2026

pnpm is a package manager. Versions 10.26.2 and below store HTTP tarball dependencies (and git-hosted tarballs) in the l

Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resultin

The egg-mkfont utility in Panda3D versions up to and including 1.10.16 contains an uncontrolled format string vulnerabil

Bio-Formats versions up to and including 8.3.0 perform unsafe Java deserialization of attacker-controlled memoization ca

Bio-Formats versions up to and including 8.3.0 contain an XML External Entity (XXE) vulnerability in the Leica Microsyst

zlib versions up to and including 1.3.1.2 include a global buffer overflow in the untgz utility located under contrib/un

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of Internatio

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of Internatio

LibreChat is a ChatGPT clone with additional features. Version 0.8.1-rc2 does not enforce proper access control for file

An unused webshell in MicroServer allows unlimited login attempts, with sudo rights on certain files and directories. An

An unused function in MicroServer can start a reverse SSH connection to a vendor registered domain, without mutual authe

The Tarkov Data Manager is a tool to manage the Tarkov item data. Prior to commit 9bdb3a75a98a7047b6d70144eb1da1655d6992

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Wikimedia Foundation Med

@sylphxltd/filesystem-mcp v0.5.8 is an MCP server that provides file content reading functionality. Version 0.5.8 of fil

fast-filesystem-mcp version 3.4.0 contains a critical path traversal vulnerability in its file operation tools including

OpenAirInterface CN5G AMF<=v2.0.1 There is a logical error when processing JSON format requests. Unauthorized remote att

OpenAirInterface CN5G AMF<=v2.1.9 has a buffer overflow vulnerability in processing NAS messages. Unauthorized remote at

Incorrect Implementation of Authentication Algorithm vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP C

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themesgrove Widget

Origin validation error issue exists in Fujitsu Security Solution AuthConductor Client Basic V2 2.0.25.0 and earlier. If

The iPaymu Payment Gateway for WooCommerce plugin for WordPress is vulnerable to Missing Authentication in all versions

A flaw has been found in projectworlds House Rental and Property Listing 1.0. Impacted is an unknown function of the fil

Insufficient policy enforcement in WebView tag in Google Chrome prior to 143.0.7499.192 allowed an attacker who convince

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Frenify Arlo arlo

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Memory corruption occurs when a secure application is launched on a device with insufficient memory.

Memory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations.

Memory corruption when accessing resources in kernel driver.

Memory corruption while passing pages to DSP with an unaligned starting address.

Memory corruption while preprocessing IOCTLs in sensors.

Memory Corruption when multiple threads concurrently access and modify shared resources.

Memory corruption while processing identity credential operations in the trusted application.

Memory corruption while processing a secure logging command in the trusted application.

Cryptographic issue may occur while encrypting license data.

Memory corruption while processing a video session to set video parameters.

Memory corruption while deinitializing a HDCP session.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Digital zoom studi

Incorrect Privilege Assignment vulnerability in Dasinfomedia WPCHURCH allows Privilege Escalation.This issue affects WPC

A flaw has been found in TRENDnet TEW-811DRU 1.0.2.0. This affects the function setDeviceURL  of the file uapply.cgi of

The WP Enable WebP plugin for WordPress is vulnerable to arbitrary file uploads due to improper file type validation in

The WP Photo Album Plus plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘shortcode’ paramet

The Frontend File Manager Plugin WordPress plugin before 23.5 did not validate a path parameter and ownership of the fil

The Reviewify plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check

The Yoco Payments plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 3.9.0 via t

The Latest Registered Users plugin for WordPress is vulnerable to unauthorized user data export in all versions up to, a

The MoneySpace plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including

The User Activity Log plugin is vulnerable to a limited options update in versions up to, and including, 2.2. The failed