2026

Trueview TI8161 6.0.23.4 is vulnerable to information disclosure due to the transmission of MQTT communications in plain

Trueview T18161 S 6.0.23.4 contains an improper verification in MQTT command processing. An attacker with network access

An issue in Invoice Ninja v5.13.24 allows a remote attacker to obtain sensitive information via the StoreWebhookRequest.

An issue in slimkit plus ThinkSNS+ v.2.4 allows a remote attacker to escalate privileges via the ResetPasswordController

An issue in esoTalk v.1.0.0g4 allows a remote attacker to execute arbitrary code via the core/models/ETMemberModel.class

SQL injection vulnerability in Zhao-github APiAdmin v.5.0.1 allows a remote attacker to obtain sensitive information via

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. From version 0.6.0 to before version 0.7.2, non-ad

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.7.1, revocation is the only in-

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. From version 0.3.0 to before version 0.5.0, the ne

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. From version 0.2.0 to before version 0.5.0, when O

laravel-backup-restore restores database backups made with spatie/laravel-backup. Prior to version 1.9.4, a crafted back

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.3.8, the web handler renderMobi

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.3.8, Operator session tokens ar

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.3.7, two related authorization

Unverified ownership of a storage access point in the volume deletion component of the Amazon EFS CSI Driver before v3.4

A security vulnerability has been detected in jofpin trape 2.0. This vulnerability affects unknown code of the file core

A weakness has been identified in jofpin trape 2.0. This affects an unknown part of the file core/user.py. This manipula

A security flaw has been discovered in jofpin trape 1.0.0/2.0. Affected by this issue is the function join_room of the f

A Zip Slip vulnerability in the SonicWall Network Security Manager (NSM) On-Prem file upload and archive processing func

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 10

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 10

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 10

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 10

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 10

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 10

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 10

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 10

An arbitrary file upload vulnerability in AppNitro MachForm v30 allows attackers to execute arbitrary code via uploading

A missing authorization vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management interface allow

An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the Sonic

File Upload vulnerability in Zhao-github ApiAdmin v.5.0.1 allows a remote attacker to execute arbitrary code via a craft

Nango before 0.71.6 contains a missing authentication vulnerability in the runner tRPC server that allows unauthenticate

A flaw was found in libtpms, a library that provides software TPM 2.0 emulation. When restoring TPM 2.0 state (for examp

An OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before 1.3-9 might allow a lo

Improper neutralization of special elements used in a template engine in the CDK generator in Amazon awslabs.dynamodb-mc

A vulnerability was identified in jofpin trape 1.0.0. Affected by this vulnerability is an unknown functionality of the

undici's decompress interceptor decompresses response bodies according to the untrusted Content-Encoding header. While t

ILIAS before versions 9.22, 10.10, and 11.3 contains a SQL injection vulnerability in the repository trash table where t

In the Linux kernel, the following vulnerability has been resolved: selinux: require every boolean value to be defined

In the Linux kernel, the following vulnerability has been resolved: selinux: reject an unclaimed class value in securit

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: sof-audio: Fix error path in sof_widget_

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol ac

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Reject UVD message with invalid number

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Reject UVD message with dimensions abov

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix UVD dpb min size calculation for H2

In the Linux kernel, the following vulnerability has been resolved: net: packet: fix wrong transport_header when sendin

In the Linux kernel, the following vulnerability has been resolved: net: tap: fix wrong transport_header when sending V

In the Linux kernel, the following vulnerability has been resolved: net/tls: Fail tls_sw_splice_read() after a failed a

In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Fix sync entry leak on OA config emit fa

In the Linux kernel, the following vulnerability has been resolved: dmaengine: sun6i-dma: Fix reclaim descriptors while