2026

Cursor is a code editor built for programming with AI. Prior to 3.1.2, Cursor IDE for macOS allows an agent running in A

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.17.0, shutdown_client_connection() in sr

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.17.0, turnports_allocate_even() in src/a

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.16.0, dtls_server_input_handler() and cr

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.16.0, addr_less_eq() in src/client/ns_tu

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.13.1, good_peer_addr() in src/server/ns_

PeerTube is an ActivityPub-federated video streaming platform. Prior to 8.1.6, ActorFollowModel.updateScore() interpolat

PeerTube is an ActivityPub-federated video streaming platform. Prior to 8.2.2, processUpdateActivity and processUpdateVi

XAgent contains a path traversal vulnerability in the workspace file endpoint that allows self-registered or default-cre

Nmap versions up to and including 7.99 contains a denial of service vulnerability that allows remote attackers to crash

Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An att

Cap v0.3.1 contains a broken access control vulnerability in the POST /api/video/comment endpoint that allows authentica

MaxKey contains an unauthorized access vulnerability due to a hard-coded JWT signing secret in application-maxkey.proper

Improper link resolution before file access ('link following') in Microsoft OneDrive allows an authorized attacker to el

Turso CLI is the command line interface (CLI) to the open-source database Turso. Versions prior to 1.0.26 persist the us

ishankportfolio is a portfolio website. Prior to version 1.0.1, contact form submissions could potentially be exposed du

TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege guest member of a workspace to obtain

TypeBot is a chatbot builder tool. In version 3.16.1, an authenticated user who has read access to any typebot can resum

Lightroom Classic is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution

Lightroom Classic is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulne

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An att

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A

Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in t

Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in t

Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in t

Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in t

Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in t

Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in t

Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in t

Lightroom Classic is affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code e

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL

Lightroom Classic is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code exe

TypeBot is a chatbot builder tool. Version 3.16.1 has a CSV injection vulnerability in the result export functionality.

Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code

Exposure of sensitive information caused by incorrect data forwarding during transient execution for some Intel(R) Proce

Improper input validation for some Intel(R) Xeon(R) processors within firmware may allow an escalation of privilege. Sta

Incomplete cleanup in some UEFI firmware for some Intel(R) reference platforms within UEFI may allow an information disc

A Use‑After‑Free (UAF) vulnerability in the AMD Ryzen™ Master Utility Driver could allow a local attacker to access kern

A DLL hijacking vulnerability within the AMD Ryzen Master installation could allow a local user-privileged attacker to e

Incorrect directory permissions could allow a local user to escalate their privileges, potentially resulting in arbitrar

Weaver (Fanwei) E-cology 8.0 and 9.0 contains a SQL injection vulnerability in the HrmCareerApplyPerView.jsp endpoint th

Weaver (Fanwei) E-cology 8.0 contains a SQL injection vulnerability in the SignatureDownLoad servlet that allows unauthe

Browserslist is a configuration tool for sharing target browsers and Node.js versions between front-end tools. Prior to

Browserslist is a configuration tool for sharing target browsers and Node.js versions between front-end tools. Prior to

Dozzle is a realtime log viewer for docker containers. From 10.5.2 until 10.6.15, the isBlockedIP SSRF guard in internal