2026

Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a stack buffer overflow vulnerability in file-level

A stack overflow vulnerability was found in gfs2-utils. The metadata walk code in metawalk.c uses alloca() with an untru

A heap out-of-bounds read vulnerability was found in gfs2-utils. The ea_num_ptrs field from on-disk extended attribute m

A stack out-of-bounds write vulnerability was found in gfs2-utils. In savemeta, the height value from on-disk inode meta

A stack out-of-bounds write vulnerability was found in gfs2-utils. In gfs2_edit, the di_height field from on-disk inode

A stack overflow vulnerability was found in gfs2-utils. The hash table traversal code in metawalk.c uses alloca() with a

Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Reliance on Data/Memory Layout vulnerability. An

The Divi theme for WordPress is vulnerable to Stored Cross-Site Scripting via the `skype_url` shortcode attribute of the

The API Publisher component previously used a non-cryptographic pseudorandom number generator (PRNG) to create shared se

The GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor plugin for WordPress is vulnerabl

RTU500 has a vulnerability, where high-load scenarios, such as sending GI requests at short intervals, may cause a NULL

OptimiDoc Server (On-Premise) stores credentials for external services in cleartext. An authenticated administrator can

Error in handling the PlatformLangCodes UEFI variable could cause a buffer overflow, leading to resource exhaustion and

An issue was discovered in SysPasswordDxe in Insyde InsydeH2O. User and administrator password hashes are exposed in run

HDD password plaintext is stored in a UEFI variable.

A weakness has been identified in RightNow-AI OpenFang up to 0.6.9. This vulnerability affects the function shell_exec o

A vulnerability was identified in simular-ai Agent-S up to 0.3.2. Affected by this issue is some unknown functionality o

A vulnerability was determined in simular-ai Agent-S up to 0.3.2. Affected by this vulnerability is the function ImageDa

A vulnerability has been found in simular-ai Agent-S 0.3.1/0.3.2. This impacts an unknown function of the file code_agen

An uncontrolled recursion issue exists in Amazon Ion-C versions before 1.1.6 that might allow a remote unauthenticated a

fast-uri accepts a host that contains an unbalanced or misplaced authority bracket without reporting an error. A host th

A flaw has been found in sigoden aichat up to 0.30.4. This affects an unknown function of the file src/serve.rs of the c

A vulnerability was detected in rowboatlabs rowboat up to 0.9.1. The impacted element is the function request.text/req.j

A security vulnerability has been detected in Reader Tools PDF Reader App 98.8 on Android. The affected element is the f

Windows ML CLI is a command line tool for building portable, performant, and high-quality AI models for Windows ML. Prio

fast-uri serializes the port component of a URI without validating it. When recomposing the authority, the userinfo and

UnoPim before 2.1.5 contains an authenticated file upload vulnerability that allows authenticated administrators to uplo

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able

UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerability that allows local attackers to recov

UpSignOn for Windows before 7.19.0 contains an insecure credential storage vulnerability that allows local attackers to

UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerability that allows local attackers to recov

SEOWriting plugin for WordPress through 1.12.5 contains a stored cross-site scripting vulnerability that allows authenti

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the e

A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI fl

Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially result

A security flaw has been discovered in tsi-coop tsi-dpdp-cms up to 0.5.0. This vulnerability affects unknown code. The m

A vulnerability was identified in tsi-coop tsi-dpdp-cms up to 0.5.0. This affects an unknown part of the file Intercepti

A vulnerability was determined in tsi-coop tsi-dpdp-cms up to 0.5.0. Affected by this issue is some unknown functionalit

HTTPX2 is a next generation HTTP client for Python. Prior to 2.12.0, the HTTPX2 content decoders in src/httpx2/httpx2/_d

HTTPX2 is a next generation HTTP client for Python. Prior to 2.10.0, httpcore2 fails to start TLS in src/httpcore2/httpc

Under specific conditions, an attacker can register an attacker-controlled FIDO2 credential against a target account and

A vulnerability was found in ntegrals openbrowser up to 067fc45d649baa961750da8e2f4a75d87c5c75c8. Affected by this vulne

HTTPX2 is a next generation HTTP client for Python. Prior to 2.11.0, Request._prepare() in src/httpx2/httpx2/_models.py

HTTPX2 is a next generation HTTP client for Python. Prior to 2.11.0, FileField.render_headers() in src/httpx2/httpx2/_mu

HTTPX2 is a next generation HTTP client for Python. From 2.5.0 until 2.10.0, the HTTPX2 Server-Sent Events parser in src

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to versions 1.88.6 and 1.96.

libjxl before 0.12 contains an integer underflow vulnerability in the container box parser that allows remote attackers

A vulnerability was identified in Sonatype Nexus Repository 3 in which two blobstore group management REST API endpoints

In affected versions of Nexus Repository 3, the script execution endpoint (POST /service/rest/v1/script/{name}/run) did

Nexus Repository 3 contains a sensitive information disclosure vulnerability in the capability read API. An account hold