2026

A buffer overflow vulnerability has been reported to affect File Station 5. The remote attackers can then exploit the vu

A local privilege escalation vulnerability was found in the ansible.posix authorized_key module. The module's keyfile()

The Animation Addons for Elementor – GSAP Powered Elementor Addons & Website Templates plugin for WordPress is vulnerabl

A buffer overflow vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, t

A missing authorization vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vul

An incorrect authorization vulnerability has been reported to affect File Station 6. If a remote attacker gains a user a

An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 6. If a r

A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attack

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote

A NULL pointer dereference vulnerability has been reported to affect File Station 6. If a remote attacker gains a user a

A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attack

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. The remote

An integer overflow or wraparound vulnerability has been reported to affect several QNAP operating system versions. If a

A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attack

A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attack

A path traversal vulnerability has been reported to affect License Center. If a local attacker gains an administrator ac

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote

QuTS hero is not affected. We have already fixed the vulnerability in the following version: QTS 5.2.7.3256 build 20250

QTS, QuTS hero, QuTScloud are not affected. We have already fixed the vulnerability in the following version:

A cross-site request forgery (CSRF) vulnerability has been reported to affect Notification Center. The remote attackers

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.2.6, 5.3.5, 5.4.4, 5.5.3, and 6.0

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.2.6, 5.3.5, 5.4.4, 5.5.4, and 6.0

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.2.6, 5.3.5, 5.4.4, 5.5.4, and 6.0

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.4 and 6.0, several ESP-TEE secu

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.4 and 6.0, the esp_tee componen

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.2.7, 5.3.5, 5.4.4, 5.5.4, and 6.0

Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version

SimpleBLE is a cross-platform library and bindings for Bluetooth Low Energy (BLE). Prior to version 0.14.0, there are mu

BuddyPress 14.4.0 contains an insecure direct object reference vulnerability in the friends REST API that allows any aut

BuddyPress 14.4.0 contains a regular expression injection vulnerability in the activity mention resolver that, when user

BuddyPress 14.4.0 contains an insecure direct object reference vulnerability in the messages REST API that allows authen

SubjectDnX509PrincipalExtractor does not correctly handle certain malformed X.509 certificate CN values, which can lead

Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to

Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to

Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to

Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to

Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to

Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to versio

LMDeploy is a toolkit for compressing, deploying, and serving large language models. In versions 0.12.3 and prior, hardc

SimpleSAMLphp-casserver is a CAS 1.0 and 2.0 compliant CAS server in the form of a SimpleSAMLphp module. Prior to versio

LMDeploy is a toolkit for compressing, deploying, and serving large language models. In versions 0.12.3 and prior, LMDep

FlashMQ is a MQTT broker/server, designed for multi-CPU environments. Prior to version 1.26.2, authorized clients have t

Cloud Hypervisor is a Virtual Machine Monitor for Cloud workloads. From version 21.0 to before version 51.2, a guest can

Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents. From versi

Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. network-

Spring Data REST's Querydsl integration accepts arbitrary persistent property paths as request-parameter filter keys and

JsonPulsarHeaderMapper matched type headers against trusted packages using a prefix check, meaning that trusting any pac

JsonKafkaHeaderMapper and the deprecated DefaultKafkaHeaderMapper matched type headers against trusted packages using a