2436 matches found
WordPress: undisclosed vulnerability (ZAI-2026-F0YIO5)
Not disclosed. Details are not yet publicly disclosed...
Beyond Compare: undisclosed vulnerability (ZAI-2026-2FCVKK)
Not disclosed. Details are not yet publicly disclosed...
Frappe Google OAuth state is client-controllable, enabling redirects and authorization-flow abuse
Frappe Google OAuth State Is Client-Controllable, Enabling Redirects and Authorization-Flow Abuse Vulnerability Overview The Google integrations in Frappe Framework Gmail/Calendar/Drive, etc. share a unified OAuth authorization entry point and callback handler. Before the fix, the authorization...
Seafile server-controlled sync path can escape the client worktree (macOS/Linux)
Seafile server-controlled sync path can escape the client worktree macOS/Linux Vulnerability Overview The Seafile client's sync module applies file diffs delivered by the server during the checkout phase, and the target path of rename operations is fully controlled by the server. The validity che...
WeKan expired impersonation records bypass private board export authorization (ImpersonateBleed)
WeKan Expired Impersonation Records Bypass Private Board Export Authorization ImpersonateBleed Vulnerability Overview WeKan administrators can use the impersonation feature to operate as other users, and the system records every impersonation action. The flaw is this: in addition to the normal...
Nacos: undisclosed vulnerability (ZAI-2026-HAFEU3)
Not disclosed. Details are not yet publicly disclosed...
wolfSSL: undisclosed vulnerability (ZAI-2026-95ZYA4)
Not disclosed. Details are not yet publicly disclosed...
wget2: undisclosed vulnerability (ZAI-2026-EXL6WR)
Not disclosed. Details are not yet publicly disclosed...
OpenBSD: undisclosed vulnerability (ZAI-2026-IM0KO2)
Not disclosed. Details are not yet publicly disclosed...
lwIP: undisclosed vulnerability (ZAI-2026-7FCWBF)
Not disclosed. Details are not yet publicly disclosed...
wget2: undisclosed vulnerability (ZAI-2026-SY1D2L)
Not disclosed. Details are not yet publicly disclosed...
GStreamer: undisclosed vulnerability (ZAI-2026-OIPTPJ)
Not disclosed. Details are not yet publicly disclosed...
lwIP: undisclosed vulnerability (ZAI-2026-O3JX0Y)
Not disclosed. Details are not yet publicly disclosed...
wget2: undisclosed vulnerability (ZAI-2026-PWEC79)
Not disclosed. Details are not yet publicly disclosed...
Linux: undisclosed vulnerability (ZAI-2026-PT3XIF)
Not disclosed. Details are not yet publicly disclosed...
OpenBSD: undisclosed vulnerability (ZAI-2026-NTYFDY)
Not disclosed. Details are not yet publicly disclosed...
Kubernetes: undisclosed vulnerability (ZAI-2026-BJK0C7)
Not disclosed. Details are not yet publicly disclosed...
Zoom Workplace: undisclosed vulnerability (ZAI-2026-2LQZ84)
Not disclosed. Details are not yet publicly disclosed...
Intel Integrated Performance Primitives: undisclosed vulnerability (ZAI-2026-DVOTYV)
Not disclosed. Details are not yet publicly disclosed...
Oracle Real Application Clusters DB Home: undisclosed vulnerability (ZAI-2026-BNPM81)
Not disclosed. Details are not yet publicly disclosed...
WeKan /metrics unconditionally trusts X-Forwarded-For, allowing whitelist IP spoofing (MetricsBleed)
WeKan /metrics Unconditionally Trusts X-Forwarded-For, Allowing Whitelist IP Spoofing MetricsBleed Vulnerability Overview WeKan's Prometheus /metrics endpoint restricts access via an IP whitelist only configured monitoring IPs are allowed. When determining the client's source IP, the code...
Linux: undisclosed vulnerability (ZAI-2026-PRK61D)
Not disclosed. Details are not yet publicly disclosed...
wget2: undisclosed vulnerability (ZAI-2026-S58K9B)
Not disclosed. Details are not yet publicly disclosed...
Redis: undisclosed vulnerability (ZAI-2026-5YPF8J)
Not disclosed. Details are not yet publicly disclosed...
Redis: undisclosed vulnerability (ZAI-2026-7FQ3CB)
Not disclosed. Details are not yet publicly disclosed...
Suricata: undisclosed vulnerability (ZAI-2026-MGWFQ4)
Not disclosed. Details are not yet publicly disclosed...
BIND9: undisclosed vulnerability (ZAI-2026-UFC8MD)
Not disclosed. Details are not yet publicly disclosed...
lwIP: undisclosed vulnerability (ZAI-2026-S05AIC)
Not disclosed. Details are not yet publicly disclosed...
Sogou Browser: undisclosed vulnerability (ZAI-2026-DFWIYP)
Not disclosed. Details are not yet publicly disclosed...
RT-Thread: undisclosed vulnerability (ZAI-2026-RQA8QG)
Not disclosed. Details are not yet publicly disclosed...
Redis: undisclosed vulnerability (ZAI-2026-WLIMQP)
Not disclosed. Details are not yet publicly disclosed...
GStreamer: undisclosed vulnerability (ZAI-2026-JTMJZE)
Not disclosed. Details are not yet publicly disclosed...
Linux: undisclosed vulnerability (ZAI-2026-I3YHAZ)
Not disclosed. Details are not yet publicly disclosed...
FFmpeg: undisclosed vulnerability (ZAI-2026-WQWON8)
Not disclosed. Details are not yet publicly disclosed...
Suricata: undisclosed vulnerability (ZAI-2026-GMVL2P)
Not disclosed. Details are not yet publicly disclosed...
360 Speed Browser: undisclosed vulnerability (ZAI-2026-15GJLO)
Not disclosed. Details are not yet publicly disclosed...
MongoDB: undisclosed vulnerability (ZAI-2026-C1T2QW)
Not disclosed. Details are not yet publicly disclosed...
Remitly: undisclosed vulnerability (ZAI-2026-LWR18R)
Not disclosed. Details are not yet publicly disclosed...
BIND9: undisclosed vulnerability (ZAI-2026-DK83DQ)
Not disclosed. Details are not yet publicly disclosed...
JeecgBoot: undisclosed vulnerability (ZAI-2026-SUNNZJ)
Not disclosed. Details are not yet publicly disclosed...
OpenBSD: undisclosed vulnerability (ZAI-2026-W6YS7N)
Not disclosed. Details are not yet publicly disclosed...
GStreamer: undisclosed vulnerability (ZAI-2026-968TME)
Not disclosed. Details are not yet publicly disclosed...
Crypto.com: undisclosed vulnerability (ZAI-2026-SOZGDM)
Not disclosed. Details are not yet publicly disclosed...
libevent: undisclosed vulnerability (ZAI-2026-03V2QU)
Not disclosed. Details are not yet publicly disclosed...
Redis: undisclosed vulnerability (ZAI-2026-CY74TK)
Not disclosed. Details are not yet publicly disclosed...
wolfSSL: undisclosed vulnerability (ZAI-2026-ZZJMHM)
Not disclosed. Details are not yet publicly disclosed...
wget2: undisclosed vulnerability (ZAI-2026-X10GZX)
Not disclosed. Details are not yet publicly disclosed...
Smartbi: undisclosed vulnerability (ZAI-2026-XXZN8R)
Not disclosed. Details are not yet publicly disclosed...