Search Vulnerabilities

GNU Savannah Administration Savane through 3.17 uses untrusted data as part of authorization

Indian Scout Bobber 2025 Infotainment Digital Round skips PIN entry when WCM is silent at boot

Indian Scout Bobber 2025 Infotainment Digital Round skips PIN entry when WCM is silent at boot

In OpenStack Ironic through 35.x before a3f6d73, during image handling, an infinite loop in checksum calculations can occur via the file:///dev/zer...

GitHub Copilot CLI: Nested Bare Repository Can Execute Arbitrary Commands via core.fsmonitor

Tor before 0.4.9.7 mishandles accounting of the conflux out-of-order queue during the clearing of a queue, aka TROVE-2026-010

An issue was discovered in OpenStack Horizon 25.6 and 25.7 before 25.7.3

UltraDAG: SmartOp Vote Path Triggers Fatal Supply Invariant Halt

Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication

OpenClaw < 2026.3.22 - Unauthorized Action Execution via Callback Dispatch

In systemd 258 before 260, a local unprivileged user can trigger an assert when a Delegate=yes and User=<unset> unit exists and is running

OpenClaw < 2026.3.25 - Denial of Service via Unauthenticated Webhook Request Parsing

OpenClaw < 2026.3.22 - Premature Cite Expansion Before Authorization in Channel and DM

OpenClaw 2026.3.11 < 2026.3.25 - Session Isolation Bypass via sessionId Resolution

OpenClaw < 2026.3.22 - Unauthenticated Cryptographic Work in Nostr Inbound DM Handling

In OpenSSH before 10.3, command execution can occur via shell metacharacters in a username within a command line

OpenEMR has Authorization Bypass in FaxSMS AppDispatch Constructor

Unallocated memory access vulnerability in print processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Generic Plus...

BMC Control-M/Agent improper IP address filtering order

Mbed TLS before 3.6.4 has a NULL pointer dereference because mbedtls_asn1_store_named_data can trigger conflicting data with val.p of NULL but val....