Alert News 2026 -  2026(23)  2025(47)  2024(19)  2023(11)  2022(19)  2021(21)  2020(40)  2019(27)  2018(32)  2017(54)  2016(100)  2015(118)  2014(139)  OTHER()

2026-04-23 2026-04-23 2026-04-23 VU#748485 Unauthenticated configuration modification vulnerability in Central Office Services - Content Hosting Component
2026-04-22 2026-04-22 2026-04-22 VU#518910 Ollama GGUF Quantization Remote Memory Leak
2026-04-21 2026-04-21 2026-04-21 VU#890999 Radware Alteon has a reflected XSS vulnerability that can execute JavaScript in the host browser
2026-04-21 2026-04-21 2026-04-21 VU#414811 Terrarium contains a vulnerability that allows arbitrary code execution
2026-04-20 2026-04-20 2026-04-20 VU#915947 SGLang is vulnerable to remote code execution when rendering chat templates from a model file
2026-04-09 2026-04-09 2026-04-09 VU#536588 Multiple Heap Buffer Overflows in Orthanc DICOM Server
2026-04-02 2026-04-02 2026-04-02 VU#951662 MuPDF by Artifex contains integer overflow vulnerability.
2026-03-30 2026-03-30 2026-03-30 VU#655822 Kyverno is vulnerable to server-side request forgery (SSRF)
2026-03-30 2026-03-26 2026-03-26 VU#221883 CrewAI contains multiple vulnerabilities including SSRF, RCE and local file read
2026-03-24 2026-03-24 2026-03-24 VU#330121 IDrive for Windows contains local privilege escalation vulnerability
2026-03-24 2026-03-24 2026-03-24 VU#577436 Hard coded credentials vulnerability in GoHarbor's Harbor
2026-03-16 2026-03-16 2026-03-16 VU#624941 LibreChat RAG API contains a log-injection vulnerability
2026-03-12 2026-03-12 2026-03-12 VU#907705 Graphql-upload-minimal has a prototype pollution vulnerability.
2026-03-09 2004-12-10 2026-03-09 VU#976247 Antivirus and Endpoint Detection and Response Archive Scanning Engines may not properly scan malformed zip archives
2026-03-05 2026-02-18 2026-03-05 VU#772695 A flawed TLS handshake implementation affects Viber Proxy in multiple platforms
2026-03-02 2026-03-02 2026-03-02 VU#431821 MS-Agent does not properly sanitize commands sent to its shell tool, allowing for RCE
2026-02-12 2026-02-12 2026-02-12 VU#504749 PyMuPDF path traversal and arbitrary file write vulnerabilities
2026-02-10 2026-02-10 2026-02-10 VU#458422 CASL Ability contains a prototype pollution vulnerability
2026-01-20 2026-01-20 2026-01-21 VU#481830 Libheif uncompressed codec lacks bounds check leading to application crash
2026-01-20 2026-01-20 2026-01-21 VU#102648 Code injection vulnerability in binary-parser library
2026-01-20 2026-01-20 2026-01-20 VU#458022 Open5GS WebUI uses a hard-coded secrets including JSON Web Token signing key
2026-01-20 2026-01-20 2026-01-20 VU#271649 Stack-based buffer overflow in libtasn1 versions v4.20.0 and earlier
2026-01-20 2026-01-20 2026-01-20 VU#818729 Safetica contains a kernel driver vulnerability
2026-01-20 2026-01-20 2026-01-20 VU#244846 Server-Side Template Injection (SSTI) vulnerability exist in Genshi
2026-01-20 2026-01-20 2026-01-20 VU#924114 dr_flac contains an integer overflow vulnerability that allows for DoS when provided a crafted file
2026-01-16 2026-01-16 2026-01-16 VU#383552 thelibrarian does not secure its interface, allowing for access to internal system data
2026-01-16 2026-01-16 2026-01-16 VU#650657 Livewire Filemanager contains an insecure .php component that allows for unauthenticated RCE in Laravel Products
2026-01-15 2026-01-15 2026-01-15 VU#472136 Information Leak and DoS Vulnerabilities in Redmi Buds 3 Pro through 6 Pro
2026-01-09 2026-01-09 2026-01-09 VU#361400 BeeS Software Solutions BeeS Examination Tool (BET) portal contains SQL injection vulnerability
2026-01-06 2026-01-06 2026-01-06 VU#295169 TOTOLINK EX200 firmware-upload error handling can activate an unauthenticated root telnet service
2026-01-06 2026-01-06 2026-01-06 VU#420440 Vulnerable Python version used in Forcepoint One DLP Client