2026

Setracker2 Android Companion App com.tgelec.setracker versions 3.1.5 and prior have a predictable registration ID derive

FOSSBilling is a free, open-source billing and client management system. In versions 0.5.4 through 0.7.2, the /run-patch

A flaw was found in KubeVirt's downward metrics virtio-serial server. The server reads guest requests using textproto.Re

A server-side request forgery (SSRF) flaw was found in KubeVirt's virt-api port-forward handler. When processing a port-

A flaw was found in KubeVirt's virt-handler network cache handling. The WriteToCachedFile function writes data to a laun

A flaw was found in the Pen Drive report generator. Cluster-sourced data is rendered into HTML reports without proper es

A flaw was found in Apicurio Registry. The DocumentBuilderAccessor correctly blocks external DTD and schema access but d

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have a package import sign

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Path Tra

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have SQL Injection through

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have missing session_regen

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Open Red

wc_Blake2bHmacFinal and wc_Blake2sHmacFinal discard the message when the key length exceeds the block size, producing a

iPAddress name constraints bypass when WOLFSSL_IP_ALT_NAME is not defined. IP address name constraints are not enforced

PKCS7_verify signer confusion allows forged signatures, where the signer associated with a signature is not correctly bo

HMAC zero-length tag forgery in EVP_DigestVerifyFinal, where a zero-length tag could be accepted as valid during HMAC ve

The ML-KEM ARM64 NEON ciphertext comparison only compares half of the input, breaking the Fujisaki-Okamoto transform's i

PKCS#12 MAC verification uses an attacker-controlled comparison length, weakening the integrity check on the MAC and all

Out-of-bounds write in SetSuitesHashSigAlgo when processing an oversized signature algorithms list, allowing a write pas

When HAVE_ENCRYPT_THEN_MAC is configured, the implementation could fall back to MAC-then-Encrypt rather than enforcing E

TLS 1.3 post-handshake authentication (PHA) issue where a server could accept a client's Finished message without the cl

The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to

The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absenc

Charging station authentication identifiers are publicly accessible via web-based mapping platforms.

WebSocket endpoints lack proper authentication mechanisms, enabling attackers to impersonate charging stations. As a res

vtk vtk-dicom vtkDICOMItem::NewDataElement heap-based buffer overflow vulnerability

Use after free in AdFilter in Google Chrome on Android prior to 149.0.7827.201 allowed a remote attacker who convinced a

Use after free in Payments in Google Chrome on Android prior to 149.0.7827.201 allowed a local attacker to potentially e

Integer overflow in Mojo in Google Chrome prior to 149.0.7827.201 allowed a remote attacker who had compromised the rend

A flaw was found in Apicurio Registry. The WSDLReaderAccessor creates a wsdl4j WSDLReader without disabling the javax.ws

A flaw was found in Apicurio Registry. The ContentTypeUtil.isParsableXml() method creates a SAXParserFactory without ena

A flaw was found in Keycloak. This JWT algorithm confusion vulnerability in the JWT Authorization Grant flow allows an a

Missing SNI/ALPN binding on stateful (session-ID) resumption, which previously skipped the binding check performed for t

OCSP CertID serial-number length-confusion in wolfSSL_OCSP_resp_find_status allows a same-issuer SingleResponse whose se

picklescan through 0.0.26 fails to detect malicious pickle files that invoke idlelib.pyshell.ModifiedInterpreter.runcode

Flowise contains a path traversal vulnerability in the /api/v1/document-store/loader/process endpoint that allows unauth

Flowise before 3.0.6 (affected versions 2.2.7-patch.1 and earlier) contains an unsandboxed remote code execution vulnera

Flowise before 3.0.10 (affected versions 3.0.7 and earlier) fails to invalidate existing sessions and session tokens aft

Flowise before 3.0.6 (affected versions 2.2.8 and earlier) contains an arbitrary file access vulnerability due to missin

Flowise through 2.2.4 contains an unauthenticated arbitrary file upload vulnerability in the /api/v1/attachments endpoin

Flowise before 3.0.10 contains an unverified password change vulnerability. An authenticated user can change their accou

Flowise contains an authentication bypass vulnerability in the unprotected /api/v1/account/register endpoint that allows

Flowise before 3.0.6 contains an arbitrary file read vulnerability in the chatId parameter of the /api/v1/get-upload-fil

Parse Server before 4.10.0 was affected by a supply chain incident in which incorrect version tags were pushed to the of

Parse Server before 4.10.0 contains a supply chain vulnerability where incorrect version tags were pushed to the reposit

Grav before 1.6.30 contains a cross-site scripting vulnerability in the Admin plugin page editor default security config

X.509 name constraint bypass via the Subject Common Name when treated as a DNS-type name. A certificate whose Subject CN

The PKCS#7 decode path ignores the caller-supplied output buffer size (outputSz), allowing decoded content to be written

A heap buffer overflow could occur in the DTLS 1.3 ACK serialization path before the connecting peer is authenticated. T

Integer underflow in wc_PKCS7_DecryptOri when handling crafted Other Recipient Info, leading to incorrect length handlin