Search Vulnerabilities

Apache NimBLE: Mesh Proxy SAR reassembly unbounded append and unchecked failure

Microsoft Surface Remote Code Execution Vulnerability

Skipper Incomplete Fix for CVE-2026-50197 Policy Bypass

DbGate: Unauthenticated Remote Code Execution via JSON Script Runner

Remote Code Execution in fastjson 1.2.68–1.2.83

boazsegev facil.io WebSocket Frame websocket_parser.h websocket_on_protocol_error input validation

Authorization Bypass via Client-Supplied $search.mergingPipeline Leaks Unauthorized Collection Data Through $$SEARCH_META

Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the REST API

Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the REST API

Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the REST API

Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability

'dns-error-reporting: yes' leads to stack buffer overflow

Denial-of-Service in OpenCanary's MongoDB module

Insufficient validation of untrusted input in Certificate in Google Chrome on Linux prior to 150.0.7871.182 allowed an attacker in a privileged net...

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to spoof the contents o...

Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 150.0.7871.182 allowed a local attacker to potentially perform a...

An authenticated non-admin user can exploit a SQL injection flaw in the ticketing REST API to access sensitive data stored in the appliance database

Path traversal in Progress ShareFile Storage Zones Controller (SZC)

Possible panic when incorrect parameters sent from frontend

MapSVG <= 8.14.0 - Authenticated (Administrator+) Arbitrary File Upload via '/mapsvg/v1/svgfile' Endpoint