2026

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 could allow a remote

Path Traversal in avatar attachments in Docmost v0.21.0 allows an unauthenticated malicious actor to disclose local file

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to server-side request forgery (SSRF) that could allow a rem

IBM WebSphere Application Server 9.0, and 8.5 could allow an authenticated user with a low-privilege administrative role

IBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an authenticated attacker to access sensitive files belonging

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a security bypass due to improper authentication controls

Forgejo before 16.0.4 allows remote code execution via a crafted template repository because template expansion on files

A SQL injection vulnerability exists in the JasperReports-based reporting feature of multiple versions of OpenNMS Meridi

IBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an unauthenticated attacker to execute arbitrary code and acc

An out-of-bounds read vulnerability exists in the xls_dumpSummary() function of libxls 1.6.3 due to insufficient validat

A heap-buffer-overflow and use-after-free vulnerability exists in the xls_getCSS() function of libxls 1.6.3 due to insuf

A missing authentication vulnerability in the VPN configuration management has been identified in Archer MR600 (v2, v3 &

An authenticated directory traversal vulnerability in file upload functionality has been identified in Archer MR600 (v2,

A vulnerability was reported in Lenovo Health Android Application, distributed exclusively in the Chinese market, that c

An authentication bypass vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Pr

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Pr

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. St

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Pr

The product's web portals allow external links to be opened in a new browser tab. In certain configurations, the origina

An XML External Entity (XXE) vulnerability exists in the XML collector of multiple versions of OpenNMS Meridian and Hori

A potential command injection vulnerability was reported in the Tianxi AI Agent PC Application, distributed exclusively

A potential improper authorization vulnerability was reported in the Lenovo File Manager Android Application, distribute

A potential improper permissions vulnerability was reported in the Lenovo Filez Client application that could allow a lo

Italtel NFV 11.1.2-20210318 allows Multiple Stored XSS under NP_BCCAS-RMCTRL-01/IMCSCIWebGui/configuration.jsp?opration=

The cstruct package before 6.3.0 for OCaml mishandles indexes.

In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS #1 decodi

A missing authorization vulnerability in OpenNMS Horizon allows configuration changes without authentication. The Spring

isomorphic-git before 1.42.0 contains a prototype pollution vulnerability in the getRemoteInfo function that allows a ma

OmniRoute is an open-source AI gateway providing a single endpoint for multiple model providers. In 3.8.49 and earlier,

career-ops is an open-source AI-assisted job search and application management tool. Prior to 0.8.0, the career-ops loca

Concrete CMS 9 through 9.5.2 did not validate an anti-CSRF token in the Boards custom slot dialog controller (concrete/

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a denial of service, caused by sending a specially-crafte

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a denial of service, caused by sending a specially-crafte

A server-side request forgery issue due to improper validation of equivalent address representations in the port forward

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C Driver can caus

A size check in the client-side authentication path of the MongoDB C Driver can wrap around, so an unusually large user-

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C++ Driver can ca

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Java Driver can c

A use-after-free in the reactive client-side encryption component of the MongoDB Java Driver can cause native resources

Consul and Consul Enterprise are vulnerable to an authorization bypass in the Connect service mesh that may allow a serv

The consul-template library is vulnerable to an information disclosure issue in its error handling path that may allow V

Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog deregistration path that may allow

Consul and Consul Enterprise are vulnerable to a denial of service in the native RPC listener that may allow an authenti

Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog node-write path that may allow an