2436 matches found
memcached: undisclosed vulnerability (ZAI-2026-NPWI7E)
Not disclosed. Details are not yet publicly disclosed...
FFmpeg: undisclosed vulnerability (ZAI-2026-M3WTCD)
Not disclosed. Details are not yet publicly disclosed...
OpenVPN: undisclosed vulnerability (ZAI-2026-YJ75A0)
Not disclosed. Details are not yet publicly disclosed...
Nacos: undisclosed vulnerability (ZAI-2026-OIYOXV)
Not disclosed. Details are not yet publicly disclosed...
SLBrowser: undisclosed vulnerability (ZAI-2026-5IS294)
Not disclosed. Details are not yet publicly disclosed...
Superhuman: undisclosed vulnerability (ZAI-2026-HVZBCH)
Not disclosed. Details are not yet publicly disclosed...
Remitly: undisclosed vulnerability (ZAI-2026-LWR18R)
Not disclosed. Details are not yet publicly disclosed...
lwIP: undisclosed vulnerability (ZAI-2026-7FCWBF)
Not disclosed. Details are not yet publicly disclosed...
Crypto.com: undisclosed vulnerability (ZAI-2026-SOZGDM)
Not disclosed. Details are not yet publicly disclosed...
GStreamer: undisclosed vulnerability (ZAI-2026-OIPTPJ)
Not disclosed. Details are not yet publicly disclosed...
BIND9: undisclosed vulnerability (ZAI-2026-DK83DQ)
Not disclosed. Details are not yet publicly disclosed...
wolfSSL: undisclosed vulnerability (ZAI-2026-ZZJMHM)
Not disclosed. Details are not yet publicly disclosed...
OpenBSD: undisclosed vulnerability (ZAI-2026-W6YS7N)
Not disclosed. Details are not yet publicly disclosed...
JeecgBoot: undisclosed vulnerability (ZAI-2026-SUNNZJ)
Not disclosed. Details are not yet publicly disclosed...
Linux: undisclosed vulnerability (ZAI-2026-IW13SQ)
Not disclosed. Details are not yet publicly disclosed...
OpenBSD: undisclosed vulnerability (ZAI-2026-NTYFDY)
Not disclosed. Details are not yet publicly disclosed...
memcached: undisclosed vulnerability (ZAI-2026-RCQU4U)
Not disclosed. Details are not yet publicly disclosed...
FFmpeg: undisclosed vulnerability (ZAI-2026-TQGI0J)
Not disclosed. Details are not yet publicly disclosed...
Zoom Workplace: undisclosed vulnerability (ZAI-2026-2LQZ84)
Not disclosed. Details are not yet publicly disclosed...
Oracle Real Application Clusters DB Home: undisclosed vulnerability (ZAI-2026-BNPM81)
Not disclosed. Details are not yet publicly disclosed...
Superbet: undisclosed vulnerability (ZAI-2026-HERZB6)
Not disclosed. Details are not yet publicly disclosed...
Stripe: undisclosed vulnerability (ZAI-2026-0T5LSJ)
Not disclosed. Details are not yet publicly disclosed...
Greenhouse: undisclosed vulnerability (ZAI-2026-BY5B11)
Not disclosed. Details are not yet publicly disclosed...
Frappe Kanban Board whitelisted methods lack board permission checks, allowing unauthorized read and tampering
Frappe Kanban Board Whitelisted Methods Lack Board Permission Checks, Allowing Unauthorized Read and Tampering Vulnerability Overview Kanban Board in Frappe Framework exposes multiple whitelisted methods for Desk-side kanban operations. Before the fix, after loading a kanban board document, sever...
Frappe Web Form script context values rendered unescaped, leading to XSS
Frappe Web Form Script Context Values Rendered Unescaped, Leading to Stored XSS Vulnerability Overview Web Form in Frappe Framework website forms is a data-submission entry point for anonymous/external users; its page template serializes the server-side document object and injects it into a globa...
Frappe GDPR Personal Data Download Request ownership error leads to IDOR, allowing download of other users' PII
Frappe GDPR Personal Data Download Request Ownership Error Leads to IDOR, Allowing Download of Other Users' PII Vulnerability Overview When generating a user's personal data export file, the Personal Data Download Request feature that Frappe Framework provides for GDPR compliance failed to...
PhotoPrism StartIndexing path traversal (index endpoint escapes the originals directory)
PhotoPrism StartIndexing path traversal index endpoint escapes the originals directory Vulnerability Overview PhotoPrism's indexing feature allows specifying the subdirectory to scan via the path parameter of POST /api/v1/index. Before the fix, when this path was joined with the media library roo...
PhotoPrism global preview/download tokens bypass resource visibility boundaries
PhotoPrism global preview/download tokens bypass resource visibility boundaries Vulnerability Overview PhotoPrism loads thumbnails and file downloads via simple URLs that cannot carry authentication headers preview/download tokens in query parameters or paths, validated by an in-memory token look...
Linux kernel FDDI: short frames parsed before header length validation cause out-of-bounds read
Linux kernel FDDI: short frames parsed before header length validation cause out-of-bounds read Vulnerability Overview The Linux kernel FDDI receive path parses FDDI/LLC/SNAP header fields before verifying that the skb contains enough bytes, so malformed short frames can trigger an out-of-bounds...
Linux kernel nft_inner: IPv6 inner_thoff desynchronization causes firewall bypass
Linux kernel nftinner: IPv6 innerthoff desynchronization causes firewall bypass Vulnerability Overview In the Linux kernel netfilter nftables inner expression, when parsing an inner IPv6 packet, ipv6findhdr first correctly computes the transport-layer offset including extension headers, but the...
Suricata: undisclosed vulnerability (ZAI-2026-MGWFQ4)
Not disclosed. Details are not yet publicly disclosed...
FFmpeg: undisclosed vulnerability (ZAI-2026-OVFGZN)
Not disclosed. Details are not yet publicly disclosed...
Redis: undisclosed vulnerability (ZAI-2026-H6KAFF)
Not disclosed. Details are not yet publicly disclosed...
OpenClaw: undisclosed vulnerability (ZAI-2026-6ZQL09)
Not disclosed. Details are not yet publicly disclosed...
GStreamer: undisclosed vulnerability (ZAI-2026-C0Z5QC)
Not disclosed. Details are not yet publicly disclosed...
GStreamer: undisclosed vulnerability (ZAI-2026-PLMML8)
Not disclosed. Details are not yet publicly disclosed...
OpenBSD: undisclosed vulnerability (ZAI-2026-FSYEW4)
Not disclosed. Details are not yet publicly disclosed...
libevent: undisclosed vulnerability (ZAI-2026-4P9YY2)
Not disclosed. Details are not yet publicly disclosed...
wget2: undisclosed vulnerability (ZAI-2026-S58K9B)
Not disclosed. Details are not yet publicly disclosed...
FFmpeg: undisclosed vulnerability (ZAI-2026-3FCB7G)
Not disclosed. Details are not yet publicly disclosed...
wolfSSL: undisclosed vulnerability (ZAI-2026-OVAUH4)
Not disclosed. Details are not yet publicly disclosed...
ZenTao: undisclosed vulnerability (ZAI-2026-IRUA72)
Not disclosed. Details are not yet publicly disclosed...
wolfSSL: undisclosed vulnerability (ZAI-2026-HCDDTA)
Not disclosed. Details are not yet publicly disclosed...
GStreamer: undisclosed vulnerability (ZAI-2026-37MCBU)
Not disclosed. Details are not yet publicly disclosed...
ofdrw: undisclosed vulnerability (ZAI-2026-M74AQB)
Not disclosed. Details are not yet publicly disclosed...
FFmpeg: undisclosed vulnerability (ZAI-2026-UJM1Q4)
Not disclosed. Details are not yet publicly disclosed...
wget2: undisclosed vulnerability (ZAI-2026-SY1D2L)
Not disclosed. Details are not yet publicly disclosed...
Smartbi: undisclosed vulnerability (ZAI-2026-XXZN8R)
Not disclosed. Details are not yet publicly disclosed...