2026

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, RDPEAR’s NDR array reader does not per

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a malicious RDP server can trigger a h

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a race condition between the RDPGFX dy

Outray openSource ngrok alternative. Prior to 0.1.5, this vulnerability allows a user i.e a free plan user to get more t

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the serverName parameter of the sub_65A28 function.

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the serviceName parameter of the sub_65A28 function

An insecure authentication mechanism in the safe_exec.sh startup script of Blurams Flare Camera version 24.1114.151.929

A stored cross-site scripting (XSS) vulnerability exists in pH7Software pH7-Social-Dating-CMS 17.9.1 in the user profile

html2pdf.js converts any webpage or element into a printable PDF entirely client-side. Prior to 0.14.0, html2pdf.js cont

BlackSheep is an asynchronous web framework to build event based web applications with Python. Prior to 2.4.6, the HTTP

Cursor is a code editor built for programming with AI. Prior to 2.3, hen the Cursor Agent is running in Auto-Run Mode wi

AliasVault is a privacy-first password manager with built-in email aliasing. AliasVault Android versions 0.24.0 through

Weblate is a web based localization tool. Prior to 5.15.2, the screenshot images were served directly by the HTTP server

FreeImage 3.18.0 contains a Use After Free in PluginTARGA.cpp;loadRLE().

Paessler PRTG Network Monitor before 25.4.114 allows Denial-of-Service (DoS) by an authenticated attacker via the Notifi

Paessler PRTG Network Monitor before 25.4.114 allows XSS by an unauthenticated attacker via the filter parameter.

Paessler PRTG Network Monitor before 25.4.114 allows XSS by an unauthenticated attacker via the tag parameter.

A vulnerability in the boot process of Blurams Flare Camera version 24.1114.151.929 and earlier allows a physically prox

Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated re

A vulnerability exists in an Orchestrator service that could allow an unauthenticated remote attacker to bypass multi-fa

Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated re

Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated re

Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated re

TinyOS versions up to and including 2.1.2 contain a global buffer overflow vulnerability in the printfUART formatted out

An issue in AIRTH SMART HOME AQI MONITOR Bootloader v.1.005 allows a physically proximate attacker to obtain sensitive i

A flaw was found in vsftpd. This vulnerability allows a denial of service (DoS) via an integer overflow in the ls comman

Outray openSource ngrok alternative. Prior to 0.1.5, a TOCTOU race condition vulnerability allows a user to exceed the s

The vulnerability exists in BLUVOYIX due to an improper password storage implementation and subsequent exposure via unau

The vulnerability exists in BLUVOYIX due to design flaws in the email sending API. An unauthenticated remote attacker co

The vulnerability exists in BLUVOYIX due to improper authentication in the BLUVOYIX admin APIs. An unauthenticated remot

The vulnerability exists in BLUVOYIX due to the exposure of sensitive internal API documentation. An unauthenticated rem

The vulnerability exists in BLUVOYIX due to improper authentication in the BLUVOYIX backend APIs. An unauthenticated rem

A local user can trigger Harmony SASE Windows client to write or delete files outside the intended certificate working d

In the Linux kernel, the following vulnerability has been resolved: mptcp: ensure context reset on disconnect() After

In the Linux kernel, the following vulnerability has been resolved: clk: samsung: exynos-clkout: Assign .num before acc

In the Linux kernel, the following vulnerability has been resolved: cpuset: fix warning when disabling remote partition

In the Linux kernel, the following vulnerability has been resolved: drm/tilcdc: Fix removal actions in case of failed p

In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Use spinlock for context l

In the Linux kernel, the following vulnerability has been resolved: kernel/kexec: fix IMA when allocation happens in CM

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Add missing NULL pointer check for pin

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix "UBSAN: shift-out-of-bounds error

In the Linux kernel, the following vulnerability has been resolved: media: adv7842: Avoid possible out-of-bounds array

In the Linux kernel, the following vulnerability has been resolved: md/raid5: fix possible null-pointer dereferences in

In the Linux kernel, the following vulnerability has been resolved: mm/page_alloc: change all pageblocks migrate type o

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: avoid invalid read in irdma_net_event

In the Linux kernel, the following vulnerability has been resolved: smc91x: fix broken irq-context in PREEMPT_RT When

In the Linux kernel, the following vulnerability has been resolved: crypto: seqiv - Do not use req->iv after crypto_aea

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Zero-initialize the eb.vma array in i

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Sign extend kfunc call arguments T

In the Linux kernel, the following vulnerability has been resolved: erspan: Initialize options_len before referencing o