2026

Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denia

Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code exe

Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution

Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution

Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code exec

Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code exec

Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code exec

Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code exec

Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution

Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution

Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution

Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution

Substance3D - Sampler is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code exe

Ekushey Project Manager CRM stores the administrator-configured system name and writes it to the login page without outp

Webkul QloApps does not validate request parameters before a database query. A remote, authenticated attacker with admin

Webkul QloApps does not validate request parameters before a database query. A remote, authenticated attacker with admin

Webkul QloApps does not perform proper validation on uploaded file extensions or MIME types before moving the file to a

There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure o

There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure o

There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure o

There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure o

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture in

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture in

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture in

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture in

QWED is open-source AI verification infrastructure for deterministic verification of LLM outputs, tool calls, code, sche

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to

browse-mcp is a Playwright-based headless-browser MCP server for MCP-capable agents. Prior to 0.8.2, browser_download wr

urllib is an HTTP client for Node.js that supports authentication, redirects, timeouts, and other request features. Prio

NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an

NVIDIA DGX Spark contains a vulnerability in UEFI where a Attacker may cause a/an CWE-693 by privileged local user. A su

NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause a N

NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an

NVIDIA DGX Spark contains a vulnerability in the standalone MM firmware where an attacker could be able to cause an out-

NVIDIA UFM Enterprise contains a vulnerability in the web interface authorization component, where an authenticated user

NVIDIA UFM Enterprise contains a vulnerability in the plugin management API, where an authenticated user with low privil

NVIDIA UFM Enterprise contains a vulnerability in the IBDiagnet API where an authenticated attacker with administrative

NVIDIA UFM Enterprise contains a vulnerability in the user management component, where an authenticated administrator co

NVIDIA UFM Enterprise contains a vulnerability in the session management component, where an attacker could use a hard-c

The Kaltura HTML5 player (mwEmbed / html5lib) contains a local file disclosure vulnerability due to improper validation

The Kaltura HTML5 player (mwEmbed / html5lib) contains an unauthenticated remote code execution vulnerability caused by

There is an integer overflow vulnerability resulting in an out-of-bounds write recently discovered in NI LabVIEW.  This

There is an integer conversion vulnerability resulting in an out-of-bounds read when loading images recently discovered

There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure o

There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure o

The Zephyr ext2 filesystem driver validates the on-disk block bitmap in ext2_init_fs() (subsys/fs/ext2/ext2_impl.c) by p

The OCPP 1.6 client in subsys/net/lib/ocpp/ocpp.c reconstructs a session handle and PDU id from the uid field of a CALLR

The virtio PCI driver (drivers/virtio/virtio_pci.c) parses a device's PCI capability list during driver initialization.

X-AnyLabeling's model downloader disabled TLS certificate verification. download_with_retry in anylabeling/services/auto

Vocos instantiates a class named by a configuration file without restricting which class may be named. instantiate_class