2935293 matches found
CVE-2026-52098
An issue in Flowise 3.1.2 allows a remote attacker to execute arbitrary code via the /api/v1/prediction/ endpoint...
CVE-2026-88048
Tesseract is an open source OCR engine. In version 5.5.3 and earlier, FullyConnected::DeSerialize in src/lstm/fullyconnected.cpp does not validate the deserialized layer scalars ni and no against the weight-matrix dimensions. During FullyConnected::Forward, MatrixDotVector in...
UBUNTU-CVE-2026-88050
Tesseract is an open source OCR engine. In version 5.5.3 and earlier, RecodedCharID::DeSerialize in src/ccutil/unicharcompress.h validates length but accepts negative code values from a crafted .traineddata recoder component. UnicharCompress::ComputeCodeRange in src/ccutil/unicharcompress.cpp can...
CVE-2026-87994
creationtimestamp| type| source ---|---|--- 2026-09-10 16:35:10+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-fmqh-xp37-5hr8...
CVE-2026-88014
rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.72.0 until 1.75.1, the archive ZIP backend method Fs.readZip in backend/archive/zip/zip.go accepts archive/zip.File.Name values from an untrusted central directory and exposes...
CVE-2026-81052
Dell ThinOS 10, versions prior to 260510.2616, contain a Download of Code Without Integrity Check vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to arbitrary code execution...
CVE-2022-26xx9
CVE-2022-26xx9 CVE-2022-26xx9...
CVE-2026-73787
creationtimestamp| type| source ---|---|--- 2026-09-10 16:10:21+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mv6gu7okxp2f...
CVE-2026-84819
Unauthenticated Cross Site Scripting XSS in WPAdverts = 2.3.3 versions...
CVE-2026-81791
Subscriber Cross Site Scripting XSS in EventON = 2.5.7 versions...
UBUNTU-CVE-2026-45747
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.16, the Lua TLS certificate information helper could dereference NULL certificate fields when a Lua script requested certificate information for TLS traffic...
CVE-2026-84373 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, langfuse-fips, vitess, homepage, langfuse, gitlab-rails-ce...
GHSA-82FW-GWWQ-J7X9 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, langfuse-fips, vitess, homepage, langfuse, gitlab-rails-ce...
EUVD-2026-75512
Unauthenticated Bypass Vulnerability in Simple Cloudflare Turnstile = 1.42.1 versions...
CVE-2026-88871
WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 master, 2026-08-23 contains a cross-site request forgery vulnerability in the CustomizeUser plugin's plugin/CustomizeUser/setSubscribers.json.php endpoint. The script reads usersid and ExtraSubscribers from $REQUEST and calls...
CVE-2026-12682
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Ankaref Innovation and Technology Inc. LIBRID/LIBREF allows Stored XSS. This issue affects LIBRID/LIBREF: from 2.01.0.2183 before 18.9.26.2319...
WordPress WPMK Block plugin <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zakaria in WordPress Plugin WPMK Block versions = 1.0.1...
ROOT-OS-ALPINE-318-CVE-2025-29087 CVE-2025-29087 in sqlite - Patched by Root
Root has patched CVE-2025-29087 in the sqlite package for Root:Alpine:3.18. Multiple fixed versions available...