2436 matches found
BIND9: undisclosed vulnerability (ZAI-2026-UFC8MD)
Not disclosed. Details are not yet publicly disclosed...
memcached: undisclosed vulnerability (ZAI-2026-NPWI7E)
Not disclosed. Details are not yet publicly disclosed...
FFmpeg: undisclosed vulnerability (ZAI-2026-M3WTCD)
Not disclosed. Details are not yet publicly disclosed...
GStreamer: undisclosed vulnerability (ZAI-2026-C0Z5QC)
Not disclosed. Details are not yet publicly disclosed...
Knot Resolver: undisclosed vulnerability (ZAI-2026-HFI2PO)
Not disclosed. Details are not yet publicly disclosed...
wolfSSL: undisclosed vulnerability (ZAI-2026-16S2MS)
Not disclosed. Details are not yet publicly disclosed...
wolfSSL: undisclosed vulnerability (ZAI-2026-OVAUH4)
Not disclosed. Details are not yet publicly disclosed...
Redis: undisclosed vulnerability (ZAI-2026-19YSKJ)
Not disclosed. Details are not yet publicly disclosed...
FFmpeg: undisclosed vulnerability (ZAI-2026-UJM1Q4)
Not disclosed. Details are not yet publicly disclosed...
wget2: undisclosed vulnerability (ZAI-2026-OTTOUS)
Not disclosed. Details are not yet publicly disclosed...
Redis: undisclosed vulnerability (ZAI-2026-H6KAFF)
Not disclosed. Details are not yet publicly disclosed...
OpenClaw: undisclosed vulnerability (ZAI-2026-6ZQL09)
Not disclosed. Details are not yet publicly disclosed...
BIND9: undisclosed vulnerability (ZAI-2026-DK83DQ)
Not disclosed. Details are not yet publicly disclosed...
JeecgBoot: undisclosed vulnerability (ZAI-2026-SUNNZJ)
Not disclosed. Details are not yet publicly disclosed...
Suricata: undisclosed vulnerability (ZAI-2026-GMVL2P)
Not disclosed. Details are not yet publicly disclosed...
GStreamer: undisclosed vulnerability (ZAI-2026-OIPTPJ)
Not disclosed. Details are not yet publicly disclosed...
OpenBSD: undisclosed vulnerability (ZAI-2026-W6YS7N)
Not disclosed. Details are not yet publicly disclosed...
Nacos: undisclosed vulnerability (ZAI-2026-MR0PUJ)
Not disclosed. Details are not yet publicly disclosed...
GStreamer: undisclosed vulnerability (ZAI-2026-968TME)
Not disclosed. Details are not yet publicly disclosed...
wget2: undisclosed vulnerability (ZAI-2026-X10GZX)
Not disclosed. Details are not yet publicly disclosed...
ZenTao: undisclosed vulnerability (ZAI-2026-ZHTOTM)
Not disclosed. Details are not yet publicly disclosed...
MongoDB: undisclosed vulnerability (ZAI-2026-C1T2QW)
Not disclosed. Details are not yet publicly disclosed...
wolfSSL: undisclosed vulnerability (ZAI-2026-ZZJMHM)
Not disclosed. Details are not yet publicly disclosed...
Crypto.com: undisclosed vulnerability (ZAI-2026-SOZGDM)
Not disclosed. Details are not yet publicly disclosed...
FFmpeg: undisclosed vulnerability (ZAI-2026-WQWON8)
Not disclosed. Details are not yet publicly disclosed...
Linux: undisclosed vulnerability (ZAI-2026-I3YHAZ)
Not disclosed. Details are not yet publicly disclosed...
FFmpeg: undisclosed vulnerability (ZAI-2026-TQGI0J)
Not disclosed. Details are not yet publicly disclosed...
wget2: undisclosed vulnerability (ZAI-2026-KW26RE)
Not disclosed. Details are not yet publicly disclosed...
FFmpeg: undisclosed vulnerability (ZAI-2026-FTSWIC)
Not disclosed. Details are not yet publicly disclosed...
FFmpeg: undisclosed vulnerability (ZAI-2026-SM51TC)
Not disclosed. Details are not yet publicly disclosed...
lwIP: undisclosed vulnerability (ZAI-2026-9XHMIL)
Not disclosed. Details are not yet publicly disclosed...
Redis: undisclosed vulnerability (ZAI-2026-WGYJP8)
Not disclosed. Details are not yet publicly disclosed...
Linux: undisclosed vulnerability (ZAI-2026-EBQR8W)
Not disclosed. Details are not yet publicly disclosed...
wolfSSL: undisclosed vulnerability (ZAI-2026-WB3QRE)
Not disclosed. Details are not yet publicly disclosed...
Oppo Browser: undisclosed vulnerability (ZAI-2026-ZEM21R)
Not disclosed. Details are not yet publicly disclosed...
Microsoft Edge: undisclosed vulnerability (ZAI-2026-9ZGA9E)
Not disclosed. Details are not yet publicly disclosed...
Chia: undisclosed vulnerability (ZAI-2026-WNNF4N)
Not disclosed. Details are not yet publicly disclosed...
Stripe: undisclosed vulnerability (ZAI-2026-0T5LSJ)
Not disclosed. Details are not yet publicly disclosed...
Frappe Connected App OAuth flow: insufficient permission checks and external redirect
Frappe Connected App OAuth Flow: Insufficient Permission Checks and External Redirect Vulnerability Overview Connected App in Frappe Framework is an OAuth2 client integration mechanism; its whitelisted method is used to generate an authorization URL for a user and write the authorization state in...
Frappe GDPR Personal Data Download Request ownership error leads to IDOR, allowing download of other users' PII
Frappe GDPR Personal Data Download Request Ownership Error Leads to IDOR, Allowing Download of Other Users' PII Vulnerability Overview When generating a user's personal data export file, the Personal Data Download Request feature that Frappe Framework provides for GDPR compliance failed to...
GStreamer DTLS plugin openssl_verify_callback stack buffer overflow on certificate subject DN causes remote denial of service
GStreamer DTLS Plugin Stack Buffer Overflow in Certificate Subject DN Handling Causes Remote Denial of Service CVE-2026-59692 Vulnerability Overview In the GStreamer DTLS plugin the dtls element of gst-plugins-bad, used for the DTLS channel in WebRTC pipelines, the peer certificate verification...
Joomla com_installer update list stored XSS (description/detailsurl unescaped)
Joomla cominstaller Update List Stored XSS CVE-2026-48952 Vulnerability Overview The extension update list in the Joomla CMS administrative backend the update view of cominstaller renders the description and detailsurl fields of extension update information without HTML escaping, constituting a...
WebKit single-bug RCE: crafted web content yields AAR/AAW/PC-hijack in content process
Summary A memory-corruption vulnerability in Apple's WebKit engine is reachable from maliciously crafted web content. Apple's public advisory understates the impact as an "unexpected process crash" and notes it was addressed with improved memory handling. In practice the bug is a single-shot remo...
Suricata datasets: non-string value_key in JSON/NDJSON dataset enrichment causes null-pointer dereference denial of service
Suricata datasets: non-string valuekey in JSON/NDJSON dataset enrichment causes null-pointer dereference denial of service Vulnerability Overview Suricata supports loading external datasets in JSON/NDJSON format and using dataset records to enrich traffic e.g., enriching IP addresses, domains, an...
[FreeBSD] thr_kill2 permission check bypass: cross-UID signal delivery
Summary thrkill2 does not check pcansignal return value before tdksignal, allowing cross-UID signal delivery by local unprivileged users. Fixed in commit bf1e2c07. CVE-2026-45256, FreeBSD-SA-26:25.thr...
RT-Thread: undisclosed vulnerability (ZAI-2026-RQA8QG)
Not disclosed. Details are not yet publicly disclosed...
GStreamer: undisclosed vulnerability (ZAI-2026-37MCBU)
Not disclosed. Details are not yet publicly disclosed...
Sogou Browser: undisclosed vulnerability (ZAI-2026-DFWIYP)
Not disclosed. Details are not yet publicly disclosed...