2026

Integer Overflow or Wraparound vulnerability in RawTherapee (rtengine modules). This vulnerability is associated with pr

Improper Verification of Cryptographic Signature vulnerability in liuyueyi quick-media (plugins/svg-plugin/batik-codec-f

Improper Control of Generation of Code ('Code Injection') vulnerability in liuyueyi quick-media (plugins/svg-plugin/bati

NULL Pointer Dereference vulnerability in visualfc liteide (liteidex/src/3rdparty/libvterm/src modules). This vulnerabil

Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in coolsnowwolf lede (package/lean/mt/drivers/mt760

Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in coolsnowwolf lede (package/lean/mt/drivers/mt761

Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in briandilley jsonrpc4j (src/main/java/com/googlec

Vulnerability in Ralim IronOS (source/Core/BSP/Pinecilv2/bl_mcu_sdk/components/ble/ble_stack/common/tinycrypt/source mod

Out-of-bounds Write, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in tildearrow

Out-of-bounds Write, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in davisking d

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in GaijinEntertainment DagorEngine

Out-of-bounds Write vulnerability in neka-nat cupoch (third_party/libjpeg-turbo/libjpeg-turbo modules). This vulnerabili

Out-of-bounds Read vulnerability in CloverHackyColor CloverBootloader (MdeModulePkg/Universal/RegularExpressionDxe/Onigu

Out-of-bounds Write vulnerability in CloverHackyColor CloverBootloader (MdeModulePkg/Universal/RegularExpressionDxe/Onig

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in CardboardPowered cardboard (src

Multiple Buffer Overflows in Admin UI of EZCast Pro II version 1.17478.146 allow attackers to cause a program crash and

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in anyrtcIO-Community anyRTC-RTMP-

Integer Overflow or Wraparound vulnerability in MuntashirAkon AppManager (app/src/main/java/org/apache/commons/compress/

QGIS is a free, open source, cross platform geographical information system (GIS) The repository contains a GitHub Actio

DLL hijacking in the WD Discovery Installer in Western Digital WD Discovery 5.2.730 on Windows allows a local attacker t

dcap-qvl implements the quote verification logic for DCAP (Data Center Attestation Primitives). A vulnerability present

Crucial Storage Executive installer versions prior to 11.08.082025.00 contain a DLL preloading vulnerability. During ins

The dormakaba registration units 9002 (PIN Pad Units) have an exposed UART header on the backside. The PIN pad is sendin

By default, the password for the Access Manager's web interface, is set to 'admin'. In the tested version changing the p

Dormakaba provides the software FWServiceTool to update the firmware version of the Access Managers via the network. The

With physical access to the device and enough time an attacker can desolder the flash memory, modify it and then reinsta

With physical access to the device and enough time an attacker is able to solder test leads to the debug footprint (or u

The Access Manager 92xx in hardware revision K7 is based on Linux instead of Windows CE embedded in older hardware revis

The web server of the Access Manager offers a functionality to download a backup of the local database stored on the dev

Instead of typical session tokens or cookies, it is verified on a per-request basis if the originating IP address has on

The web interface offers a functionality to export the internal SQLite database. After executing the database export, an

The Access Manager is using the open source web server CompactWebServer written in C#. This web server is affected by a

The Access Manager is offering a trace functionality to debug errors and issues with the device. The trace functionality

The exos 9300 application can be used to configure Access Managers (e.g. 92xx, 9230 and 9290). The configuration is done

The default password for the extended admin user mode in the application U9ExosAdmin.exe ("Kaba 9300 Administration") is

The program libraries (DLL) and binaries used by exos 9300 contain multiple hard-coded secrets. One notable example is t

A local privilege escalation vulnerability has been identified in the Kaba exos 9300 System management application (d9sy

Exos 9300 instances are using a randomly generated database password to connect to the configured MSSQL server. The pass

An RPC service, which is part of exos 9300, is reachable on port 4000, run by the process FSMobilePhoneInterface.exe. Th

Multiple hardcoded credentials have been identified, which are allowed to sign-in to the exos 9300 datapoint server runn

On the exos 9300 server, a SOAP API is reachable on port 8002. This API does not require any authentication prior to sen

Vulnerability in Altitude Authentication Service and Altitude Communication Server v8.5.3290.0 by Altitude, where manipu

Illegal HTTP request traffic vulnerability (CL.0) in Altitude Communication Server, caused by inconsistent analysis of m

Dioxus Components is a shadcn-style component library for the Dioxus app framework. Prior to commit 41e4242ecb1062d04ae4

The email module, specifically the "BytesGenerator" class, didn’t properly quote newlines for email headers when seria

An Authorization Bypass Through User-Controlled Key vulnerability in Hubitat Elevation home automation controllers prior

A low-privileged user can bypass account credentials without confirming the user's current authentication state, which m

The web application does not sufficiently verify inputs that are assumed to be immutable but are actually externally con

VB-Audio Voicemeeter, Voicemeeter Banana, and Voicemeeter Potato (versions ending in 1.1.1.9, 2.1.1.9, and 3.1.1.9 and e

VB-Audio Matrix and Matrix Coconut (versions ending in 1.0.2.2 and 2.0.2.2 and earlier, respectively), contain a local p