2026

Tor before 0.4.9.11 is prone to a race condition where in just the right circumstances a rendezvous point could man-in-t

Tor before 0.4.9.11 is prone to a use-after-free (and potential double free) of a conflux object when a recovery leg rev

Tor before 0.4.9.10 did not reject a CONFLUX_LINK cell that arrives on a circuit which already has attached streams. A m

Znuny before LTS 6.5.22 allows AgentTicketEmailResend template XSS.

Improper resource control in Linux Toolkit Theming in Google Chrome prior to 151.0.7922.173 allowed a remote attacker wh

Buffer overflow in Network in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code

Use after free in DOM in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code insid

Race condition in V8 in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside

Incorrect authorization in Workers in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had compromise

Privilege elevation in Import in Google Chrome prior to 151.0.7922.173 allowed a remote attacker leveraging social engin

Use after free in Chromoting in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary cod

Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in mtrudel bandit allows an unauthenticated r

Allocation of Resources Without Limits or Throttling vulnerability in mtrudel bandit allows an unauthenticated remote at

A flaw was found in the multicloud-operators-subscription component of Red Hat Advanced Cluster Management (RHACM). A te

Dockge validates a stack name only on the write path. In backend/stack.ts the allow-list check in validate(), which requ

Centrifugo is an open-source scalable real-time messaging server. Prior to 6.9.0, Centrifugo copies the client-controlle

libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, applications that define unus

libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, the old-style Radiance RLE de

libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, libvips built with libultrahd

libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, libvips built without libtiff

libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, a crafted many-band TIFF proc

DiceBear is an avatar library for designers and developers. Prior to 9.4.3, @dicebear/core interpolates the rotate optio

A flaw was found in the multicloud-operators-subscription component. This vulnerability allows a tenant, who has the abi

Mailpit is an email testing tool and API for developers. Prior to 1.30.4, Mailpit decodes attacker-supplied image attach

Mailpit is an email testing tool and API for developers. Prior to 1.30.4, Mailpit reads SMTP commands through internal/s

OTRS Community Edition contains an authenticated OS command injection vulnerability in the PGP encryption module that al

An issue in code100xDevs 100xdevs CMS v.1.0 (2026-04-30) allows a remote attacker to obtain sensitive information via th

A single crafted SSH message gives an unauthenticated network attacker an out-of-bounds stack write of attacker-controll

NoSleep 1.5.1 exposes a privileged XPC Mach service and accepts raw dictionary messages containing attacker-controlled c

Improper input validation in the Time Series Visual Builder (TSVB) plugin in OpenSearch Dashboards allows an authenticat

A security flaw has been discovered in lin-snow Ech0 up to 5.4.1. Affected by this issue is the function MD5Encrypt of t

Incorrect privilege assignment in the ClickHouse connector deployment template in Amazon Athena Federated Query prior to

The github-issue-bot templates in appwrite/templates verify the GitHub webhook signature with an inverted condition. ver

An unauthenticated attacker with network access to the captive portal service of an affected device can terminate active

A vulnerability was found in Comfast CF-N1-S 2.6.0.1. This impacts the function sub_44B50C of the file /cgi-bin/mbox-con

django CMS is an easy-to-use and developer-friendly enterprise content management system powered by Django. From 5.0.8 u

BunkerWeb is an open-source, next-generation Web Application Firewall. Prior to 1.6.13, the blacklist, greylist, and ant

msgpack_unpacker_expand_buffer in src/unpack.c, reached through the public msgpack_unpacker_reserve_buffer API, computes

hank-ai/darknet sizes a convolutional layer's weight and output heap buffers by multiplying configuration fields taken f

A flaw was found in Lighthouse. A remote attacker, by compromising a spoke cluster, can exploit a vulnerability where th

A flaw was found in the lighthouse component of Red Hat Advanced Cluster Management for Kubernetes. This vulnerability s

A flaw was found in Submariner. This vulnerability allows a malicious cluster (spoke) to redirect network traffic from o

Frappe is a full-stack web application framework. Prior to 15.115.0 and 16.27.0, the public request-data web form and Pe

Frappe is a full-stack web application framework. Prior to 15.114.0 and 16.26.0, the approve and authorize functions in

A malicious builder peer may be able to request an in-context file by name from the host and receive the contents of wha

Frappe is a full-stack web application framework. In version 16.31.0 and earlier, the whitelisted frappe.model.workflow.

django CMS is an easy-to-use and developer-friendly enterprise content management system powered by Django. Prior to 5.0

Frappe is a full-stack web application framework. In version 16.31.0 and earlier, frappe.client.set_value in frappe/clie

django CMS is an easy-to-use and developer-friendly enterprise content management system powered by Django. Prior to 5.0

django CMS is an easy-to-use and developer-friendly enterprise content management system powered by Django. Prior to 5.0