2026

FileZilla 3.40.0 contains a denial of service vulnerability in the local search functionality that allows local attacker

A double free vulnerability exists in librz/bin/format/le/le.c in the function le_load_fixup_record(). When processing m

In onHeaderDecoded of LocalImageResolver.java, there is a possible persistent denial of service due to resource exhausti

IBM Concert 1.0.0 through 2.2.0 creates temporary files with predictable names, which allows local users to overwrite ar

go-ipld-prime is an implementation of the InterPlanetary Linked Data (IPLD) spec interfaces, a batteries-included codec

Aardvark-dns is an authoritative dns server for A/AAAA container records. From 1.16.0 to 1.17.0, a truncated TCP DNS que

rfc3161-client is a Python library implementing the Time-Stamp Protocol (TSP) described in RFC 3161. Prior to 1.0.6, an

PraisonAI is a multi-agent teams system. Prior to 4.5.128, the WSGI-based recipe registry server (server.py) reads the e

PraisonAIAgents is a multi-agent teams system. Prior to 1.5.128, read_skill_file() in skill_tools.py allows reading arbi

In systemd 260 before 261, a local unprivileged user can trigger an assert via an IPC API call with an array or map that

SpotFTP Password Recover 2.4.2 contains a denial of service vulnerability that allows local attackers to crash the appli

BlueAuditor 1.7.2.0 contains a buffer overflow vulnerability in the registration key field that allows local attackers t

Deserialization of untrusted data vulnerability in Samsung Open Source Escargot Java Script allows denial of service con

A stack overflow in the experimental/tinyobj_loader_opt.h file of tinyobjloader commit d56555b allows attackers to cause

jq is a command-line JSON processor. In versions 1.8.1 and below, functions jv_setpath(), jv_getpath(), and delpaths_sor

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-1

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-1

Improper authentication in Windows Active Directory allows an unauthorized attacker to perform spoofing locally.

In ONLYOFFICE DesktopEditors before 9.3.0, the update service allows attackers to perform actions on files with SYSTEM p

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 8.4 through 8.5 cont

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 8.4 through 8.5 cont

Next AI Draw.io is a next.js web application that integrates AI capabilities with draw.io diagrams. Prior to 0.4.15, the

In order to apply a particular protection key to an address range, the kernel must update the corresponding page table e

Angry IP Scanner for Linux 3.5.3 contains a denial of service vulnerability that allows local attackers to crash the app

Angry IP Scanner 3.5.3 contains a buffer overflow vulnerability in the preferences dialog that allows local attackers to

UltraISO 9.7.1.3519 contains a local buffer overflow vulnerability in the Output FileName field of the Make CD/DVD Image

Textpad 8.1.2 contains a denial of service vulnerability that allows local attackers to crash the application by supplyi

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 15.8.8 and iPadOS 15.8.8, iOS 16.

TransMac 12.2 contains a buffer overflow vulnerability in the license key input field that allows local attackers to cra

CrossFont 7.5 contains a buffer overflow vulnerability that allows local attackers to crash the application by submittin

InfraRecorder 0.53 contains a denial of service vulnerability that allows local attackers to crash the application by im

Faleemi Plus 1.0.2 contains a buffer overflow vulnerability that allows local attackers to crash the application by supp

PixGPS 1.1.8 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying

PicaJet FX 2.6.5 contains a denial of service vulnerability that allows local attackers to crash the application by subm

jiNa OCR Image to Text 1.0 contains a denial of service vulnerability that allows local attackers to crash the applicati

Nmap 7.70 contains a denial of service vulnerability that allows local attackers to crash the application by processing

HD Tune Pro 5.70 contains a buffer overflow vulnerability that allows local attackers to crash the application by supply

Easy PhotoResQ 1.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by supp

StyleWriter 1.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplyi

Softdisk 3.0.3 contains a buffer overflow vulnerability in the registration code dialog that allows local attackers to c

Easyboot 6.6.0 contains a buffer overflow vulnerability in the Replace Text function that allows local attackers to cras

Project64 2.3.2 contains a buffer overflow vulnerability in the Plugin Directory settings field that allows local attack

Bome Restorator 1793 contains a buffer overflow vulnerability that allows local attackers to crash the application by su

Prime95 29.4b7 contains a buffer overflow vulnerability in the PrimeNet connection dialog that allows local attackers to

ObserverIP Scan Tool 1.4.0.1 contains a denial of service vulnerability that allows local attackers to crash the applica

Wansview 1.0.2 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplyin

The RTSP service of MERCURY IP camera MIPC252W 1.0.5 Build 230306 has an issue handling failed Digest authentication att

librsvg2-bin 2.40.13 contains a buffer overflow vulnerability that allows local attackers to cause a denial of service b

PDFunite 0.41.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by process

SysGauge 4.5.18 contains a buffer overflow vulnerability in the proxy configuration handler that allows local attackers