2026

Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.13.5, Hono's query help

Composer is a dependency Manager for the PHP language. From 1.0 until 2.2.30 and 2.10.3, a malicious dependency package

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/

A flaw has been found in NousResearch hermes-agent 0.18.0. Affected by this issue is some unknown functionality of the f

Stack overflow vulnerabilities exist in an API endpoint of AOS-CX. Successful exploitation could allow an authenticated

A format string vulnerability exists in the command line interface of AOS-CX that could lead to unauthenticated remote c

A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct

A vulnerability in the web-based management interface of AOS-CX switches exposes some sessions to a lack of Cross-Site R

Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthen

A vulnerability exists in the Credential Manager component that may allow for unauthorized administrative access. An una

Vulnerabilities have been identified in the API endpoint of AOS-CX switches that could potentially allow an unauthentica

A signature verification bypass vulnerability exists in the command line interface of AOS-CX. Successful exploitation co

Vulnerabilities in the API endpoint of AOS-CX could allow a remote attacker authenticated with low privileges to access

A buffer overflow vulnerability exists in the underlying operating system of AOS-CX that could lead to unauthenticated d

An unauthenticated Denial-of-Service (DoS) vulnerability exists in the API endpoint of AOS-CX. Successful exploitation o

Buffer overflow vulnerabilities exist in an underlying service of AOS-CX that could lead to an unauthenticated denial-of

An authentication vulnerability exists in the AOS-CX management interface and API that may allow improper authentication

An authenticated arbitrary file write vulnerability exists in AOS-CX. Successful exploitation could allow an authenticat

A vulnerability exists in the command line interface of AOS-CX that may allow for improper processing of malformed input

Authenticated command injection vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation o

Command injection vulnerabilities in the API endpoint of AOS-CX could allow an authenticated remote attacker with admini

Authenticated path traversal vulnerabilities exist in API endpoints of AOS-CX. Successful exploitation of these vulnerab

Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthen

A vulnerability exists in a management component that could allow an unauthenticated adjacent attacker to execute arbitr

A vulnerability has been identified in the API endpoint of AOS-CX that could allow a remote actor to circumvent existing

An out-of-bounds read vulnerability exists in the underlying operating system of AOS-CX that could lead to unauthenticat

An authenticated Path Traversal vulnerability exists in AOS-CX. Successful exploitation of this vulnerability allows an

Vulnerabilities in AOS-CX could allow an unauthenticated remote malicious actor to trigger a denial-of-service condition

A privilege escalation vulnerability exists in the API endpoint of AOS-CX. Successful exploitation could allow an authen

A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct

A vulnerability in an API endpoint of AOS-CX could allow a remote unauthenticated attacker to obtain sensitive informati

A privilege escalation vulnerability exists in the API endpoint of AOS-CX. Successful exploitation could allow an authen

Denial-of-service vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation could allow an

Exploitation through affected command-line operations could allow an authenticated low-privileged user to execute arbitr

An unauthenticated arbitrary file write vulnerability exists in an API endpoint of AOS-CX. Successful exploitation of th

An authenticated user with low-privileged access could submit crafted input through the web-based management interface t

Vulnerabilities exist in the authentication module that may improperly process malformed or truncated input. An authenti

Multiple vulnerabilities exist in a daemon of AOS-CX that may allow for improper processing of malformed input. An unaut

Cypht before 2.12.2 contains a cross-site scripting vulnerability in the contacts module that allows remote attackers to

Cypht before 2.12.2 contains a PHP object injection vulnerability that allows authenticated attackers to execute arbitra

Mail is an internet library for Ruby designed to handle email generation, parsing, and sending. Prior to 2.9.1, Mail::Ut

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.0, an attacker can craft a PDF whose cyclic tree

phpseclib is a PHP secure communications library. Prior to 3.0.57 and 4.0.1, pure-PHP X25519 scalar multiplication in ph

Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.12.5 and 5.7.5

Missing Authorization (CWE-862) in Kibana can lead to information disclosure via Privilege Abuse (CAPEC-122). An authori

Missing Authorization (CWE-862) in the Elasticsearch custom inference service can lead to information disclosure via Pri

Incorrect Authorization (CWE-863) in Kibana can lead to unauthorized disclosure, modification, and deletion of data via

Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') (CWE-444) in Elasticsearch can lead to informati

Missing Authorization (CWE-862) in Kibana can lead to information disclosure via Exploiting Incorrectly Configured Acces