CVE-2026-63896 - In the Linux kernel, the following vulnerability has been resolved: usb: gadget: composite: fix int

CVE-2026-63895 - In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: copy only re

CVE-2026-63894 - In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: serialize DM

CVE-2026-63893 - In the Linux kernel, the following vulnerability has been resolved: thunderbolt: property: Reject u

CVE-2026-63892 - In the Linux kernel, the following vulnerability has been resolved: thunderbolt: property: Reject d

CVE-2026-63891 - In the Linux kernel, the following vulnerability has been resolved: thunderbolt: property: Cap recu

CVE-2026-63890 - In the Linux kernel, the following vulnerability has been resolved: scsi: fcoe: Reject FIP descript

CVE-2026-63889 - In the Linux kernel, the following vulnerability has been resolved: scsi: scsi_transport_fc: Widen

CVE-2026-63888 - In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix CRC ov

CVE-2026-63887 - In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Bound iscs

CVE-2026-63886 - In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Validate C

CVE-2026-63885 - In the Linux kernel, the following vulnerability has been resolved: drm/gem: fix race between chang

CVE-2026-63884 - In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix potential UAF in

CVE-2026-63883 - In the Linux kernel, the following vulnerability has been resolved: serial: qcom_geni: fix kfifo un

CVE-2026-63882 - In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix NULL pointer bu

CVE-2026-63881 - In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix a vulnerability

CVE-2026-63880 - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix lock leak on EN

CVE-2026-63879 - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix amdgpu_hmm_rang

CVE-2026-63878 - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: check num_entries i

CVE-2026-63877 - In the Linux kernel, the following vulnerability has been resolved: serial: dz: Convert to use a pl

CVE-2026-63876 - In the Linux kernel, the following vulnerability has been resolved: serial: zs: Convert to use a pl

CVE-2026-63875 - In the Linux kernel, the following vulnerability has been resolved: arm64: tlb: Flush walk cache wh

CVE-2026-63874 - In the Linux kernel, the following vulnerability has been resolved: net: mctp: usb: fix race betwee

CVE-2026-63873 - In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix mm_struct re

CVE-2026-63872 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-63871 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix data-race o

CVE-2026-63870 - In the Linux kernel, the following vulnerability has been resolved: ieee802154: 6lowpan: only accep

CVE-2026-63869 - In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: limit injected

CVE-2026-63868 - In the Linux kernel, the following vulnerability has been resolved: net: garp: fix unsigned integer

CVE-2026-63867 - In the Linux kernel, the following vulnerability has been resolved: mptcp: close TOCTOU race while

CVE-2026-63866 - In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Clear wcid

CVE-2026-63865 - In the Linux kernel, the following vulnerability has been resolved: bpf: Drop task_to_inode and ine

CVE-2026-63864 - In the Linux kernel, the following vulnerability has been resolved: bpf: Propagate error from visit

CVE-2026-63863 - In the Linux kernel, the following vulnerability has been resolved: drm/gpusvm: Fix unbalanced unlo

CVE-2026-63862 - In the Linux kernel, the following vulnerability has been resolved: PCI: mediatek-gen3: Prevent lea

CVE-2026-63861 - In the Linux kernel, the following vulnerability has been resolved: spi: mtk-snfi: unregister ECC e

CVE-2026-63860 - In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Prefer NLA_NUL_STRIN

CVE-2026-63859 - In the Linux kernel, the following vulnerability has been resolved: net: airoha: Add missing bits i

CVE-2026-63858 - In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: add hook

CVE-2026-63857 - In the Linux kernel, the following vulnerability has been resolved: net: airoha: Do not read uninit

CVE-2026-63856 - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fen

CVE-2026-63855 - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fen

CVE-2026-63854 - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fen

CVE-2026-63853 - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fen

CVE-2026-63852 - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fen

CVE-2026-63851 - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fen

CVE-2026-63850 - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fen

CVE-2026-63849 - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fen

CVE-2026-63848 - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fe

CVE-2026-63847 - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fe

CVE-2026-63846 - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fe

CVE-2026-63845 - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fe

CVE-2026-63844 - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fe

CVE-2026-63843 - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fe

CVE-2026-63842 - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fe

CVE-2026-63841 - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fe

CVE-2026-63840 - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fe

CVE-2026-63839 - In the Linux kernel, the following vulnerability has been resolved: platform/x86: lenovo-wmi-helper

CVE-2026-63838 - In the Linux kernel, the following vulnerability has been resolved: ASoC: rsnd: Fix potential out-o

CVE-2026-63837 - In the Linux kernel, the following vulnerability has been resolved: net: ena: PHC: Check return cod

CVE-2026-16221 - Impact: fast-uri versions from 2.3.1 through 4.1.0 (including the 3.x line up to 3.1.3 and the 2.x l

CVE-2026-63836 - In the Linux kernel, the following vulnerability has been resolved: batman-adv: tp_meter: avoid div

CVE-2026-63835 - In the Linux kernel, the following vulnerability has been resolved: batman-adv: v: prevent OGM aggr

CVE-2026-63834 - In the Linux kernel, the following vulnerability has been resolved: batman-adv: tp_meter: restrict

CVE-2026-63833 - In the Linux kernel, the following vulnerability has been resolved: ntfs3: reject direct userspace

CVE-2026-63832 - In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: add wcid publish ch

CVE-2026-63831 - In the Linux kernel, the following vulnerability has been resolved: mac802154: llsec: add skb_cow_d

CVE-2026-63830 - In the Linux kernel, the following vulnerability has been resolved: net: skmsg: preserve sg.copy ac

CVE-2026-63829 - In the Linux kernel, the following vulnerability has been resolved: net: ip_gre: require CAP_NET_AD

CVE-2026-63828 - In the Linux kernel, the following vulnerability has been resolved: apparmor: mediate the implicit

CVE-2026-63827 - In the Linux kernel, the following vulnerability has been resolved: apparmor: fix use-after-free in

CVE-2026-63826 - In the Linux kernel, the following vulnerability has been resolved: fbdev: fix use-after-free in st

CVE-2026-63825 - In the Linux kernel, the following vulnerability has been resolved: gcov: use atomic counter update

CVE-2026-63824 - In the Linux kernel, the following vulnerability has been resolved: KEYS: fix overflow in keyctl_pk

CVE-2026-63823 - In the Linux kernel, the following vulnerability has been resolved: keys: Pin request_key_auth payl

CVE-2026-63822 - In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix warning when

CVE-2026-63821 - In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: usb: fix memory le

CVE-2026-63820 - In the Linux kernel, the following vulnerability has been resolved: f2fs: fix missing read bio subm

CVE-2026-63819 - In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on

CVE-2026-63818 - In the Linux kernel, the following vulnerability has been resolved: f2fs: validate orphan inode ent

CVE-2026-63817 - In the Linux kernel, the following vulnerability has been resolved: f2fs: validate compress cache i

CVE-2026-63816 - In the Linux kernel, the following vulnerability has been resolved: f2fs: atomic: fix UAF issue on

CVE-2026-63815 - In the Linux kernel, the following vulnerability has been resolved: f2fs: bound i_inline_xattr_size

CVE-2026-63814 - In the Linux kernel, the following vulnerability has been resolved: f2fs: validate ACL entry sizes

CVE-2026-63813 - In the Linux kernel, the following vulnerability has been resolved: Revert "f2fs: remove non-uptoda

CVE-2026-63812 - In the Linux kernel, the following vulnerability has been resolved: f2fs: fix incorrect FI_NO_EXTEN

CVE-2026-63811 - In the Linux kernel, the following vulnerability has been resolved: f2fs: read COW data with the or

CVE-2026-63810 - In the Linux kernel, the following vulnerability has been resolved: block: Avoid mounting the bdev

CVE-2026-63809 - In the Linux kernel, the following vulnerability has been resolved: bpf: use kvfree() for replaced

CVE-2026-63808 - In the Linux kernel, the following vulnerability has been resolved: exfat: fix potential use-after-

CVE-2026-63807 - In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Ensure hugepage i

CVE-2026-63806 - In the Linux kernel, the following vulnerability has been resolved: KVM: Replace guest-triggerable

CVE-2026-63805 - In the Linux kernel, the following vulnerability has been resolved: crypto: nx - fix nx_crypto_ctx_

CVE-2026-63804 - In the Linux kernel, the following vulnerability has been resolved: gfs2: fix use-after-free in gfs

CVE-2026-63803 - In the Linux kernel, the following vulnerability has been resolved: hdlc_ppp: sync per-proto timers

CVE-2026-63802 - In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix UAF in __blkcg_

CVE-2026-63801 - In the Linux kernel, the following vulnerability has been resolved: tipc: fix slab-use-after-free R

CVE-2026-63800 - In the Linux kernel, the following vulnerability has been resolved: pNFS: Fix use-after-free in pnf

CVE-2026-63799 - In the Linux kernel, the following vulnerability has been resolved: sched/mmcid: Fix OOB clear_bit

CVE-2026-63798 - In the Linux kernel, the following vulnerability has been resolved: irqchip/imgpdc: Fix resource le

CVE-2026-63797 - In the Linux kernel, the following vulnerability has been resolved: rpmsg: char: Fix use-after-free

CVE-2026-63796 - In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject oversized group b

CVE-2026-63795 - In the Linux kernel, the following vulnerability has been resolved: 9p: avoid putting oldfid in p9_

CVE-2026-63794 - In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Fix page overflow in

CVE-2026-63793 - In the Linux kernel, the following vulnerability has been resolved: ntfs: serialize volume label ac

CVE-2026-53403 - In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix fb_new_modelist to p

CVE-2026-53402 - In the Linux kernel, the following vulnerability has been resolved: fbdev: fbcon: fix out-of-bounds

CVE-2026-53401 - In the Linux kernel, the following vulnerability has been resolved: fbdev: omap2: fix use-after-fre

CVE-2026-53400 - In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix adapter registra

CVE-2026-53399 - In the Linux kernel, the following vulnerability has been resolved: nfsd: release layout stid on se

CVE-2026-53398 - In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix SECINFO_NO_NAME decod

CVE-2026-53397 - In the Linux kernel, the following vulnerability has been resolved: nfsd: fix posix_acl leak on SET

CVE-2026-53396 - In the Linux kernel, the following vulnerability has been resolved: nfsd: fix posix_acl leak and ig

CVE-2026-53395 - In the Linux kernel, the following vulnerability has been resolved: nfsd: fix dead ACL conflict gua

CVE-2026-53394 - In the Linux kernel, the following vulnerability has been resolved: nfsd: avoid leaking pre-allocat

CVE-2026-53393 - In the Linux kernel, the following vulnerability has been resolved: nfsd: reset write verifier on d

CVE-2026-53392 - In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexfiles: reject zero fi

CVE-2026-53391 - In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: reject zero-length

CVE-2026-53390 - In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bounds read i

CVE-2026-53389 - In the Linux kernel, the following vulnerability has been resolved: net/tcp-ao: fix use-after-free

CVE-2026-53388 - In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request before re

CVE-2026-53387 - In the Linux kernel, the following vulnerability has been resolved: iio: light: veml6075: add bound

CVE-2026-53386 - In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads1298: add bound

CVE-2026-53385 - In the Linux kernel, the following vulnerability has been resolved: vc_screen: fix null-ptr-deref i

CVE-2026-53384 - In the Linux kernel, the following vulnerability has been resolved: serial: 8250_dw: unregister 825

CVE-2026-53383 - In the Linux kernel, the following vulnerability has been resolved: ksmbd: reject non-VALID session

CVE-2026-53382 - In the Linux kernel, the following vulnerability has been resolved: media: vidtv: fix NULL pointer

CVE-2026-53381 - In the Linux kernel, the following vulnerability has been resolved: virtiofs: fix UAF on submount u

CVE-2026-53380 - In the Linux kernel, the following vulnerability has been resolved: media: rzv2h-ivc: Fix concurren

CVE-2026-53379 - In the Linux kernel, the following vulnerability has been resolved: media: i2c: ov8856: free contro

CVE-2026-53378 - In the Linux kernel, the following vulnerability has been resolved: drm/colorop: Fix blob property

CVE-2026-53377 - In the Linux kernel, the following vulnerability has been resolved: drm/msm: always recover the gpu

CVE-2026-53376 - In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Add upper bound che

CVE-2026-53375 - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce: Prevent partial

CVE-2026-53374 - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: zero-initialize GAR

CVE-2026-53373 - In the Linux kernel, the following vulnerability has been resolved: mm/vma: do not try to unmap a V

CVE-2026-16229 - A flaw has been found in itsourcecode Courier Management System up to 1.0. Affected by this vulnerab

CVE-2026-16228 - A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. Affected is an

CVE-2026-16227 - A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0.

CVE-2026-53372 - In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Block PASID attachm

CVE-2026-53371 - In the Linux kernel, the following vulnerability has been resolved: RDMA/ionic: bound node_desc sys

CVE-2026-53370 - In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Improve validat

CVE-2026-53369 - In the Linux kernel, the following vulnerability has been resolved: udf: reject descriptors with ov

CVE-2026-53368 - In the Linux kernel, the following vulnerability has been resolved: f2fs: fix fsck inconsistency ca

CVE-2026-53367 - In the Linux kernel, the following vulnerability has been resolved: selinux: fix avdcache auditing

CVE-2026-16226 - A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0. This affects the func

CVE-2026-16225 - A security flaw has been discovered in davenardella snap7 up to 1.4.3. The impacted element is the f

CVE-2026-16224 - A vulnerability was identified in jxxghp MoviePilot up to 2.13.5. The affected element is an unknown

CVE-2026-16223 - A vulnerability was determined in 1Panel-dev CordysCRM up to 1.4.1. Impacted is the function getSqlB

CVE-2026-16222 - A vulnerability was found in 1Panel-dev CordysCRM up to 1.4.1. This issue affects some unknown proce

CVE-2026-16220 - A vulnerability has been found in code-projects Online Examination System 1.0. This vulnerability af

CVE-2026-16219 - A flaw has been found in Croogo CMS up to 4.0.7. This affects the function FileManager::isEditable o

CVE-2026-16218 - A vulnerability was detected in hunvreus devpush up to 0.4.6. Affected by this issue is the function

CVE-2026-16217 - A security vulnerability has been detected in guohongze adminset up to 0.61. Affected by this vulner

CVE-2026-16216 - A weakness has been identified in geex-arts django-jet up to 1.0.8. Affected is an unknown function

CVE-2026-16215 - A security flaw has been discovered in geex-arts django-jet up to 1.0.8. This impacts an unknown fun

CVE-2026-16214 - A vulnerability was identified in geex-arts django-jet up to 1.0.8. This affects an unknown function

CVE-2026-16213 - A security flaw has been discovered in Fantomas42 django-blog-zinnia up to 0.20. Affected by this vu

CVE-2026-16212 - A vulnerability was identified in awesto django-shop up to 1.2.4. Affected is an unknown function of

CVE-2026-16211 - A vulnerability was determined in allegro up to bcf65b994ef29fb3fc2e10b660e6288723d5209e. This impac

CVE-2026-16210 - A vulnerability was found in newpanjing simpleui 2026.01.13. This affects the function self.get_acti

CVE-2026-16209 - A vulnerability has been found in Gerapy up to 0.9.13. The impacted element is an unknown function o

CVE-2026-16208 - A flaw has been found in django-tastypie up to 0.15.1. The affected element is the function CacheThr

CVE-2026-16207 - A vulnerability was detected in django-tastypie up to 0.15.1. Impacted is the function ApiKeyAuthent

CVE-2026-16206 - A security vulnerability has been detected in django-oauth django-oauth-toolkit 3.3.0. This issue af

CVE-2026-16205 - A weakness has been identified in Pluck CMS up to 4.7.21. This vulnerability affects the function ht

CVE-2026-16204 - A security flaw has been discovered in zevorn rt-claw up to 0.2.0. This affects the function tool_ru

CVE-2026-16203 - A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by

CVE-2026-16202 - A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected by

CVE-2026-16201 - A vulnerability was found in zevorn rt-claw up to 0.2.0. Affected is the function claw_net_get/claw_

CVE-2026-16200 - A vulnerability has been found in zevorn rt-claw up to 0.2.0. This impacts the function claw_tool_in

CVE-2026-16199 - A flaw has been found in nextlevelbuilder GoClaw up to 3.13.3-beta.3. This affects the function Exec

CVE-2026-16198 - A vulnerability was detected in Sipeed PicoClaw up to 0.2.9. The impacted element is an unknown func

CVE-2026-16197 - A security vulnerability has been detected in Sipeed PicoClaw up to 0.2.9. The affected element is t

CVE-2026-16196 - A weakness has been identified in Sipeed PicoClaw up to 0.2.9. Impacted is the function isPrivateOrR

CVE-2026-16195 - A security flaw has been discovered in Sipeed PicoClaw up to 0.2.9. This issue affects the function

CVE-2026-10130 - QueryWeaver contains an authentication bypass vulnerability that allows unauthenticated attackers to

CVE-2026-16194 - A vulnerability was determined in zhayujie CowAgent up to 2.1.1. This affects the function WebFetch.

CVE-2026-16156 - A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This af

CVE-2026-57857 - The Flow Payment plugin for WordPress (flow.cl) version 3.0.8 is vulnerable to reflected cross-site

CVE-2026-16155 - A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by

CVE-2026-16154 - A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0/1.php. Affect

CVE-2026-16152 - A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. Affected is an un

CVE-2026-12228 - A stored cross-site scripting (XSS) vulnerability exists in the `POST /api/prompts/share` endpoint o

CVE-2026-57848 - Stoat for Android exports the chat.stoat.activities.ShareTargetActivity component (reachable to any

CVE-2026-53994 - ProFTPD mod_sftp contains a heap-based buffer overflow reachable by an authenticated SFTP user. The

CVE-2026-16151 - A vulnerability has been found in CartoDB carto-api-client 0.5.29. This impacts the function addFilt

CVE-2026-16150 - A vulnerability was found in RobinHerbots Inputmask up to 5.0.9. Affected by this issue is the funct

CVE-2026-16133 - A flaw has been found in LiuMengxuan04 MiniCode 0.1.0. Affected by this vulnerability is the functio

CVE-2026-16131 - A weakness has been identified in itsourcecode Hospital Management System 1.0. This affects an unkno

CVE-2026-16130 - A vulnerability was identified in nearai ironclaw up to 0.29.1. The affected element is the function

CVE-2026-16129 - A vulnerability has been found in princezuda SafestClaw up to 4.2.4. This vulnerability affects the

CVE-2026-16128 - A security flaw has been discovered in zevorn rt-claw up to 0.2.0. This impacts the function receive

CVE-2026-16127 - A vulnerability was identified in zevorn rt-claw up to 0.2.0. This affects the function claw_net_get

CVE-2026-16126 - A vulnerability was determined in zevorn rt-claw up to 0.2.0. The impacted element is the function h

CVE-2026-16125 - A vulnerability was found in zevorn rt-claw up to 0.2.0. The affected element is the function claw_n

CVE-2026-16124 - A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.15.0-beta.32. This aff

CVE-2026-16123 - A weakness has been identified in nextlevelbuilder GoClaw up to 3.13.2. Affected by this issue is th

CVE-2026-16122 - A security flaw has been discovered in nextlevelbuilder GoClaw up to 3.13.2. Affected by this vulner

CVE-2026-16121 - A vulnerability was identified in nextlevelbuilder GoClaw up to 3.13.2. Affected is the function isS

CVE-2026-9323 - The urwid web display backend (urwid/display/web.py) generates web session identifiers (urwid_id) in

CVE-2026-16120 - A vulnerability was determined in nextlevelbuilder GoClaw up to 3.13.3-beta.3. This impacts the func

CVE-2026-16119 - A vulnerability was found in nextlevelbuilder GoClaw up to 3.13.2. This affects the function Request

CVE-2026-16117 - Impact: @fastify/http-proxy versions up to and including 11.5.0 fail to rewrite the request prefix w

CVE-2026-11826 - OpenPLC_v3 contains a heap-based buffer overflow in the getData() function in webserver/core/modbus_

CVE-2025-71398 - SurrealDB before 2.2.2 fails to validate HTTP redirects in http functions, allowing authenticated us

CVE-2025-71397 - SurrealDB before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.2 allows authenticated users with O

CVE-2025-71396 - SurrealDB before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.2 does not enforce a default execut

CVE-2025-71395 - SurrealDB versions before 2.2.2 contain a memory exhaustion vulnerability in the string::replace fun

CVE-2025-71394 - SurrealDB versions before 2.2.2 contain a local file read vulnerability in the DEFINE ANALYZER state

CVE-2025-71393 - SurrealDB before 2.2.2 with scripting enabled fails to properly enforce recursion limits when native

CVE-2025-71392 - SurrealDB before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.2 fails to properly escape table an

CVE-2025-71391 - SurrealDB versions before 2.2.2 contain an uncaught exception vulnerability in the net module that a

CVE-2025-71390 - SurrealDB before 2.2.6, 2.3.6, and 2.1.8 (and 3.0.0-alpha.7 and earlier) fails to validate DNS-resol

CVE-2024-58370 - SurrealDB versions before 1.1.0 fail to enforce recursion depth limits when parsing nested SurrealQL

CVE-2024-58369 - SurrealDB versions before 1.1.1 fail to properly validate invocation of custom parameters and functi

CVE-2024-58368 - SurrealDB versions before 1.1.0 fail to properly parse the ID, DB, and NS headers in HTTP REST API r

CVE-2024-58367 - SurrealDB versions before 2.0.4 fail to properly enforce field permissions during SELECT, UPDATE, an

CVE-2024-58366 - SurrealDB before 1.1.1 contains a format string vulnerability in the rquickjs Exception::throw_type

CVE-2024-58365 - SurrealDB versions before 1.2.0 contain an uncaught exception vulnerability in the query executor wh

CVE-2024-58364 - SurrealDB versions before 1.2.1 contain an uncaught exception handling vulnerability in span renderi

CVE-2024-58363 - SurrealDB before 1.5.4 fails to properly validate authentication when a scope user switches database

CVE-2024-58362 - SurrealDB before 1.5.5 (and 2.0.0-beta before 2.0.0-beta.3) accepts an arbitrary object in the signi

CVE-2024-58361 - SurrealDB versions before 2.0.4 contain an uncaught exception handling vulnerability in the parser e

CVE-2024-58359 - SurrealDB versions before 2.1.0 contain a denial of service vulnerability in the sorting mechanism w

CVE-2024-58358 - SurrealDB versions before 2.1.0 contain a denial of service vulnerability in role conversion that al

CVE-2024-58357 - SurrealDB versions before 2.1.0 contain an uncaught exception vulnerability in the rand::time() func

CVE-2024-58356 - SurrealDB before 2.1.4 silently fails to overwrite table definitions when the DEFINE TABLE ... OVERW

CVE-2023-54366 - SurrealDB before 1.0.1 sets default table permissions to FULL instead of NONE, allowing SELECT, CREA

CVE-2026-9147 - uproot dynamically generates Python class source code from ROOT TStreamerInfo records in a file and

CVE-2026-59173 - Uncontrolled Resource Consumption vulnerability in Apache Traffic Server. This issue affects Apache

CVE-2026-16158 - Impact: @fastify/reply-from versions from 8.3.1 up to but not including 12.6.4 build the internal UR

CVE-2026-15631 - Impact: @fastify/http-proxy versions from 9.4.0 up to and including 11.5.0 fail to validate the reso

CVE-2026-16097 - A vulnerability was found in Shibby Tomato 1.28. This vulnerability affects the function sub_42537C

CVE-2026-16096 - A vulnerability has been found in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. This affects the funct

CVE-2026-16095 - A flaw has been found in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. Affected by this issue is the f

CVE-2026-16088 - A vulnerability was detected in halo-dev halo up to 2.24.2. Affected by this vulnerability is the fu

CVE-2026-16085 - A security vulnerability has been detected in Sipeed PicoClaw up to 0.2.9. Affected is the function

CVE-2026-47871 - VMware Avi Load Balancer contains a directory traversal vulnerability. Flaws in file path validation

CVE-2026-47870 - VMware Avi Load Balancer contains a privilege escalation vulnerability. A malicious authenticated us

CVE-2026-47869 - VMware Avi Load Balancer contains a remote code execution vulnerability. A malicious authenticated u

CVE-2026-47868 - VMware Avi Load Balancer contains a local privilege escalation vulnerability. A malicious user with

CVE-2026-47867 - VMware Avi Load Balancer contains a remote code execution vulnerability. A malicious user with netwo

CVE-2026-47866 - VMware Avi Load Balancer contains an authorization bypass vulnerability. A malicious actor on the ne

CVE-2026-47865 - VMware Avi Load Balancer contains an authentication bypass vulnerability. A malicious user with netw

CVE-2026-16084 - A weakness has been identified in Sipeed PicoClaw up to 0.2.9. This impacts the function web_fetch o

CVE-2026-16083 - A security flaw has been discovered in Sipeed PicoClaw up to 0.2.9. This affects the function webhoo

CVE-2026-16082 - A vulnerability was identified in Sipeed PicoClaw up to 0.2.9. The impacted element is the function

CVE-2026-16081 - A vulnerability was determined in Sipeed PicoClaw up to 0.2.9. The affected element is an unknown fu

CVE-2026-16077 - A vulnerability was found in AstrBotDevs AstrBot up to 4.25.5. Impacted is the function _normalize_r