2436 matches found
BlendLabs: undisclosed vulnerability (ZAI-2026-I6IBNQ)
Not disclosed. Details are not yet publicly disclosed...
Microsoft Edge: undisclosed vulnerability (ZAI-2026-57N789)
Not disclosed. Details are not yet publicly disclosed...
JeecgBoot: undisclosed vulnerability (ZAI-2026-OZU60C)
Not disclosed. Details are not yet publicly disclosed...
AMD Software PRO Edition: undisclosed vulnerability (ZAI-2026-K0S5K6)
Not disclosed. Details are not yet publicly disclosed...
Microsoft Edge: undisclosed vulnerability (ZAI-2026-SMFBV1)
Not disclosed. Details are not yet publicly disclosed...
WordPress: undisclosed vulnerability (ZAI-2026-OSU4EQ)
Not disclosed. Details are not yet publicly disclosed...
Google Chrome: undisclosed vulnerability (ZAI-2026-DXMEKB)
Not disclosed. Details are not yet publicly disclosed...
WinRAR: undisclosed vulnerability (ZAI-2026-KQQLDR)
Not disclosed. Details are not yet publicly disclosed...
Zabbix: undisclosed vulnerability (ZAI-2026-44IRM9)
Not disclosed. Details are not yet publicly disclosed...
Microsoft Edge: undisclosed vulnerability (ZAI-2026-HHXS05)
Not disclosed. Details are not yet publicly disclosed...
Frappe Web Form script context values rendered unescaped, leading to XSS
Frappe Web Form Script Context Values Rendered Unescaped, Leading to Stored XSS Vulnerability Overview Web Form in Frappe Framework website forms is a data-submission entry point for anonymous/external users; its page template serializes the server-side document object and injects it into a globa...
PhotoPrism StartIndexing path traversal (index endpoint escapes the originals directory)
PhotoPrism StartIndexing path traversal index endpoint escapes the originals directory Vulnerability Overview PhotoPrism's indexing feature allows specifying the subdirectory to scan via the path parameter of POST /api/v1/index. Before the fix, when this path was joined with the media library roo...
PhotoPrism Vision API can read server-local files
PhotoPrism Vision API can read server-local files Vulnerability Overview PhotoPrism's computer vision features caption, labels, nsfw, face assemble image references into outbound requests to the configured vision model through a set of request builders. Image references come from two sources: loc...
Seafile out-of-bounds read on malformed head commit ID
Seafile out-of-bounds read on malformed head commit ID Vulnerability Overview When the Seafile client daemon checks the remote head commit, it parses the head commit ID from the server response and copies it into the destination buffer at a fixed length 40 bytes; Seafile commit IDs are 40...
Apache Superset CTAS tmp_table_name SQL injection bypasses the allow_dml restriction
Apache Superset CTAS tmptablename SQL Injection Bypasses the allowdml Database Security Restriction ZAI-2026-IIRAQ1 Vulnerability Overview In Apache Superset's SQL Lab "save query result as table" CTAS/CVAS feature, the tmptablename parameter used to specify the target table name is neither...
GStreamer librfb: rfb_decoder_fill_rectangle() wrong write granularity causes heap out-of-bounds write
GStreamer librfb: rfbdecoderfillrectangle wrong write granularity causes heap out-of-bounds write Vulnerability Overview In rfbsrc the VNC/RFB client element of GStreamer gst-plugins-bad, rfbdecoderfillrectangle fills rectangles by writing pixels at guint32 4-byte granularity regardless of the...
FTP parser: recoverable RETR error escalated to APP_LAYER_ERROR disables FTP application-layer inspection on the same flow
FTP parser: recoverable RETR error escalated to APPLAYERERROR disables FTP application-layer inspection on the same flow Vulnerability Overview Suricata's FTP application-layer parser escalates a protocol-recoverable command-ordering error — a client sending RETR/STOR before negotiating a data po...
Linux kernel garp: unsigned integer underflow in garp_pdu_parse_attr
In the Linux kernel, the following vulnerability has been resolved: net: garp: fix unsigned integer underflow in garppduparseattr The receive-side GARP attribute parser computes dlen with reversed operands: dlen = sizeofga - ga-len; ga-len is the on-wire attribute length and includes the GARP...
GStreamer: undisclosed vulnerability (ZAI-2026-FQ1YNK)
Not disclosed. Details are not yet publicly disclosed...
wolfSSL: undisclosed vulnerability (ZAI-2026-BOOVO6)
Not disclosed. Details are not yet publicly disclosed...
Smartbi: undisclosed vulnerability (ZAI-2026-A0CTMQ)
Not disclosed. Details are not yet publicly disclosed...
FFmpeg: undisclosed vulnerability (ZAI-2026-XSJHOP)
Not disclosed. Details are not yet publicly disclosed...
AdGuard Home: undisclosed vulnerability (ZAI-2026-E6LMXE)
Not disclosed. Details are not yet publicly disclosed...
RT-Thread: undisclosed vulnerability (ZAI-2026-DLOLC8)
Not disclosed. Details are not yet publicly disclosed...
Sohu Mail: undisclosed vulnerability (ZAI-2026-1Y53BA)
Not disclosed. Details are not yet publicly disclosed...
MongoDB: undisclosed vulnerability (ZAI-2026-C6REJQ)
Not disclosed. Details are not yet publicly disclosed...
memcached: undisclosed vulnerability (ZAI-2026-CBRIUK)
Not disclosed. Details are not yet publicly disclosed...
Nacos: undisclosed vulnerability (ZAI-2026-S8TNB5)
Not disclosed. Details are not yet publicly disclosed...
Redis: undisclosed vulnerability (ZAI-2026-S33KDV)
Not disclosed. Details are not yet publicly disclosed...
Redis: undisclosed vulnerability (ZAI-2026-CMJSK8)
Not disclosed. Details are not yet publicly disclosed...
Suricata: undisclosed vulnerability (ZAI-2026-HXD5NK)
Not disclosed. Details are not yet publicly disclosed...
Nacos: undisclosed vulnerability (ZAI-2026-D8G7TK)
Not disclosed. Details are not yet publicly disclosed...
PlayStation: undisclosed vulnerability (ZAI-2026-6DI5V1)
Not disclosed. Details are not yet publicly disclosed...
wget2: undisclosed vulnerability (ZAI-2026-P7QHN1)
Not disclosed. Details are not yet publicly disclosed...
Dify: undisclosed vulnerability (ZAI-2026-DGBHUC)
Not disclosed. Details are not yet publicly disclosed...
wolfSSL: undisclosed vulnerability (ZAI-2026-KX6YRL)
Not disclosed. Details are not yet publicly disclosed...
FFmpeg: undisclosed vulnerability (ZAI-2026-HENSBV)
Not disclosed. Details are not yet publicly disclosed...
wolfSSL: undisclosed vulnerability (ZAI-2026-1R5VE4)
Not disclosed. Details are not yet publicly disclosed...
GitLab: undisclosed vulnerability (ZAI-2026-RC047W)
Not disclosed. Details are not yet publicly disclosed...
OpenVPN: undisclosed vulnerability (ZAI-2026-0MFIS4)
Not disclosed. Details are not yet publicly disclosed...
Logitech: undisclosed vulnerability (ZAI-2026-IC4C7B)
Not disclosed. Details are not yet publicly disclosed...
Coremail: undisclosed vulnerability (ZAI-2026-E9GT6L)
Not disclosed. Details are not yet publicly disclosed...
Airtable: undisclosed vulnerability (ZAI-2026-DCRUFL)
Not disclosed. Details are not yet publicly disclosed...
OpenVPN: undisclosed vulnerability (ZAI-2026-0CU2F4)
Not disclosed. Details are not yet publicly disclosed...
GStreamer: undisclosed vulnerability (ZAI-2026-VDJ5WJ)
Not disclosed. Details are not yet publicly disclosed...
sglang: undisclosed vulnerability (ZAI-2026-VW1XWD)
Not disclosed. Details are not yet publicly disclosed...
Linux: undisclosed vulnerability (ZAI-2026-JNT808)
Not disclosed. Details are not yet publicly disclosed...
libevent: undisclosed vulnerability (ZAI-2026-R6B4XO)
Not disclosed. Details are not yet publicly disclosed...