2026

A Improper Authorization vulnerability in Foomuuri llows arbitrary users to influence the firewall configuration.This is

An External Control of File Name or Path vulnerability in smb4k allowsl ocal users to perform a local root exploit via s

An Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability allows local users

Asseco ADMX system is used for processing medical records. It allows logged in users to access medical files belonging t

Asseco InfoMedica is a comprehensive solution used to manage both administrative and medical tasks in the healthcare sec

Asseco InfoMedica is a comprehensive solution used to manage both administrative and medical tasks in the healthcare sec

A vulnerability in the handling of verify_mode = CERT_REQUIRED in the wolfssl Python package (wolfssl-py) causes client

OpenLDAP Lightning Memory-Mapped Database (LMDB) versions up to and including 0.9.14, prior to commit 8e1fda8, contain a

As the service interaction is performed without authentication, an attacker with some knowledge of the protocol could ob

An attacker with a network connection could detect credentials in clear text.

The credentials required to access the device's web server are sent in base64 within the HTTP headers. Since base64 is n

The lack of hardening of the system allows the user used to manage and maintain the charger to consult different files c

The absence of permissions control for the user XXX allows the current configuration in the sudoers file to escalate pri

An attacker with the ability to interact through the network and with access credentials, could, thanks to the unsecured

An attacker with access to the system's internal network can cause a denial of service on the system by making two concu

The massive sending of ICMP requests causes a denial of service on one of the boards from the EVCharger that allows cont

The massive sending of ARP requests causes a denial of service on one board of the charger that allows control of the EV

Kieback&Peter Neutrino-GLT product is used for building management. It's web component "SM70 PHWEB" is vulnerable to she

OpenFlagr versions prior to and including 1.1.18 contain an authentication bypass vulnerability in the HTTP middleware.

Microsoft Playwright MCP Server versions prior to 0.0.40 fails to validate the Origin header on incoming connections. Th

AuntyFey Smart Combination Lock firmware versions as of 2025-12-24 contain a vulnerability that allows an unauthenticate

Multiple D-Link DSL/DIR/DNS devices contain an authentication bypass and improper access control vulnerability in the dn

An integer underflow vulnerability in the Silicon Labs Z-Wave Protocol Controller can lead to out of bounds memory reads

In the Linux kernel, the following vulnerability has been resolved: irqchip/mchp-eic: Fix error code in mchp_eic_domain

In the Linux kernel, the following vulnerability has been resolved: mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_st

In the Linux kernel, the following vulnerability has been resolved: crypto: starfive - Correctly handle return of sg_ne

In the Linux kernel, the following vulnerability has been resolved: net: netpoll: initialize work queue before error ch

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix potential out-of-bounds read in iomm

In the Linux kernel, the following vulnerability has been resolved: wifi: rtl818x: Fix potential memory leaks in rtl818

In the Linux kernel, the following vulnerability has been resolved: backlight: led-bl: Add devlink to supplier LEDs LE

In the Linux kernel, the following vulnerability has been resolved: drm/vgem-fence: Fix potential deadlock on release

In the Linux kernel, the following vulnerability has been resolved: block: Use RCU in blk_mq_[un]quiesce_tagset() inste

In the Linux kernel, the following vulnerability has been resolved: staging: most: remove broken i2c driver The MOST I

In the Linux kernel, the following vulnerability has been resolved: rtc: amlogic-a4: fix double free caused by devm Th

In the Linux kernel, the following vulnerability has been resolved: iavf: Implement settime64 with -EOPNOTSUPP ptp_clo

In the Linux kernel, the following vulnerability has been resolved: s390/fpu: Fix false-positive kmsan report in fpu_vs

Action captions in Vaadin accept HTML by default but were not sanitized, potentially allowing Cross-site Scripting (XSS)

A vulnerability in Nuvation Energy nCloud VPN Service allowed Network Boundary Bridging.This issue affected the nCloud V

A vulnerability in Nuvation Battery Management System allows Authentication Bypass.This issue affects Battery Management

AdonisJS is a TypeScript-first web framework. A Path Traversal vulnerability in AdonisJS multipart file handling may all

An SQL injection vulnerability has been reported to affect MARS (Multi-Application Recovery Service). The remote attacke

A path traversal vulnerability has been reported to affect several product versions. If a local attacker gains a user ac