2026

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user that holds a role with the schedule_searc

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power" Splunk role could c

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power"

Punk::OAuth2 versions before 0.03 for Perl allow an attacker-chosen off-site redirect after login because same_origin_pa

Catalyst::Plugin::Static::Simple versions through 0.38 for Perl mark responses as publicly cacheable. The _serve_static

CKAN MCP Server is a tool for querying CKAN open data portals. A known vulnerability CVE-2026-33060 indicated tools incl

WWBN AVideo through commit 9c39d8c8 contains a cross-site request forgery vulnerability in objects/videoEditLight.php th

BlueZ sdp-xml.c type confusion via RegisterProfile(ServiceRecord) can crash bluetoothd (local DoS): a crafted nested Ser

Vulnerability in Drupal Development Environment. This issue affects Development Environment versions: *.*.

Vulnerability in Drupal Email Login OTP. This issue affects Email Login OTP versions: *.*.

Vulnerability in Drupal Lunr exposed filters. This issue affects Lunr exposed filters versions: *.*.

Vulnerability in Drupal PanKM. This issue affects PanKM versions: *.*.

Vulnerability in Drupal Disable Login Page. This issue affects Disable Login Page versions: *.*.

Vulnerability in Drupal Powerful Surveys. This issue affects Powerful Surveys versions: *.*.

RustDesk versions 1.3.9 through 1.4.9 contain a path traversal vulnerability in the macOS clipboard file-paste code path

SiYuan before v3.8.1 contains a path traversal vulnerability in the asset.upload MCP tool that accepts arbitrary absolut

The ECDSA implementation of the Elliptic package generates incorrect signatures if an interim value of 'k' (as computed

WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.

A weakness has been identified in CRMEB up to 5.6.3. The impacted element is the function remoteRegister of the file crm

A security flaw has been discovered in pymumu SmartDNS up to 47.1. This vulnerability affects the function _dns_decode_r

A third-party NAT traversal module fails to validate SSL/TLS certificates when connecting to the signaling server. While

The response coming from TP-Link Archer MR200 v5.2, C20 v5 and v6, TL-WR850N v3, and TL-WR845N v4 for any request is get

A vulnerability has been found in zhutoutoutousan worldquant-miner up to 1.0.9. The impacted element is an unknown funct

A security vulnerability has been detected in Chia Blockchain 2.1.0. This issue affects the function _authenticate of th

Cleartext Transmission of Sensitive Information (CWE-319) in a component used in the Gallagher Hanwha VMS and Gallagher

The SAP Customer Checkout application exhibits certain design characteristics that involve locally storing operational d

HCL AION is affected by a vulnerability where generated containers may execute binaries with root-level privileges. Runn

A vulnerability was determined in Duende IdentityServer4 up to 4.1.2. The affected element is an unknown function of the

The The Contact Form, Survey, Quiz & Popup Form Builder – ARForms plugin for WordPress is vulnerable to arbitrary shortc

A security vulnerability has been detected in kalcaddle kodbox 1.64. This impacts the function loginAfter/tfaVerify of t

Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in

A vulnerability was identified in kalcaddle kodbox 1.64. This issue affects the function Add of the file app/controller/

Hidden Functionality vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to enable telnet via network.

A vulnerability was found in Cesanta Mongoose up to 7.20. This impacts the function handle_mdns_record of the file mongo

A vulnerability was determined in Cesanta Mongoose up to 7.20. Affected is the function mg_tls_verify_cert_signature of

A vulnerability was detected in kalcaddle kodbox up to 1.64. This affects an unknown function of the component shareMake

A flaw was found in libtheora. This heap-based out-of-bounds read vulnerability exists within the AVI (Audio Video Inter

A weakness has been identified in OpenClaw up to 2026.1.26. Affected by this issue is some unknown functionality of the

LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. Prior to 0.5.18, the LangSmith JavaScri

Double free vulnerability in the multi-mode input system. Impact: Successful exploitation of this vulnerability may affe

A security vulnerability has been detected in Collabora KodExplorer up to 4.52. Affected by this issue is some unknown f

A security flaw has been discovered in liangliangyy DjangoBlog up to 2.1.0.0. This affects an unknown function of the fi

The Home Assistant Command-line interface (hass-cli) is a command-line tool for Home Assistant. Up to 1.0.0 of home-assi

A vulnerability in the rm utility of uutils coreutils allows the bypass of safeguard mechanisms intended to protect the

A vulnerability was identified in ByteDance verl up to 0.7.0. Affected is the function math_equal of the file prime_math

A vulnerability was determined in Datavane Datavines up to 13607645e14a4982468cfdbcf75c85cde63bae71. The affected elemen

A vulnerability has been found in NousResearch hermes-agent 0.8.0. Affected by this vulnerability is the function _check

A vulnerability was found in NousResearch hermes-agent 0.8.0. Affected by this issue is some unknown functionality of th

A vulnerability was found in vLLM up to 0.19.0. The affected element is the function has_mamba_layers of the file vllm/v

A security vulnerability has been detected in o2oa up to 10.0. This impacts the function syncFile of the file NodeAgent.