2026

An integer overflow in the libswscale/utils.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denia

A heap overflow in the ff_sws_alphablendaway function (libswscale/alphablend.c) of FFmpeg git-master commit 722a217 allo

An integer overflow in the yuv2planeX_8_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attacke

A Division-by-Zero vulnerability in the ff_sws_init_single_context function (/libswscale/utils.c) of FFmpeg N-122528-gdd

A NULL pointer dereference in the get_min_buffer_size function (/libswscale/slice.c) of FFmpeg N-122528-gdd2976b9e1 allo

An integer overflow in the libavfilter/vf_scale.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a D

PayRange API is missing proper authorization on management endpoints, which allows verbose details of every device on th

ASE2000 2.35 through 2.37 is vulnerable to an improper certificate validation vulnerability, which may allow an attacker

In SiSDK v2026.6.0 and earlier, high network traffic loads can cause a dropped ACK leading to a denial of service. This

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2

Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-d

Unrestricted Upload of File with Dangerous Type in the product photo upload in Roskus Prospero Flow CRM before 5.16.0 al

A flaw was found in gdk-pixbuf. When loading a specially crafted JPEG image containing chunked ICC profile markers, an e

A relative path traversal issue in the zip extraction functionality in AWS diagram-as-code (awsdac) in versions 0.10 thr

A weakness has been identified in RooCodeInc Roo-Code up to 3.51.1. Affected by this issue is the function ExecaTerminal

A security flaw has been discovered in RooCodeInc Roo-Code up to 3.51.1. Affected by this vulnerability is the function

Frappe 15.11.0 through 16.32.0 stores and renders the workspace card description without XSS filtering. The description

Dolibarr 9.0.0 through 23.0.4 saves inbound email attachments under the name supplied in the message's MIME headers with

Dolibarr before 23.0.4 authorizes REST API document deletion against the wrong permission. Documents::delete() in htdocs

Dolibarr before 24.0.0 contains a SQL injection in its CSV and XLSX import wizard. The wizard reads its update keys with

A weakness in the client-side encryption configuration surface of the MongoDB C# Driver causes sensitive key-management

Improper neutralization of delimiters in connection-URL construction allows connection-option injection in the MongoDB C

A MongoDB C# driver document-replacement code path omits the element-name/shape validation that the equivalent write pat

A NoSQL/expression injection weakness exists in the LINQ-to-aggregation query translation layer of the MongoDB C# Driver

The MongoDB Rust Driver does not neutralize special characters in a caller-supplied target identifier before embedding i

The MongoDB client library for PHP does not sufficiently sanitize special elements in application-supplied namespace ide

A weakness in the MongoDB C Driver allows special elements in caller-supplied database and collection name components to

A missing input-validation issue in MongoDB libmongocrypt's automatic-encryption context setup allows a caller-supplied

A weakness in the MongoDB C++ Driver's handling of caller-supplied namespace identifiers allows special characters embed

The MongoDB Go Driver's client-level bulk write operation may accept a caller-supplied database name containing a reserv

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the public shar

Unitree G1 EDU firmware through 1.5.2 contains multiple chained vulnerabilities in the BLE GATT server and WiFi provisio

Unitree G1 EDU firmware through 1.5.2 contains an unauthenticated remote code execution vulnerability that allows networ

Grafana Alloy’s prometheus.operator.servicemonitors component allows a user who can create or modify ServiceMonitor reso

ServiceNow has remediated a SQL injection vulnerability that was identified in in the ServiceNow AI platform. This vulne

ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This securi

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in woylie doggo allow

LimeSurvey Community Edition 7.0.5 contains an authenticated improper authorization vulnerability in the survey menu ent

When an IntegrationFlow uses .fluxTransform() with an asynchronous/reordering fluxFunction that emits raw payloads, conc

The EmbeddedHeadersJsonMessageMapper defaults to an overly permissive header parsing posture in its constructor. When de

A single ScriptEngine instance is reused for every message on a script-backed channel. For JSR-223 engines that report T

When a container-level ErrorHandler is configured (the mitigation for finding 221000), each delivery whose processing th

RedisChatMemoryRepository.findByMetadata() builds RediSearch tag and text queries from caller-supplied metadata values w

DeadLetterPublishingRecovererFactory reads the retry_topic-original-timestamp header from an inbound ConsumerRecord and

Spring Authorization Server's default consent page renders user-controlled values without HTML entity encoding. When usi

The Spring Cloud Config Monitor is susceptible to Denial of Service attacks via malicious payloads. Spring Cloud Config

Applications that build a Content-Disposition header value from untrusted input may be vulnerable to HTTP response split

Spring MVC applications using the functional web framework are vulnerable to stream corruption when using Server-Sent Ev

A local unprivileged user on the same host can redirect all Zip/UnZip transformer output into a directory of their choos

An operator who calls JdbcMessageStore.addAllowedPatterns(...) to restrict deserialization receives no protection at all