2026

Improper export of android application components in ImsSettings prior to SMR Jun-2026 Release 1 allows local attackers

A flaw was found in org.keycloak.services. An administrator with delegated access to read group memberships and users ca

A vulnerability was found in bytedance InfiniStore up to 0.2.33. The impacted element is the function purge_kv_map in th

Insufficient policy enforcement in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker wh

Insufficient policy enforcement in CustomTabs in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attack

Insufficient validation of untrusted input in WebAuthentication in Google Chrome prior to 149.0.7827.53 allowed a remote

Insufficient validation of untrusted input in Loader in Google Chrome prior to 149.0.7827.53 allowed a remote attacker w

In OpenStack Neutron before 28.0.1, a project manager can create or update a port on a shared network owned by another p

A flaw has been found in LMCache up to 0.4.6. This affects the function hex_hash_to_int16 of the file lmcache/integratio

Strawberry GraphQL is a library for creating GraphQL APIs. In versions 0.288.4 through 0.315.3, Strawberry's bundled Gra

A vulnerability was detected in zilliztech GPTCache up to 0.1.44. Affected by this issue is the function BufferedReader.

HCL BigFix Cloud Lifecycle Management is affected by lack of input validation.  This low-level flaw allows unauthorized

A vulnerability has been found in Streamlit up to 1.53.0. Impacted is an unknown function in the library lib/streamlit/r

A flaw has been found in MLflow up to 3.10.0. This issue affects the function mlflow.data.digest_utils of the file mlflo

HCL iControl v4.0.0 was affected by Unhandled Exception - Stack Trace Disclosure vulnerability. The error occurs due to

HCL iControl was affected by Missing Security Headers vulnerability. which lead to cross-site scripting (XSS) attacks by

HCL iControl was affected by Missing Cookie Attributes vulnerability. It was observed that the application is missing s

A security vulnerability has been detected in modelscope ms-swift up to 4.2.0. This affects the function Template._save_

A weakness has been identified in PaddlePaddle FastDeploy up to 2.4.1. Affected by this issue is the function hash_featu

A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the co

A vulnerability was determined in sgl-project SGLang up to 0.5.11. Affected by this vulnerability is the function data_h

A vulnerability has been found in mlrun up to 1.12.0-rc3. This impacts the function mlrun.utils.helpers.calculate_datafr

An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6. `django.middleware.cache.UpdateCacheMiddleware

An issue was discovered in Django 6.0 before 6.0.6 and 5.2 before 5.2.15. `django.core.mail.backends.smtp.EmailBackend`

An issue was discovered in Django 6.0 before 6.0.6 and 5.2 before 5.2.15. `django.http.HttpRequest.get_signed_cookie` in

An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6. `django.utils.cache.has_vary_header()` in Djan

daphne before 4.2.2 reconstructs a raw HTTP request from Twisted's parsed headers and feeds it to autobahn for WebSocket

An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6. `django.middleware.cache.UpdateCacheMiddleware

A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go

A flaw has been found in dask up to 3.0. Affected by this issue is the function nunique_approx of the file dask/datafram

Improper Encoding or Escaping of Output vulnerability in elixir-tesla tesla allows multipart part header injection via u

Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') vulnerability in elixir-te

HCL iReflection Third party vulnerable and outdated components issue was detected in the web application

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0

Klaw is a self-service Apache Kafka Topic Management/Governance tool/portal. Prior to version 2.10.4, a vulnerability ex

A security vulnerability has been detected in 1Panel-dev CordysCRM up to 1.4.1. This impacts the function Save of the fi

A security flaw has been discovered in Open5GS up to 2.7.6. The impacted element is the function gmm_state_security_mode

A weakness has been identified in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Impacted is an unkn

A security flaw has been discovered in Orthanc DICOM Server up to 1.12.11. This issue affects the function DcmItem::read

A vulnerability has been found in 1Panel-dev CordysCRM up to 1.6.2. This affects an unknown function of the file backend

Kiteworks is a private data network (PDN). Prior to version 9.3.0, an Insecure Direct Object Reference (IDOR) vulnerabil

A security vulnerability has been detected in SGLang 0.5.10.post1. Impacted is an unknown function of the file python/sg

A weakness has been identified in code-projects Online Hospital Management System 1.0. This issue affects some unknown p

A security flaw has been discovered in ggml-org whisper.cpp up to 1.8.2. This vulnerability affects the function whisper

A vulnerability was found in SourceCodester Customer Review App 1.0. Affected by this vulnerability is the function add_

In multiple functions of AppOpsService.java, there is a possible missing permission check due to a permissions bypass. T

In setTo of ResourceTypes.cpp, there is a possible read out of bounds due to an incorrect bounds check. This could lead

In handleBondStateChanged of AdapterService.java, there is a possible sensitive information disclosure due to a permissi

In updateProvidersWhenServiceRemoved of CredentialManagerService.java, there is a possible way to override settings acro

In multiple functions of KeyguardViewMediator.java , there is a possible way to bypass lockdown mode with screen pinning