Open Automation Software OAS Platform V16.00.0121 - Missing Authentication

An improper authentication vulnerability exists in the REST API functionality of Open Automation Software OAS Platform V16.00.0121. A specially-crafted series of HTTP requests can lead to unauthenticated use of the REST API. An attacker can send a series of HTTP requests to trigger this...

Oracle Java SE 2D DoS

The vulnerability of the Oracle Java SE 2D software platform, as well as the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

.NET Visual Studio Code HTTP Request Disclosure

The vulnerability of the .NET software platform and the code editor Visual Studio Code is related to deficiencies in HTTP request processing. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

CVE-2026-25278

CVE-2026-25278 is a TOCTOU race condition in Qualcomm's automotive software platform based on QNX . The vulnerability occurs during I2C transfer request processing , where a race between memory allocation and data copying leads to memory corruption . The CVSS v3.1 score is 7.8 (High) with a local...

ROS-20260817-73-0003

The vulnerability of the Microsoft .NET Framework software platform is related to a violation of data protection mechanisms. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

ROS-20260817-73-0019

The vulnerability of the Microsoft .NET software platform and the code editor Visual Studio Code is related to errors in handling symbolic links. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CVE-2026-0515 Insufficient parameter validation in the QNX Neutrino kernel impacts versions of the QNX Software Development Platform and QNX OS for Safety

Insufficient Parameter Validation in the SchedGet system call could allow an attacker with local access to cause a crash of the QNX Neutrino kernel...

DeepCool DeepCreative security vulnerability

DeepCool DeepCreative is a creative design and control software platform for the hardware ecosystem developed by DeepCool Corporation in China. Versions of DeepCool DeepCreative prior to 1.2.7 contained security vulnerabilities. These vulnerabilities were caused by improper permission settings,...

CVE-2026-31262: Exposure of Sensitive Information to an Unauthorized Actor

Cross Site Scripting vulnerability in Altenar Sportsbook Software Platform SB2 v.2.0 allows a remote attacker to obtain sensitive information and execute arbitrary code via the URL parameter...

PT-2026-6523

EVE: SSH as Root Unlockable Without Triggering Measured Boot in github.com/lf-edge/eve...

ABB 800xA Automation System Input Validation DoS

The vulnerability of the integrated ABB 800xA automation system, the Control Builder Safe development environment for secure applications, the Base Software software platform for programmable logic controllers, and the Compact Product Suite, which includes integrated hardware and software product...

Microsoft .NET Buffer Overflow DoS

The vulnerability of the Microsoft .NET software platform is related to overflow in the dynamic memory buffers. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...

RLSA-2025:8468 Important: nodejs:20 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: nodejs: Remote Crash via SignTraits::DeriveBits in Node.js CVE-2025-23166 For more details about the security issues, including the impact, a CVSS...

Bizerba BRAIN2 security vulnerability

Bizerba BRAIN2 is an industrial software platform from Bizerba, Germany. A security vulnerability exists in Bizerba BRAIN2 that originates from the possibility that a non-administrative user may perform privileged operations via report scripts...

CVE-2021-38410

AVEVA Software Platform Common Services PCS Portal versions 4.5.2, 4.5.1, 4.5.0, and 4.4.6 are vulnerable to DLL hijacking through an uncontrolled search path element, which may allow an attacker control to one or more locations in the search path...

GO-2025-3584 go.rgst.io/stencil/v2 vulnerable to Path Traversal

go.rgst.io/stencil/v2 vulnerable to Path Traversal...

Microsoft .NET Buffer Overflow

The vulnerability of the Microsoft .NET software platform and the Microsoft Visual Studio development environment is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Microsoft .NET Buffer Overflow

The vulnerability of the Microsoft .NET software platform and the Microsoft Visual Studio development environment is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

QNX Software Development Platform security vulnerabilities

The Blackberry QNX Software Development Platform is a suite of QNX software development platforms from Blackberry Canada. The platform is primarily used to develop software based on the QNX platform. A security vulnerability exists in QNX Software Development Platform SDP versions 8.0, 7.1, and...

QNX Software Development Platform Buffer Error Vulnerability

The Blackberry QNX Software Development Platform is a suite of QNX software development platforms from Blackberry Canada. The platform is primarily used to develop software based on the QNX platform. A buffer error vulnerability exists in QNX Software Development Platform versions 8.0, 7.1, and 7...