2026

Eppendorf BioFlo 320 is vulnerable due to VNC server using a hard-coded password. If a remote attacker knows the network

FastNetMon Community Edition through 1.2.9 has a buffer overflow, a different vulnerability than CVE-2026-48686 and CVE-

FastNetMon Community Edition through 1.2.9 contains an OS command injection vulnerability in the MikroTik router integra

FastNetMon Community Edition through 1.2.9 contains a configuration injection vulnerability in the Juniper router integr

Kavita is a cross platform reading server. Prior to 0.9.0.2, an Improper Token validation flaw permits a remote and unau

Twenty is an open source CRM. From 1.7.7 through 1.16.7, a critical Remote Code Execution (RCE) vulnerability exists in

Kavita is a cross platform reading server. Prior to 0.9.0, the download, size-check, and chapter metadata endpoints do n

Kavita is a cross platform reading server. Prior to 0.9.0, the ReaderController.GetImage endpoint is decorated with [All

The SAP Gateway allows attackers to inject content into error messages, potentially leading to disclosure of request art

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 6.9.7, an

Babel is a compiler for writing next generation JavaScript. From 7.12.0 to before 7.29.4 and 8.0.0-alpha.13, using Babel

Chatwoot is a customer engagement suite. From 2.14.0 to before 4.13.0, a Pre-Account Takeover (Pre-ATO) vulnerability ex

Chatwoot is a customer engagement suite. From 2.2.0 to before 4.11.2, a SQL injection vulnerability exists in the conver

FACTION is a PenTesting Report Generation and Collaboration Framework. Prior to 1.8.3, Faction is vulnerable to stored c

FACTION is a PenTesting Report Generation and Collaboration Framework. Prior to 1.8.3, AccessControlInterceptor, the aut

FACTION is a PenTesting Report Generation and Collaboration Framework. Prior to 1.8.3, Faction is vulnerable to stored c

Magic Wormhole makes it possible to get arbitrary-sized files and directories from one computer to another. Prior to 0.2

nuts-node is the reference implementation of the Nuts specification. Prior to 6.2.3 and 5.4.31, the v1 access token intr

NVIDIA vGPU software contains a vulnerability in the virtual GPU manager, where an attacker could cause an out-of-bound

NVIDIA vGPU software contains a vulnerability in the virtual GPU manager, where an attacker could cause a use-after-free

NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where a user could cause a race condition b

NVIDIA GPU Display Driver for Linux contains a vulnerability where an advanced attacker could use a race condition to l

NVIDIA Display Driver for Linux contains a vulnerability in the Multi-Instance GPU (MIG) partition management, where an

NVIDIA Display Driver for Linux contains a vulnerability where a user could cause an out-of-bounds read. A successful ex

NVIDIA Display Driver for Linux contains a vulnerability in UVM, where a user could cause improper input validation. A s

NVIDIA Display Driver for Linux contains a vulnerability in a kernel mode layer handler, where a user could cause improp

NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out-of-bounds writ

NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause an incorrect conversion between n

NVIDIA Display Driver for Windows contains a vulnerability where an attacker could cause a time-of-check time-of-use iss

NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause

NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free. A successful ex

NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could leak held driver locks. A s

NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel driver, where a user could cause an i

A vulnerability was determined in haojing8312 WorkClaw up to 0.6.4. This affects the function is_dangerous of the file a

A vulnerability was found in SourceCodester/oretnom23 Hospitals Patient Records Management System 1.0. The impacted elem

A vulnerability has been found in sambitraj STUDENT-MANAGEMENT-SYSTEM up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. Th

IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module mod_fastcgi module.

IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module mod_ibm_upload.

Lack of input filtering leads to an XSS vector in the HTML filter code.

An improper access check allows privelege escalation through the com_users group editing webservice endpoint.

Inadequate content filtering within the checkAttribute methods leads to XSS vulnerabilities in various components.

The password and username reset features created plain http links for https connections if the "Force SSL" flag wasn't e

The InputFilter::getInstance() method omitted a security sensitive parameter from the instance cache key.

An improper access check allowed low privileged users to edit the task types of existing scheduler tasks.

An improper access check allows privilege escalation through the com_users batch task.

An improper access check allows privilege escalation through the com_users batch task.

Insufficient state checks lead to a vector that allows to bypass 2FA checks.

Insufficient state checks lead to a vector that allows to bypass 2FA checks.

A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed

FastNetMon Community Edition through 1.2.9 does not verify TLS certificates on outbound HTTPS connections. The execute_w