Vulners Software Audit

Query the Vulners Software Audit API for known vulnerabilities matching one or more software products/versions CPE string or vendor:product:version. Bring-your-own-key BYOK: set apikey, plugin config, or VULNERSAPIKEY. Prefer plugin run vulners … as the hub; this scanner is a thin wrapper...

CVE-2026-115340

Progress Software WSFTP Server versions prior to 2025.0.5 on Windows may write sensitive user credential and session data to a temporary file during file transfer operations...

CVE-2026-115339

Insufficient resource limits in Progress Software WSFTP Server releases prior to 2025.0.5 on Windows could allow an unauthenticated remote attacker to cause denial of service...

CVE-2026-115340

Progress Software WS_FTP Server versions prior to 2025.0.5 on Windows are vulnerable to a flaw where the application may write sensitive user credential and session data to a temporary file during file transfer operations. Remediation is available via the WS_FTP Server Service Pack November 2026 ...

CVE-2026-115339

Progress Software WS_FTP Server releases prior to version 2025.0.5 on Windows are susceptible to a denial of service (DoS) . This vulnerability is caused by insufficient resource limits , which may allow an unauthenticated remote attacker to exploit the system. Remediation is available via the WS...

CVE-2026-115336

Progress Software WS_FTP Server releases prior to 2025.0.5 on Windows are affected by an incorrect quota accounting vulnerability. This issue allows an authenticated user with upload and delete permissions to bypass storage quotas, potentially leading to a denial of service . Remediation is avail...

CVE-2026-115336

Incorrect quota accounting in Progress Software WSFTP Server releases prior to 2025.0.5 on Windows could allow an authenticated user with upload and delete permissions to exceed storage quotas, potentially causing denial of service...

CVE-2026-104989

Uncontrolled search path element in package upload feature in Chaos Software V-Ray versions through 2.0.19 allows remote unauthenticated attackers to execute arbitrary code via redirecting access to libraries...

CVE-2026-104989

Chaos Software V-Ray versions through 2.0.19 are vulnerable to an uncontrolled search path element in the package upload feature. This flaw allows remote unauthenticated attackers to achieve arbitrary code execution by redirecting access to libraries. No specific exploit information or remediatio...

EUVD-2026-120119

Uncontrolled search path element in package upload feature in Chaos Software V-Ray versions through 2.0.19 allows remote unauthenticated attackers to execute arbitrary code via redirecting access to libraries...

EUVD-2026-120114

Progress Software WSFTP Server versions prior to 2025.0.5 on Windows may write sensitive user credential and session data to a temporary file during file transfer operations...

EUVD-2026-120113

Insufficient resource limits in Progress Software WSFTP Server releases prior to 2025.0.5 on Windows could allow an unauthenticated remote attacker to cause denial of service...

EUVD-2026-120110

Incorrect quota accounting in Progress Software WSFTP Server releases prior to 2025.0.5 on Windows could allow an authenticated user with upload and delete permissions to exceed storage quotas, potentially causing denial of service...

Centralized Printer MFP Supervision Unauthorized Access

The vulnerability of the software for centralized printer control and the Printsupervision printer system is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...

gps-sdr-sim

GPS-SDR-SIM GPS-SDR-SIM generates GPS baseband signal data streams, which can be converted to RF using software-defined radio SDR platforms, such as ADALM-Pluto, bladeRF, HackRF, and USRP. Windows build instructions 1. Start Visual Studio. 2. Create an empty project for a console application. 3. ...

CVE-2026-95778

A remote code execution vulnerability exists in HPE Morpheus Software (specifically VM Essentials HPE VME versions 9.0 > 9.0.2). The vulnerability allows for potential code execution from a remote source with a base CVSS score of 8.8. Remediation is available through software updates; users sh...

CVE-2026-95778

A remote code execution vulnerability exists in HPE Morpheus Software...

EUVD-2026-120063

A remote code execution vulnerability exists in HPE Morpheus Software...

CVE-2026-118791

The application implements a software update functionality that lacks adequate authenticity and integrity validation . This allows for the acceptance of update packages without sufficient cryptographic verification . References suggest this affects products from Compugroup Medical . No specific e...

EUVD-2026-120030

The application implements software update functionality without adequate authenticity and integrity validation, allowing update packages to be accepted without sufficient cryptographic verification...