predictable device information, portion

The Botslab G980H dash camera firmware generates session identifiers using a small sequential value space rather than a

The Botslab G980H dash camera firmware contains an authorization vulnerability in its session based command functionalit

The Botslab G980H dash camera firmware contains a session management vulnerability in which authentication state can rem

Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav versions before 3.0.

Dell Trusted Device Client, versions prior to 8.1.359.0, contain an Incorrect Permission Assignment for Critical Resourc

The Botslab G980H dash camera firmware accepts a reusable authentication value without adequately verifying its freshnes

Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attack

Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attack

Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attack

Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attack

A vulnerability was determined in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. This impacts the function getOrigina

A vulnerability was found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. This affects an unknown function of the f

A vulnerability has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. The impacted element is the function

A flaw has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. The affected element is the function AiKnowle

An integer overflow in the BSON document encoding component of the MongoDB Python Driver's bundled native extension may

PyMongo's connection string parsing decodes percent-encoded characters in the host portion before the host list is separ

The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value en

An uncontrolled search path element in InsightVM assessment content in Rapid7 Insight Agent on Windows allows a local, l

ServiceNow has remediated a missing authorization vulnerability that was identified in the ServiceNow AI Platform. This

ServiceNow has remediated an authorization bypass security issue that was identified in the ServiceNow AI Platform. This

ServiceNow has remediated an improper access control security issue that was identified in the ServiceNow AI Platform. T

ServiceNow has remediated an authorization bypass security issue that was identified in the ServiceNow AI Platform. This

TREK is a collaborative travel planner. Prior to 3.4.0, the checkSsrf logic in server/src/utils/ssrfGuard.ts does not re

Plaintext exposure of sensitive authentication data in Brocade SANnav discovery service log files enables individuals wi

Dell ThinOS 10, versions prior to SecurityAddon_2605.10.2766_T10, contains an Improper Certificate Validation vulnerabil

Dell Rugged Control Center (RCC), versions prior to 5.2.206, contain an Improper Authorization vulnerability. A low priv

Dell ThinOS 10, versions prior to SecurityAddon_2605.10.2766_T10, contain a Missing Authentication for Critical Function

TREK is a collaborative travel planner. Prior to 3.3.0, the get_trip_summary tool in server/src/mcp/tools/trips.ts is re

TREK is a collaborative travel planner. Prior to 3.3.0, getSharedTripData in server/src/services/shareService.ts returns

TREK is a collaborative travel planner. Prior to 3.3.0, TREK allows an authenticated user to store an attacker-controlle

TREK is a collaborative travel planner. Prior to 3.3.0, the DELETE /api/trips/:tripId/collab/notes/:noteId/files/:fileId

Docmost is open-source collaborative wiki and documentation software. From 0.21.0 until 0.95.0, any authenticated worksp

Dozzle is a realtime log viewer for docker containers. Prior to 10.6.7, streamEvents in internal/web/events.go applies a

code16 Sharp is a Laravel-based framework for building content-management and administrative interfaces. Versions before

code16 Sharp is a Laravel-based framework for building content-management and administrative interfaces. Versions before

The EmbedVideo Extension is a MediaWiki extension which adds a parser function called #ev and various parser tags for em

Dell Rugged Control Center (RCC), versions prior to 5.2.206, contain an Improper Authorization vulnerability. A low priv

Docmost is open-source collaborative wiki and documentation software. Prior to 0.90.1, an authenticated workspace ADMIN

Docmost is open-source collaborative wiki and documentation software. Prior to 0.90.1, an authenticated workspace member

Docmost is open-source collaborative wiki and documentation software. From 0.70.0 until 0.80.1, a low-privileged authent

Docmost is open-source collaborative wiki and documentation software. Prior to 0.80.1, the public avatar and logo image

Docmost is open-source collaborative wiki and documentation software. Prior to 0.80.1, authenticated users can store att

An unauthenticated Remote Code Execution via Arbitrary File Upload vulnerability in the web management interface in Hone

An Authenticated Remote Code Execution via Arbitrary File Write in the Intermec Fingerprint Command Interface vulnerabil

ServiceNow has remediated a SQL injection vulnerability that was identified in the ServiceNow AI Platform. This vulnerab

A vulnerability was identified in volotat Anagnorisis up to 0.4.11. Affected by this issue is the function html of the f