2026

MPXJ is an open source library to read and write project plans from a variety of file formats and databases. From 5.5.5

psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to 1.17.4, PSDImage.composite() and PSDI

SIPGO is a library for writing SIP services in the GO language. Prior to 1.4.1, ParserStream.parseSingle in sip/parser_s

LTSecurity LTK3500SF contains a hard-coded credentials vulnerability where the root and guest account passwords are stor

SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability

SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability

A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi g

A malicious actor with access to the network could exploit an Uncontrolled Recursion vulnerability found in certain UniF

Crypt::SelfCertificate versions from 1.01 through 1.05 for Perl contains malware which executes Python code from an obfu

Spree is an open source e-commerce solution built with Ruby on Rails. From 5.4.0 until 5.4.4 and 5.5.4, PATCH /api/v3/st

Home Assistant is open source home automation software focused on local control and privacy. Prior to 2026.7.0, the Stat

Home Assistant is open source home automation software focused on local control and privacy. Prior to 2026.2.3, the IPP

CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an applicati

MCMS 6.1.1 through 6.2.1 is vulnerable to stored Cross-Site Scripting (XSS). The article content field `contentDetails`

MCMS 6.1.1 through 6.2.1 contains a SQL injection vulnerability in the PageAction.verify endpoint (GET /ms/mdiy/page/ver

InDesign Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-s

Premiere Pro is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation

Adobe Connect is affected by an Improper Certificate Validation vulnerability that could lead to disclosure of sensitive

Substance3D - Modeler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution

Substance3D - Modeler is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code exe

Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result i

Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result i

Substance3D - Modeler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution

Adobe Experience Manager Forms JEE is affected by an Improper Input Validation vulnerability that could result in arbitr

Substance3D - Modeler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution

A malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability found in certain UniFi ga

A malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability found in certain UniFi ga

A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi g

A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi g

icalendar is an RFC 5545 compatible parser and generator of iCalendar files for Python. From 6.1.0 until 7.2.2, vInt.fro

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, th

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, th

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, th

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, up

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, co

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, co

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, HT

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, th

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, th

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, re

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, Ji

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, Ji

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, th

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, Ji

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, an

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security featur

InDesign Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-s

Adobe Experience Manager Forms JEE is affected by an Incorrect Authorization vulnerability that could result in arbitrar

Adobe Experience Manager Forms JEE is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused

Adobe Experience Manager Forms JEE is affected by a Cross-Site Request Forgery (CSRF) vulnerability that could result in