2436 matches found
Tencent Meeting: undisclosed vulnerability (ZAI-2026-02UZSY)
Not disclosed. Details are not yet publicly disclosed...
Wing FTP Server: undisclosed vulnerability (ZAI-2026-P8J604)
Not disclosed. Details are not yet publicly disclosed...
Insightly: undisclosed vulnerability (ZAI-2026-U07LC0)
Not disclosed. Details are not yet publicly disclosed...
Superbet: undisclosed vulnerability (ZAI-2026-HERZB6)
Not disclosed. Details are not yet publicly disclosed...
Greenhouse: undisclosed vulnerability (ZAI-2026-BY5B11)
Not disclosed. Details are not yet publicly disclosed...
Arkose Labs: undisclosed vulnerability (ZAI-2026-GDGNRR)
Not disclosed. Details are not yet publicly disclosed...
8x8: undisclosed vulnerability (ZAI-2026-4D1YVQ)
Not disclosed. Details are not yet publicly disclosed...
bank-dispute: undisclosed vulnerability (ZAI-2026-41WNIX)
Not disclosed. Details are not yet publicly disclosed...
Dell Wireless 1560 WiFi and Bluetooth Driver: undisclosed vulnerability (ZAI-2026-Z4TU8C)
Not disclosed. Details are not yet publicly disclosed...
Intel Integrated Performance Primitives: undisclosed vulnerability (ZAI-2026-COKOJ0)
Not disclosed. Details are not yet publicly disclosed...
Frappe Kanban Board whitelisted methods lack board permission checks, allowing unauthorized read and tampering
Frappe Kanban Board Whitelisted Methods Lack Board Permission Checks, Allowing Unauthorized Read and Tampering Vulnerability Overview Kanban Board in Frappe Framework exposes multiple whitelisted methods for Desk-side kanban operations. Before the fix, after loading a kanban board document, sever...
Frappe Connected App OAuth flow: insufficient permission checks and external redirect
Frappe Connected App OAuth Flow: Insufficient Permission Checks and External Redirect Vulnerability Overview Connected App in Frappe Framework is an OAuth2 client integration mechanism; its whitelisted method is used to generate an authorization URL for a user and write the authorization state in...
PhotoPrism StartIndexing path traversal (index endpoint escapes the originals directory)
PhotoPrism StartIndexing path traversal index endpoint escapes the originals directory Vulnerability Overview PhotoPrism's indexing feature allows specifying the subdirectory to scan via the path parameter of POST /api/v1/index. Before the fix, when this path was joined with the media library roo...
PhotoPrism Vision API can read server-local files
PhotoPrism Vision API can read server-local files Vulnerability Overview PhotoPrism's computer vision features caption, labels, nsfw, face assemble image references into outbound requests to the configured vision model through a set of request builders. Image references come from two sources: loc...
Seafile out-of-bounds read on malformed head commit ID
Seafile out-of-bounds read on malformed head commit ID Vulnerability Overview When the Seafile client daemon checks the remote head commit, it parses the head commit ID from the server response and copies it into the destination buffer at a fixed length 40 bytes; Seafile commit IDs are 40...
WeKan expired impersonation records bypass private board export authorization (ImpersonateBleed)
WeKan Expired Impersonation Records Bypass Private Board Export Authorization ImpersonateBleed Vulnerability Overview WeKan administrators can use the impersonation feature to operate as other users, and the system records every impersonation action. The flaw is this: in addition to the normal...
Linux kernel 6lowpan: NHC entry use-after-free on error path
In the Linux kernel, the following vulnerability has been resolved: 6lowpan: fix NHC entry use-after-free on error path lowpannhcdouncompression looks up an NHC descriptor while holding lowpannhclock. If the descriptor has no uncompress callback, the error path drops the lock before printing...
Suricata datasets: non-string value_key in JSON/NDJSON dataset enrichment causes null-pointer dereference denial of service
Suricata datasets: non-string valuekey in JSON/NDJSON dataset enrichment causes null-pointer dereference denial of service Vulnerability Overview Suricata supports loading external datasets in JSON/NDJSON format and using dataset records to enrich traffic e.g., enriching IP addresses, domains, an...
Linux kernel FDDI: short frames parsed before header length validation cause out-of-bounds read
Linux kernel FDDI: short frames parsed before header length validation cause out-of-bounds read Vulnerability Overview The Linux kernel FDDI receive path parses FDDI/LLC/SNAP header fields before verifying that the skb contains enough bytes, so malformed short frames can trigger an out-of-bounds...
RT-Thread: undisclosed vulnerability (ZAI-2026-RQA8QG)
Not disclosed. Details are not yet publicly disclosed...
RT-Thread: undisclosed vulnerability (ZAI-2026-P8Q05F)
Not disclosed. Details are not yet publicly disclosed...
MongoDB: undisclosed vulnerability (ZAI-2026-MWWML2)
Not disclosed. Details are not yet publicly disclosed...
MongoDB: undisclosed vulnerability (ZAI-2026-RNXPT0)
Not disclosed. Details are not yet publicly disclosed...
Redis: undisclosed vulnerability (ZAI-2026-5YPF8J)
Not disclosed. Details are not yet publicly disclosed...
TensorRT-LLM: undisclosed vulnerability (ZAI-2026-E9HBB6)
Not disclosed. Details are not yet publicly disclosed...
GStreamer: undisclosed vulnerability (ZAI-2026-VZ74K6)
Not disclosed. Details are not yet publicly disclosed...
OpenBSD: undisclosed vulnerability (ZAI-2026-IM0KO2)
Not disclosed. Details are not yet publicly disclosed...
Redis: undisclosed vulnerability (ZAI-2026-CMJSK8)
Not disclosed. Details are not yet publicly disclosed...
Redis: undisclosed vulnerability (ZAI-2026-TT3TZJ)
Not disclosed. Details are not yet publicly disclosed...
Redis: undisclosed vulnerability (ZAI-2026-YA2HJ6)
Not disclosed. Details are not yet publicly disclosed...
Nacos: undisclosed vulnerability (ZAI-2026-D8G7TK)
Not disclosed. Details are not yet publicly disclosed...
Nacos: undisclosed vulnerability (ZAI-2026-HAFEU3)
Not disclosed. Details are not yet publicly disclosed...
GStreamer: undisclosed vulnerability (ZAI-2026-C7Y4G8)
Not disclosed. Details are not yet publicly disclosed...
GStreamer: undisclosed vulnerability (ZAI-2026-37MCBU)
Not disclosed. Details are not yet publicly disclosed...
wolfSSL: undisclosed vulnerability (ZAI-2026-95ZYA4)
Not disclosed. Details are not yet publicly disclosed...
wolfSSL: undisclosed vulnerability (ZAI-2026-8KQN46)
Not disclosed. Details are not yet publicly disclosed...
wolfSSL: undisclosed vulnerability (ZAI-2026-HCDDTA)
Not disclosed. Details are not yet publicly disclosed...
GStreamer: undisclosed vulnerability (ZAI-2026-ZTBU1F)
Not disclosed. Details are not yet publicly disclosed...
GStreamer: undisclosed vulnerability (ZAI-2026-TADYO8)
Not disclosed. Details are not yet publicly disclosed...
Nacos: undisclosed vulnerability (ZAI-2026-PQOAH1)
Not disclosed. Details are not yet publicly disclosed...
ofdrw: undisclosed vulnerability (ZAI-2026-7EWORO)
Not disclosed. Details are not yet publicly disclosed...
wget2: undisclosed vulnerability (ZAI-2026-B8DLMQ)
Not disclosed. Details are not yet publicly disclosed...
GStreamer: undisclosed vulnerability (ZAI-2026-FQ1YNK)
Not disclosed. Details are not yet publicly disclosed...
ofdrw: undisclosed vulnerability (ZAI-2026-M74AQB)
Not disclosed. Details are not yet publicly disclosed...
Outlook: undisclosed vulnerability (ZAI-2026-MNC0S6)
Not disclosed. Details are not yet publicly disclosed...
libevent: undisclosed vulnerability (ZAI-2026-2O9JDB)
Not disclosed. Details are not yet publicly disclosed...
memcached: undisclosed vulnerability (ZAI-2026-VLIKW6)
Not disclosed. Details are not yet publicly disclosed...
memcached: undisclosed vulnerability (ZAI-2026-NPWI7E)
Not disclosed. Details are not yet publicly disclosed...