CVE-2026-84081 - IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due

CVE-2026-84078 - IBM Guardium Data Protection 12.2 is vulnerable to a missing authentication vulnerability in the Loa

CVE-2026-84077 - IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due

CVE-2026-84076 - IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to bypass security res

CVE-2026-84075 - IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due

CVE-2026-84074 - IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary c

CVE-2026-84073 - IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary S

CVE-2026-84071 - IBM Guardium Data Protection 12.2 is vulnerable to OS command injection in the Universal Connector p

CVE-2026-84070 - IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary c

CVE-2026-84064 - IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary S

CVE-2026-84036 - IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to bypass security res

CVE-2026-84034 - IBM Guardium Data Protection 12.2 is vulnerable to a hardcoded credentials vulnerability in the hard

CVE-2026-84031 - IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary c

CVE-2026-82967 - IBM Guardium Data Protection 12.2 is vulnerable to an authentication bypass that allows an unauthent

CVE-2026-82896 - IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to traverse directorie

CVE-2026-82893 - IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to im

CVE-2026-82892 - IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary commands due to

CVE-2026-82890 - IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary J

CVE-2026-82887 - IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary c

CVE-2026-82885 - IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to gain elevated privi

CVE-2026-82832 - IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary c

CVE-2026-82340 - IBM Guardium Data Protection 12.2 is vulnerable to unauthenticated insecure deserialization and atta

CVE-2026-81937 - IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the import r

CVE-2026-81933 - IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the Analytic Gri

CVE-2026-81669 - IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the create c

CVE-2026-81657 - IBM Guardium Data Protection 12.2 could allow a remote unauthenticated attacker to execute arbitrary

CVE-2026-81656 - IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the New Query Bu

CVE-2026-81626 - IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the Load Balance

CVE-2026-81623 - IBM Guardium Data Protection 12.2 could allow an authenticated user to execute arbitrary commands wi

CVE-2026-80442 - IBM Guardium Data Protection 12.2 is vulnerable to an authenticated OS command injection vulnerabili

CVE-2026-80441 - IBM Guardium Data Protection 12.2 is vulnerable to an unauthenticated second-order SQL injection vul

CVE-2026-77528 - Autobahn Python is a WebSocket and WAMP implementation for Python that supports Twisted and asyncio.

CVE-2026-76902 - CordysCRM is an open source AI-powered customer relationship management system that supports private

CVE-2026-76901 - CordysCRM is an open source AI-powered customer relationship management system that supports private

CVE-2026-76900 - CordysCRM is an open source AI-powered customer relationship management system that supports private

CVE-2026-76899 - CordysCRM is an open source AI-powered customer relationship management system that supports private

CVE-2026-75895 - In libsmpp35 from 0.1.0 through 1.8.0 out of bound read issue was found in the at smpp34_unpack() fu

CVE-2026-75878 - IBM Sterling File Gateway could allow a remote attacker to bypass authentication and obtain a fully

CVE-2026-63647 - CordysCRM is an open source AI-powered customer relationship management system that supports private

CVE-2026-63646 - CordysCRM is an open source AI-powered customer relationship management system that supports private

CVE-2026-61822 - pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0,

CVE-2026-61821 - pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0,

CVE-2026-61820 - pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0,

CVE-2026-61819 - pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0,

CVE-2026-61818 - pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0,

CVE-2026-61817 - pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0,

CVE-2026-61781 - pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0,

CVE-2026-61723 - FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6

CVE-2026-61722 - FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6

CVE-2026-61721 - FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6

CVE-2026-61720 - FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6

CVE-2026-61714 - FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.2.4 until 2.5.6

CVE-2026-58264 - FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 1.1.2 until 2.5.6

CVE-2026-57226 - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security M

CVE-2026-57224 - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security M

CVE-2026-57222 - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security M

CVE-2026-52745 - CordysCRM is an open source AI-powered customer relationship management system that supports private

CVE-2026-18869 - IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrict

CVE-2026-17619 - IBM Platform RTM is vulnerable to SQL injection. A remote attacker could send specially crafted SQL

CVE-2026-17262 - IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to cause a denial of service due to improp

CVE-2026-11727 - IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 IBM MQ C client could allow a remote attacker to cause

CVE-2026-11726 - IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to obtain sensit

CVE-2026-11725 - IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arb

CVE-2026-11722 - IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by an HTTP re

CVE-2026-11716 - IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denia

CVE-2026-11711 - IBM WebSphere Application Server 9.0 and 8.5 is affected by a deserialization vulnerability in the N

CVE-2026-11710 - IBM WebSphere Application Server 8.5 is affected by an HTTP request smuggling vulnerability due to i

CVE-2026-11549 - IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a virtual

CVE-2026-11548 - IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by an HTTP re

CVE-2026-11545 - IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to obtain sensitive infor

CVE-2026-11540 - IBM WebSphere Application Server 9.0 and 8.5 could allow a remote attacker to obtain sensitive infor

CVE-2026-11539 - IBM WebSphere Application Server 9.0 and 8.5 is affected by an authentication bypass vulnerability i

CVE-2017-20284 - Caucho Resin contains a path traversal vulnerability in the documentation webapp (resin-doc) that al

CVE-2026-93854 - In OpenStack Blazar before 17.0.1, the V2 lease API does not enforce object-level authorization on i

CVE-2026-93852 - In OpenStack Blazar before 17.0.1, the V2 lease listing operation (GET /v2/leases) returns leases fo

CVE-2026-93650 - A vulnerability was determined in Saleor up to 3.20.118/3.21.54/3.22.47/3.23.14. This vulnerability

CVE-2026-75894 - In osmo-iuh from 0.1.0 through 1.8.0 a reachable assertion was found in the ranap_handle_co_dt() fun

CVE-2026-75893 - In osmo-bsc from 1.0.1 through 1.14.1 a heap based buffer overflow issue was found in the ipaccess_p

CVE-2026-75892 - In osmo-ggsn 1.14.0 an out of bounds write issue was found in the gtp_decode_pdp_ctx() function thro

CVE-2026-11538 - IBM WebSphere Application Server 9.0 and 8.5 is affected by a log injection vulnerability through cr

CVE-2023-54399 - Hongjing e-HR before 8.2 contains a SQL injection vulnerability in the /servlet/codesettree endpoint

CVE-2021-48008 - Chanjet CRM contains an unauthenticated SQL injection vulnerability that allows remote attackers to

CVE-2019-25776 - Weaver E-cology contains an unauthenticated SQL injection vulnerability that allows remote attackers

CVE-2026-93764 - Mongoid may omit encryption rules for fields declared on embedded models when generating the client-

CVE-2026-93763 - A protection mechanism failure in the object-document mapper's encryption configuration generation c

CVE-2026-93762 - Mongoid contains an unsafe reflection weakness in the query path used for embedded documents. An app

CVE-2026-93761 - An inefficient regular expression complexity issue in the in-memory query evaluation component of th

CVE-2026-93760 - Mongoid does not restrict which query operators may come from caller-supplied filter data when an ap

CVE-2026-93759 - Mongoid does not neutralize a string-typed query criterion supplied to its query builder, and instea

CVE-2026-93753 - deepmerge through 4.3.1 contains a prototype poisoning vulnerability in the mergeObject() function t

CVE-2026-93752 - CSSOM through 0.5.0 contains a denial of service vulnerability in CSSStyleDeclaration.setProperty()

CVE-2026-93751 - uri-js through 4.4.1 contains an improper UTF-8 decoding vulnerability in pctDecChars() that decodes

CVE-2026-93750 - http-cache-semantics through 4.2.0 contains a cache validation vulnerability in the _varyMatches() f

CVE-2026-93749 - source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source ma

CVE-2026-93748 - http-cache-semantics through 4.2.0 fails to properly validate security-zeroed cache entries when pro

CVE-2026-93432 - A flaw was found in the Quarkus Qute template engine. When the {#eval} section helper processes a su

CVE-2026-92768 - A flaw was found in cockpit-machines. This vulnerability allows a local attacker to expose sensitive

CVE-2026-92747 - A flaw was found in `cockpit-machines`. This vulnerability allows a local attacker with the ability

CVE-2026-92745 - A flaw was found in cockpit-machines. This vulnerability allows a local attacker with the ability to

CVE-2026-92702 - Cocos AI is a confidential computing system for AI. In Cocos AI 0.8.2 and earlier, VerifyAttestation

CVE-2026-92701 - Cocos AI is a confidential computing system for AI. In Cocos AI 0.8.2 and earlier, VerifTeeAttestati

CVE-2026-91127 - File Viewer is a browser-native viewer for Office, PDF, CAD, archive, and other files in private and

CVE-2026-85058 - Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, PostOffice.publishWill publishes a clie

CVE-2026-84992 - md-editor-v3 is a Markdown editor for Vue 3 developed in JSX and TypeScript. Prior to 6.5.4, MdPrevi

CVE-2026-84975 - PJSIP is a free and open source multimedia communication library written in C. In 2.17 and earlier,

CVE-2026-81182 - SysReptor is a fully customizable pentest reporting platform. Prior to 2026.68, an unauthenticated a

CVE-2026-81181 - SysReptor is a fully customizable pentest reporting platform. Prior to 2026.68, the password authent

CVE-2026-81180 - SysReptor is a fully customizable pentest reporting platform. Prior to 2026.61, authenticated users

CVE-2026-81179 - SysReptor is a fully customizable pentest reporting platform. Prior to 2026.58, installations that e

CVE-2026-81178 - SysReptor is a fully customizable pentest reporting platform. Prior to 2026.55, an unauthenticated h

CVE-2026-77396 - PJSIP is a free and open source multimedia communication library written in C. In 2.17 and earlier,

CVE-2026-77386 - Kyoo is a self-hosted media server focused on movies, series, and anime. Prior to 5.1.0, an unauthen

CVE-2026-77385 - Kyoo is a self-hosted media server focused on movies, series, and anime. Prior to 5.1.0, a registere

CVE-2026-71537 - Paymenter is a free and open-source webshop solution for management of hosting services. Prior to 1.

CVE-2026-69186 - c-ares is an asynchronous resolver library. Prior to 1.34.7, ares_dns_parse() trusts the attacker-co

CVE-2026-69184 - c-ares is an asynchronous resolver library. Prior to 1.34.7, ares_dns_name_parse() enforces backward

CVE-2026-64847 - AnyIO is a high level asynchronous concurrency and networking framework that works on top of either

CVE-2026-63458 - Perses is an open-source dashboard and visualization project for observability data. Prior to 0.54.0

CVE-2026-63445 - Perses is an open-source dashboard and visualization project for observability data. Prior to 0.54.0

CVE-2026-63199 - Perses is an open-source dashboard and visualization project for observability data. From 0.43.0 unt

CVE-2026-62279 - LubeLogger is a self-hosted, open-source, web-based vehicle maintenance and fuel mileage tracker. Pr

CVE-2026-62278 - LubeLogger is a self-hosted, open-source, web-based vehicle maintenance and fuel mileage tracker. Pr

CVE-2026-61552 - Icinga 2 is an open source monitoring system. From 2.4 until 2.14.9, 2.15.4, and 2.16.2, the /v1/obj

CVE-2026-61551 - Icinga 2 is an open source monitoring system. Prior to 2.14.9, 2.15.4, and 2.16.2, parsing deeply ne

CVE-2026-61550 - Icinga 2 is an open source monitoring system. From 2.8 until 2.14.9, 2.15.4, and 2.16.2, certificate

CVE-2026-59163 - Mnemosyne is a memory layer for artificial intelligence agents. Prior to v3.10.1, the auth check in

CVE-2026-33625 - LMDeploy is a toolkit for compressing, deploying, and serving large language models. Versions 012.1

CVE-2026-32641 - Parseable is a log analytics platform built for high-volume data ingestion and analysis. Prior to 3.

CVE-2025-66455 - LMDeploy is a toolkit for compressing, deploying, and serving large language models. Starting in ver

CVE-2026-93765 - Mongoid contains an unsafe reflection weakness in the document persistence layer of its object-docum

CVE-2026-93758 - An insecure direct object reference in the nested attributes handling of the Mongoid object-document

CVE-2026-93579 - A flaw was found in Netty's HTTP/2 stack. This vulnerability allows a remote attacker to inject proh

CVE-2026-93559 - A vulnerability was identified in Forget-C Jellyfish AI Short Drama Studio 0.1.0-alpha/0.2.0/0.3.0/0

CVE-2026-93534 - A vulnerability was identified in spatie Scotty up to 1.4.2. Affected is the function SelfUpdater::u

CVE-2026-93533 - A vulnerability was determined in spatie Scotty up to 1.4.4. This impacts the function DoctorCommand

CVE-2026-93338 - Grandstream GWN7660ELR before firmware version 1.0.27.6 contains an information disclosure vulnerabi

CVE-2026-91149 - A flaw was found in Cockpit. An unauthenticated remote attacker can exploit this vulnerability by in

CVE-2026-91147 - A flaw was found in `cockpit-ws`. This vulnerability allows a remote, unauthenticated attacker to ca

CVE-2026-91142 - A flaw was found in Cockpit. An integer overflow vulnerability in the `do_lastlog()` function, speci

CVE-2026-85497 - CareCam CM2507 IP cameras store the device's root-account password using a fixed legacy password has

CVE-2026-85478 - A CM2507 IP camera running firmware version HMT.CM2507 v251211.1507 exposes an interactive bootloade

CVE-2026-81505 - Convoy is a cloud native webhooks gateway. Prior to 26.6.8, Convoy's GET /api/v1/projects/{projectID

CVE-2026-81321 - CM2507 IP cameras store configured wireless network credentials in cleartext within the device files

CVE-2026-77616 - Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query dat

CVE-2026-77610 - Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query dat

CVE-2026-77609 - Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query dat

CVE-2026-77608 - Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query dat

CVE-2026-77607 - Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query dat

CVE-2026-77606 - Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query dat

CVE-2026-77339 - Process Compose is a scheduler and orchestrator for non-containerized applications. Prior to 1.120.0

CVE-2026-77301 - adm-zip is a JavaScript library for creating and extracting ZIP archives in Node.js. Prior to 0.6.1,

CVE-2026-77240 - WACRM is a self-hostable CRM template for WhatsApp. In version 0.7.0 and earlier, the profiles_updat

CVE-2026-77239 - WACRM is a self-hostable CRM template for WhatsApp. In version 0.7.0 and earlier, WACRM flow and aut

CVE-2026-73863 - NanoMQ is an MQTT broker. Prior to 0.24.14, NanoMQ's broker-side MQTT v5 nmq_subinfo_decode() functi

CVE-2026-63406 - AnyCable is a realtime server for reliable two-way communication that supports any backend. Prior to

CVE-2026-63405 - AnyCable is a realtime server for reliable two-way communication that supports any backend. Prior to

CVE-2026-63349 - AnyIO is a high level asynchronous concurrency and networking framework that works on top of either

CVE-2026-62943 - btrbk is a tool for creating snapshots and remote backups of Btrfs subvolumes. From 0.29.0 until 0.3

CVE-2026-61833 - zot is a container image and artifact registry based on the Open Container Initiative Distribution S

CVE-2026-61795 - Capsule is a multi-tenancy and policy-based framework for Kubernetes. From 0.13.0 until 0.13.7, host

CVE-2026-61794 - Capsule is a multi-tenancy and policy-based framework for Kubernetes. From 0.13.0 until 0.13.7, the

CVE-2026-61672 - Capsule is a multi-tenancy and policy-based framework for Kubernetes. Prior to 0.13.7, ForbiddenList

CVE-2026-61633 - NanoMQ is an MQTT broker. Prior to 0.24.14, the NanoMQ client function nni_mqtt_msg_decode_unsubscri

CVE-2026-61548 - Rsyslog is a rocket-fast system for log processing. From 7.5.4 until 8.2606.0, the optional mmpstruc

CVE-2026-58197 - ToolHive is a utility designed to simplify the deployment and management of Model Context Protocol s

CVE-2026-55556 - Rsyslog is a rocket-fast system for log processing. From 8.2110.0 until 8.2604.0, the optional imhtt

CVE-2026-46655 - virtio-win provides Windows paravirtualized drivers for QEMU and KVM. From mm210 until mm320, the Vi

CVE-2026-44639 - NanoMQ is an MQTT broker. Prior to 0.24.14, NanoMQ's MQTT v5 property decoder in nng/src/supplementa

CVE-2026-93737 - Azkaban through 4.0.0 omits project permission checks in the ScheduleServlet fetchSchedule action, a

CVE-2026-93736 - Mealie before 3.21.0 fails to validate user ownership in the ratings and favorites endpoints, allowi

CVE-2026-93690 - uri-js through 4.4.1 contains a denial of service vulnerability in the removeDotSegments function th

CVE-2026-93689 - WinFsp through 2.2.26215 contains a null pointer dereference vulnerability in the kernel driver's Fa

CVE-2026-93688 - SGLang through 0.5.19 in prefill/decode disaggregation mode with Mooncake KV transfer backend fails

CVE-2026-93687 - braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack

CVE-2026-93532 - A security vulnerability has been detected in gedelumbung HospitalManagement up to c2d45543789a38870

CVE-2026-93531 - A weakness has been identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d4

CVE-2026-88259 - CareCam CM2507 IP cameras do not require authentication for access to its network video streaming se

CVE-2026-86689 - Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time da

CVE-2026-86520 - Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time da

CVE-2026-84451 - libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.3, the no-icef fu

CVE-2026-84450 - libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.3, a crafted imag

CVE-2026-84449 - libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.19.6, Op_RGB24_32_to_YCbCr::c

CVE-2026-84448 - libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, the public heif_region_

CVE-2026-84447 - libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.1 and earlier, crafted grid, iov

CVE-2026-84446 - libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, crafted HEIF sequence t

CVE-2026-84444 - libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, when WITH_UNCOMPRESSED_

CVE-2026-84400 - CareCam CM2507 IP cameras contain an insufficiently protected network maintenance mechanism that can

CVE-2026-84398 - CM2507 IP cameras accept an empty password for a privileged account exposed through its ONVIF manage

CVE-2026-84384 - libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.2, crafted HEIF o

CVE-2026-84383 - libheif is a HEIF and AVIF file format decoder and encoder. From 1.22.0 until 1.23.2, a crafted HEIF

CVE-2026-81946 - PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 an

CVE-2026-81945 - PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 an

CVE-2026-81944 - PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 an

CVE-2026-81943 - PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 an

CVE-2026-81942 - PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 an

CVE-2026-81305 - CM2507 IP cameras automatically execute a predetermined script from removable media without verifyin

CVE-2026-7006 - Sublime Text for Windows through Build 4192 (Sublime Text 4) and Build 3207 (Sublime Text 3) contain

CVE-2026-77960 - Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time da

CVE-2026-77568 - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-15747. Reason:

CVE-2026-75883 - The code in pppd that formats a response to a PEAP Request packet in peap_response() copies an entir

CVE-2026-75031 - In the interchange/interchange project, a critical remote code execution (RCE) vulnerability was fou

CVE-2026-68914 - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-14803. Reason:

CVE-2026-67549 - OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format

CVE-2026-65970 - OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format

CVE-2026-65969 - OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format

CVE-2026-63638 - OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format

CVE-2026-63635 - OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format

CVE-2026-63422 - OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format

CVE-2026-63420 - OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format

CVE-2026-63419 - OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format

CVE-2026-61682 - kcp is a Kubernetes-like control plane for form-factors and use-cases beyond Kubernetes and containe

CVE-2026-60115 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-59956 - OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format

CVE-2026-59181 - OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format

CVE-2026-59156 - OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format

CVE-2026-54148 - http4k is a functional toolkit for Kotlin HTTP applications. Prior to 4.51.0.0, 5.42.0.0, and 6.50.0

CVE-2026-54147 - http4k is a functional toolkit for Kotlin HTTP applications. Prior to 4.51.0.0, 5.42.0.0, and 6.50.0

CVE-2026-1037 - IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2

CVE-2026-1031 - IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2

CVE-2026-1030 - IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2

CVE-2026-1029 - IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2

CVE-2026-1025 - IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2

CVE-2026-11537 - IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to obtain sensitive info

CVE-2026-11381 - IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arb

CVE-2026-11378 - IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arb

CVE-2026-11375 - IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arb

CVE-2026-10858 - IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denia

CVE-2026-10853 - IBM MQ could allow an authenticated attacker with cluster access to cause a denial of service or pot

CVE-2026-10841 - IBM WebSphere Application Server 8.5, 9.0, and Liberty are vulnerable to HTTP request smuggling.

CVE-2026-10751 - IBM MQ Java and JMS client libraries could allow an authenticated attacker to execute arbitrary code

CVE-2026-10747 - IBM MQ Appliance could allow a remote attacker to cause a denial of service or potentially execute a

CVE-2026-10744 - IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denia

CVE-2026-10575 - IBM MQ could allow an authenticated attacker to cause a denial of service or potentially escalate pr

CVE-2026-10030 - IBM MQ Console allows authenticated non-administrative users to create and start queue managers due

CVE-2026-10027 - IBM MQ could allow a remote attacker to cause a denial of service or execute arbitrary code due to a

CVE-2025-61682 - Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query dat

CVE-2025-53837 - XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki sy

CVE-2025-36421 - IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 transmits data in clear text

CVE-2025-36178 - IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 could allow an authenticated

CVE-2025-36147 - IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4.0 through 3.2.4.16 is

CVE-2025-36076 - IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 stores sensitive infor

CVE-2025-36045 - IBM TS4300 1.1.0.1 through 1.7.1.1 could allow an authenticated user to cause a denial of service in

CVE-2025-33147 - IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 could allow an attacke

CVE-2025-33141 - IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 006 could allow an authenticated user to obtain sens

CVE-2025-15399 - IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2

CVE-2025-14754 - IBM Cloud Pak for Data 5.1.2 could allow an authenticated user to execute arbitrary commands with el

CVE-2025-14753 - IBM Cloud Pak for Data 5.1.2 could allow a remote attacker to traverse directories on the system. An

CVE-2026-93685 - A flaw was found in the multicluster-observability-addon. A remote attacker can access a debug endpo

CVE-2026-93676 - xdg-dbus-proxy incorrectly filters D-Bus broadcast messages, bypassing configured path, interface, a

CVE-2026-93660 - SQLBot through 1.10.1 fails to verify dashboard ownership in update_resource and update_canvas endpo