2026

Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An att

Cap v0.3.1 contains a broken access control vulnerability in the POST /api/video/comment endpoint that allows authentica

MaxKey contains an unauthorized access vulnerability due to a hard-coded JWT signing secret in application-maxkey.proper

Improper link resolution before file access ('link following') in Microsoft OneDrive allows an authorized attacker to el

Turso CLI is the command line interface (CLI) to the open-source database Turso. Versions prior to 1.0.26 persist the us

ishankportfolio is a portfolio website. Prior to version 1.0.1, contact form submissions could potentially be exposed du

TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege guest member of a workspace to obtain

TypeBot is a chatbot builder tool. In version 3.16.1, an authenticated user who has read access to any typebot can resum

Lightroom Classic is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution

Lightroom Classic is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulne

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An att

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A

Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in t

Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in t

Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in t

Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in t

Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in t

Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in t

Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in t

Lightroom Classic is affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code e

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL

Lightroom Classic is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code exe

TypeBot is a chatbot builder tool. Version 3.16.1 has a CSV injection vulnerability in the result export functionality.

Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code

Exposure of sensitive information caused by incorrect data forwarding during transient execution for some Intel(R) Proce

Improper input validation for some Intel(R) Xeon(R) processors within firmware may allow an escalation of privilege. Sta

Incomplete cleanup in some UEFI firmware for some Intel(R) reference platforms within UEFI may allow an information disc

A Use‑After‑Free (UAF) vulnerability in the AMD Ryzen™ Master Utility Driver could allow a local attacker to access kern

A DLL hijacking vulnerability within the AMD Ryzen Master installation could allow a local user-privileged attacker to e

Incorrect directory permissions could allow a local user to escalate their privileges, potentially resulting in arbitrar

Weaver (Fanwei) E-cology 8.0 and 9.0 contains a SQL injection vulnerability in the HrmCareerApplyPerView.jsp endpoint th

Weaver (Fanwei) E-cology 8.0 contains a SQL injection vulnerability in the SignatureDownLoad servlet that allows unauthe

Browserslist is a configuration tool for sharing target browsers and Node.js versions between front-end tools. Prior to

Browserslist is a configuration tool for sharing target browsers and Node.js versions between front-end tools. Prior to

Dozzle is a realtime log viewer for docker containers. From 10.5.2 until 10.6.15, the isBlockedIP SSRF guard in internal

nanoid is a secure, URL-friendly, unique string ID generator for JavaScript. Prior to versions 3.3.12 and 5.1.11, the na

Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.36.0, the jwtAuthCheck function in server/auth/

Activepieces is an open source AI workflow automation platform. Prior to 0.83.0, the /api/redirect OAuth callback endpoi

Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, in SANDBOX_CODE_ONLY mode, the engine l

Activepieces is an open source AI workflow automation platform. Prior to 0.82.0, the POST /api/v1/projects/:projectId/mc

Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, the worker's code-compilation pipeline

Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security featur

CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an a

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the