2026

Vexa is an open-source, self-hostable meeting bot API and meeting transcription API. Prior to 0.10.0-260419-1910, the Ve

Vexa is an open-source, self-hostable meeting bot API and meeting transcription API. Prior to 0.10.0-260419-1910, the Ve

OpenAEV is an open source platform allowing organizations to plan, schedule and conduct cyber adversary simulation campa

OpenAEV is an open source platform allowing organizations to plan, schedule and conduct cyber adversary simulation campa

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5,

A vulnerability was determined in Qibo CMS 1.0. Affected by this issue is some unknown functionality of the file /index/

An improper access control vulnerability in the canonical-livepatch snap client prior to version 10.15.0 allows a local

SGLang's reranking endpoint (/v1/rerank) achieves Remote Code Execution (RCE) when a model file containing a malcious to

OS Command Injection Remote Code Execution Vulnerability in UI in Progress ADC Products allows an authenticated attacker

OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacke

OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacke

OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacke

Information exposure vulnerability has been identified in Apache Kafka. The NetworkClient component will output entire

A possible security vulnerability has been identified in Apache Kafka. By default, the broker property `sasl.oauthbeare

Apache Doris MCP Server versions earlier than 0.6.1 are affected by an improper neutralization flaw in query context han

A vulnerability was found in Qibo CMS 1.0. Affected by this vulnerability is an unknown functionality of the component I

A vulnerability was detected in p2r3 convert up to 6998584ace3e11db66dff0b423612a5cf91de75b. Affected is the function Bu

A security vulnerability has been detected in rowboatlabs rowboat up to 0.1.67. This impacts the function tool_call of t

A weakness has been identified in usememos memos up to 0.22.1. This affects the function memos_access_token of the file

A security flaw has been discovered in Yifang CMS up to 2.0.5. The impacted element is the function store of the file pl

When sed is invoked with both -i (in-place edit) and --follow-symlinks, the function open_next_file() performs two separ

Double-Free / Use-After-Free (UAF) in the `IntoIter::drop` and `ThinVec::clear` functions in the thin_vec crate. A panic

A vulnerability was identified in Tenda F451 1.0.0.7_cn_svn7958. The affected element is the function fromSafeClientFilt

A vulnerability was determined in Tenda F451 1.0.0.7_cn_svn7958. Impacted is the function fromwebExcptypemanFilter of th

A vulnerability was found in Tenda F451 1.0.0.7_cn_svn7958. This issue affects the function fromGstDhcpSetSer of the fil

A vulnerability has been found in Metasoft 美特软件 MetaCRM up to 6.4.0. This vulnerability affects the function Statement.e

A flaw has been found in phili67 Ecclesia CRM up to 8.0.0. This affects the function ValidateInput of the file /v2/query

A vulnerability was detected in Cockpit-HQ Cockpit up to 2.13.5. Affected by this issue is some unknown functionality of

A security vulnerability has been detected in moxi624 Mogu Blog v2 up to 5.2. Affected by this vulnerability is the func

A weakness has been identified in BichitroGan ISP Billing Software 2025.3.20. Affected is an unknown function of the fil

A security flaw has been discovered in BichitroGan ISP Billing Software 2025.3.20. This impacts an unknown function of t

A vulnerability was identified in BichitroGan ISP Billing Software 2025.3.20. This affects an unknown function of the fi

In the Linux kernel, the following vulnerability has been resolved: X.509: Fix out-of-bounds access when parsing extens

In the Linux kernel, the following vulnerability has been resolved: net: skb: fix cross-cache free of KFENCE-allocated

Fudo Enterprise in versions from 5.5.0 through 5.6.2 allows low privileged users to access certain administrator-only re

A vulnerability was determined in 1024bit extend-deep up to 0.1.6. The impacted element is an unknown function of the fi

A vulnerability was found in SonicCloudOrg sonic-server up to 2.0.0. The affected element is the function Upload of the

A vulnerability has been found in langgenius dify up to 1.13.3. Impacted is the function openInNewTab of the file web/ap

A flaw has been found in langgenius dify up to 1.13.3. This issue affects the function parse_openai_plugin_json_to_tool_

ThreatSonar Anti-Ransomware developed by TeamT5 has an Privilege Escalation vulnerability. Authenticated remote attacker

SKYSEA Client View and SKYMEC IT Manager provided by Sky Co.,LTD. configure the installation folder with improper file a

A vulnerability was detected in langgenius dify up to 0.6.9. This vulnerability affects the function get_api_tool_provid

A security vulnerability has been detected in TransformerOptimus SuperAGI up to 0.0.14. This affects the function extrac

A weakness has been identified in TransformerOptimus SuperAGI up to 0.0.14. Affected by this issue is the function Uploa

ThreatSonar Anti-Ransomware developed by TeamT5 has an Arbitrary File Deletion vulnerability. Authenticated remote attac

EasyFlow .NET developed by Digiwin has a SQL Injection vulnerability, allowing unauthenticated remote attackers to injec

EasyFlow .NET developed by Digiwin has a SQL Injection vulnerability, allowing unauthenticated remote attackers to injec

ProjectDiscovery Nuclei 3 before 3.8.0 allows DSL expression injection. This affects use of -env-vars for multi-step tem

A command injection vulnerability was found in the PPTP VPN Clients on the ADM. The vulnerability allows an administrati

A stack-based buffer overflow vulnerability was found in the VPN Clients on the ADM. The issue stems from the use of unb