2026

A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS co

A vulnerability in Cisco Catalyst Center could allow an unauthenticated, remote attacker to read arbitrary files from a

The genucenter web interface before version 8.0p11 unnecessarily exposes sensitive SNMP authentication and encryption ke

Keras versions up to and including 3.13.2 are vulnerable to an arbitrary HDF5 file read due to an incomplete fix for CVE

A vulnerability in Wikimedia Foundation timeline. This vulnerability is associated with program files scripts/EasyTime

A vulnerability was discovered on Stormshield Network Security 4.3.0  to 4.3.41 (included), 4.4.0 to 4.8.15 (included) ,

PACSgear MediaWriter 5.2.1 exposes a .NET Remoting TCP service on port 9000 via PacsgearMediaServerEngine.dll, registere

PACSgear PACS Scan 5.2.1 contains an unauthenticated remote code execution vulnerability that allows remote attackers to

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia F

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia F

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulne

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulne

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia F

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia F

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiC

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia F

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation AbuseFilter. This vul

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulne

Deserialization of untrusted data vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated wi

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulne

Control Web Panel before 0.9.8.1225 contains a blind SQL injection vulnerability that allows unauthenticated remote atta

NVIDIA AIStore framework contains a vulnerability where an attacker could bypass authentication. A successful exploit of

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause a use-after-free issue. A

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause improper handling of highl

NVIDIA Container Toolkit for Linux contains a vulnerability where an attacker could cause a time-of-check time-of-use ra

NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper control of dynamically

NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper validation of allowed i

NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted dat

NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper control of code generat

NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted dat

NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper control of dynamically

NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted dat

NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted dat

NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted dat

NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause server-side request forgery. A s

NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted dat

Session fixation vulnerability in Wikimedia Foundation OAuth. This vulnerability is associated with program files src/

Improper input validation vulnerability in Wikimedia Foundation UrlShortener. This vulnerability is associated with pr

NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function

NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function

HTML::Gumbo versions before 0.19 for Perl disclose heap memory via type confusion. Support for the <template> element w

FatFs R0.16 and earlier contains a downstream-caller vulnerability pattern associated with FatFs long filename handling.

FatFs R0.16 and earlier contains a stack overflow bug in f_getlabel() because exFAT label length (XDIR_NumLabel) is trus

FatFs R0.16 and earlier contains an uninitialized cluster exposure when f_lseek() extends files beyond EOF without zero-

FatFs prior to R0.16 that use GPT scanning with 'FF_LBA64 = 1' contains an issue where an unbounded loop count derived f

FatFs R0.16 and earlier contains a divide-by-zero in exFAT sync logic bug when crafted metadata causes n_fatent - 2 to b

In FatFS R0.16 and earlier contains a FAT32 integer overflow bug in mount_volume() where fasize *= fs->n_fats can wrap,

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in DivvyDrive Informa

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in DivvyDrive Informa

A flaw was found in foreman. Authenticated users with 'view_keypairs' permission can bypass taxonomy scoping, allowing t