2026

MOOS-IvP uFldNodeComms through 24.8.1 trusts the source node identity from the message body rather than validating it fr

MOOS core-moos through 10.4.0 contains an authentication bypass vulnerability in the optional MOOSDB HTTP server that al

MOOS essential-moos pAntler through 10.0.1 contains a remote code execution vulnerability that allows unauthenticated at

MOOS-IvP uMemWatch through 24.8.1 constructs shell commands from attacker-chosen MOOS client names without sanitization.

MOOS-IvP iSay through 24.8.1 contains a remote code execution vulnerability in the SAY_MOOS variable handler that passes

MOOS core-moos through 10.4.0 lacks authentication in the wire protocol, allowing unauthenticated clients to connect wit

A vulnerability was identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61

A weakness has been identified in SpecterOps BloodHound up to 9.5.1. The affected element is the function NewV2API of th

A vulnerability was identified in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code o

Authorization bypass through user-controlled key in Microsoft Azure Active Directory B2C allows an unauthorized attacker

Improper verification of cryptographic signature in Copilot Studio allows an unauthorized attacker to elevate privileges

Missing authentication for critical function in Azure AI Language allows an unauthorized attacker to elevate privileges

Missing authorization in Microsoft Fabric allows an authorized attacker to elevate privileges over a network.

Authorization bypass through user-controlled key in Azure Cosmos DB allows an authorized attacker to perform spoofing ov

Server-side request forgery (ssrf) in Power Automate allows an authorized attacker to elevate privileges over a network.

Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to elevat

Improper neutralization of special elements in data query logic in Microsoft Discovery Studio allows an unauthorized att

A hard-coded cryptographic key vulnerability exists in TP-Link RE305 V3 and Archer C7 V5. The same RSA-1024 private key

A stack-based buffer overflow vulnerability exists in the EasyMesh module of TP-Link Archer AX55 v4. When Mesh mode is e

A vulnerability was determined in D-Link DNS-320 ShareCenter 2.06B01. This affects an unknown part of the file /cgi/file

A vulnerability was found in D-Link DNS-340L 1.01B04. Affected by this issue is some unknown functionality of the file /

There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data.   This results

There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data.   This results

There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data.   This results

There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in

There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in

There is an out-of-bounds write vulnerability in DASYLab due to lack of proper validation of user-supplied data. Success

IBM Netezza Software 11.3.0.3 through Interim Fix 002 has operations that are performed without validating bucket owners

IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or improperly validates TLS certificate validati

IBM Netezza Software 11.3.0.3 through Interim Fix 002 could allow an unauthorized user to inject data into log messages

IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or improperly validates TLS certificate validati

IBM Netezza Software 11.3.0.3 through Interim Fix 002 has credentials that are hardcoded in the application source code,

Divide-by-zero in Xpdf 4.06 (and earlier), when a glyph in a Type 3 font has a zero height.

A vulnerability has been found in D-Link DNS-340L 1.01B04. Affected by this vulnerability is an unknown functionality of

A security flaw has been discovered in itsourcecode Online Medicine Delivery System 1.0. The affected element is the fun

node-csv is a full-featured CSV parser with a simple API that is tested against large datasets. Prior to 7.0.2, csv-pars

Colord is a tiny yet powerful tool for high-performance color manipulations and conversions. Prior to 2.9.4, synchronous

MapLibre GL JS is an interactive vector tile map library for web browsers. Prior to 6.4.1, DOM.sanitize() in src/util/do

A flaw was found in the jwcrypto library, which is used for implementing Javascript Object Signing and Encryption (JOSE)

parsedmarc 9.0.6 before 11.0.1 writes forensic report sample files using an output path derived from the email subject.

parsedmarc before 11.0.1 decompresses gzip and ZIP attachments in a single unbounded read with no limit on decompressed

toml-node is a TOML parser for Node.js and the browser. Prior to 4.2.0, toml.parse() uses a Peggy 5.1.0 generated recurs

stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. Prior

toml-node is a TOML parser for Node.js and the browser. Prior to 4.1.2, toml.parse() in lib/compiler.js can be tricked b

A vulnerability was identified in itsourcecode Online Medicine Delivery System 1.0. Impacted is an unknown function of t

Improper resource exposure in CacheStorage in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute

Out of bounds read in CrashReporting in Google Chrome prior to 152.0.7977.82 allowed a remote attacker who had compromis

Type confusion in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary cod

Out of bounds write in WebGL in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker to execute

Use after free in Skia in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code insid