2436 matches found
wget2: undisclosed vulnerability (ZAI-2026-4QSX0T)
Not disclosed. Details are not yet publicly disclosed...
Redis: undisclosed vulnerability (ZAI-2026-C5036K)
Not disclosed. Details are not yet publicly disclosed...
OpenVPN: undisclosed vulnerability (ZAI-2026-HQMMMT)
Not disclosed. Details are not yet publicly disclosed...
GStreamer: undisclosed vulnerability (ZAI-2026-V1JVPE)
Not disclosed. Details are not yet publicly disclosed...
libevent: undisclosed vulnerability (ZAI-2026-R7HS3T)
Not disclosed. Details are not yet publicly disclosed...
PowerDNS Recursor: undisclosed vulnerability (ZAI-2026-LW2GW7)
Not disclosed. Details are not yet publicly disclosed...
FFmpeg: undisclosed vulnerability (ZAI-2026-ABKU91)
Not disclosed. Details are not yet publicly disclosed...
GStreamer: undisclosed vulnerability (ZAI-2026-LYWWXA)
Not disclosed. Details are not yet publicly disclosed...
MongoDB: undisclosed vulnerability (ZAI-2026-UNSG3G)
Not disclosed. Details are not yet publicly disclosed...
FFmpeg: undisclosed vulnerability (ZAI-2026-XTRU8O)
Not disclosed. Details are not yet publicly disclosed...
GStreamer: undisclosed vulnerability (ZAI-2026-54LFNP)
Not disclosed. Details are not yet publicly disclosed...
FFmpeg: undisclosed vulnerability (ZAI-2026-YQJVX4)
Not disclosed. Details are not yet publicly disclosed...
FFmpeg: undisclosed vulnerability (ZAI-2026-T0X4UD)
Not disclosed. Details are not yet publicly disclosed...
llama.cpp: undisclosed vulnerability (ZAI-2026-HULB55)
Not disclosed. Details are not yet publicly disclosed...
Yahoo Mail: undisclosed vulnerability (ZAI-2026-9I8QZX)
Not disclosed. Details are not yet publicly disclosed...
FFmpeg: undisclosed vulnerability (ZAI-2026-S0TOET)
Not disclosed. Details are not yet publicly disclosed...
OpenBSD: undisclosed vulnerability (ZAI-2026-2HATYU)
Not disclosed. Details are not yet publicly disclosed...
GStreamer: undisclosed vulnerability (ZAI-2026-L5NNHO)
Not disclosed. Details are not yet publicly disclosed...
Linux: undisclosed vulnerability (ZAI-2026-UVA4YB)
Not disclosed. Details are not yet publicly disclosed...
ofdrw: undisclosed vulnerability (ZAI-2026-ZNJOEC)
Not disclosed. Details are not yet publicly disclosed...
WordPress: undisclosed vulnerability (ZAI-2026-T8544C)
Not disclosed. Details are not yet publicly disclosed...
WinRAR: undisclosed vulnerability (ZAI-2026-555IAI)
Not disclosed. Details are not yet publicly disclosed...
Wechat: undisclosed vulnerability (ZAI-2026-L4Q91F)
Not disclosed. Details are not yet publicly disclosed...
FineReport: undisclosed vulnerability (ZAI-2026-0JSOWA)
Not disclosed. Details are not yet publicly disclosed...
Dingtalk: undisclosed vulnerability (ZAI-2026-2PJVT2)
Not disclosed. Details are not yet publicly disclosed...
Chainlink: undisclosed vulnerability (ZAI-2026-HPBVG3)
Not disclosed. Details are not yet publicly disclosed...
AWS: undisclosed vulnerability (ZAI-2026-4F8PXW)
Not disclosed. Details are not yet publicly disclosed...
FineReport: undisclosed vulnerability (ZAI-2026-7QNXQL)
Not disclosed. Details are not yet publicly disclosed...
Superbet: undisclosed vulnerability (ZAI-2026-HERZB6)
Not disclosed. Details are not yet publicly disclosed...
Wechat: undisclosed vulnerability (ZAI-2026-KJNQEL)
Not disclosed. Details are not yet publicly disclosed...
Chainlink: undisclosed vulnerability (ZAI-2026-GVWIXS)
Not disclosed. Details are not yet publicly disclosed...
FineReport: undisclosed vulnerability (ZAI-2026-3YO7O4)
Not disclosed. Details are not yet publicly disclosed...
Frappe Kanban Board whitelisted methods lack board permission checks, allowing unauthorized read and tampering
Frappe Kanban Board Whitelisted Methods Lack Board Permission Checks, Allowing Unauthorized Read and Tampering Vulnerability Overview Kanban Board in Frappe Framework exposes multiple whitelisted methods for Desk-side kanban operations. Before the fix, after loading a kanban board document, sever...
Frappe Prepared Report / Query Report bypass subject, owner and row-level permission checks to read other users' report data
Frappe Prepared Report / Query Report Bypass Permission Checks to Read Other Users' Report Data Vulnerability Overview Query Report in Frappe Framework supports background pre-generation Prepared Report: the query is executed with the initiating user's privileges and the result is persisted for...
DokuWiki authplain modifyUser regex injection can delete other users' accounts
DokuWiki authplain modifyUser regex injection can delete other users' accounts Vulnerability Overview When DokuWiki uses the built-in authplain authentication backend, user profiles are stored in the users.auth.php file, and the modifyUser operation triggered by a user updating their profile...
PhotoPrism global preview/download tokens bypass resource visibility boundaries
PhotoPrism global preview/download tokens bypass resource visibility boundaries Vulnerability Overview PhotoPrism loads thumbnails and file downloads via simple URLs that cannot carry authentication headers preview/download tokens in query parameters or paths, validated by an in-memory token look...
WeKan Avatar Localization follows redirects, bypassing SSRF protections (RedirectBleed)
WeKan Avatar Localization Follows Redirects, Bypassing SSRF Protections RedirectBleed Vulnerability Overview WeKan allows users to set an external avatar URL in their profile, and the server-side avatar localization feature fetches that URL and caches the avatar as a local attachment. Although SS...
[FreeBSD] thr_kill2 permission check bypass: cross-UID signal delivery
Summary thrkill2 does not check pcansignal return value before tdksignal, allowing cross-UID signal delivery by local unprivileged users. Fixed in commit bf1e2c07. CVE-2026-45256, FreeBSD-SA-26:25.thr...
Linux kernel nft_inner: IPv6 inner_thoff desynchronization causes firewall bypass
Linux kernel nftinner: IPv6 innerthoff desynchronization causes firewall bypass Vulnerability Overview In the Linux kernel netfilter nftables inner expression, when parsing an inner IPv6 packet, ipv6findhdr first correctly computes the transport-layer offset including extension headers, but the...
libevent: undisclosed vulnerability (ZAI-2026-4P9YY2)
Not disclosed. Details are not yet publicly disclosed...
wolfSSL: undisclosed vulnerability (ZAI-2026-ZFYTAI)
Not disclosed. Details are not yet publicly disclosed...
Redis: undisclosed vulnerability (ZAI-2026-90R0WI)
Not disclosed. Details are not yet publicly disclosed...
Redis: undisclosed vulnerability (ZAI-2026-ZS9LKQ)
Not disclosed. Details are not yet publicly disclosed...
Redis: undisclosed vulnerability (ZAI-2026-PL47T8)
Not disclosed. Details are not yet publicly disclosed...
Unbound: undisclosed vulnerability (ZAI-2026-HD7NUF)
Not disclosed. Details are not yet publicly disclosed...
lwIP: undisclosed vulnerability (ZAI-2026-SLN59I)
Not disclosed. Details are not yet publicly disclosed...
wolfSSL: undisclosed vulnerability (ZAI-2026-HCDDTA)
Not disclosed. Details are not yet publicly disclosed...
GStreamer: undisclosed vulnerability (ZAI-2026-88ITBX)
Not disclosed. Details are not yet publicly disclosed...