Browse CVEs

MEDIUM 5.5 CVE-2026-21495 iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to… Iccdev 2.3.1.2+ Fix from $1,6002026-01-07 MEDIUM 5.5 CVE-2026-21496 iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to… Iccdev 2.3.1.2+ Fix from $1,6002026-01-07 MEDIUM 5.5 CVE-2026-21497 iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to… Iccdev 2.3.1.2+ Fix from $1,6002026-01-07 MEDIUM 5.5 CVE-2026-21498 iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to… Iccdev 2.3.1.2+ Fix from $1,6002026-01-07 MEDIUM 5.5 CVE-2026-21499 iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to… Iccdev 2.3.1.2+ Fix from $1,6002026-01-07 HIGH 7.8 CVE-2026-21500 iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to… Iccdev 2.3.1.2+ Fix from $1,9502026-01-07 HIGH 7.5 CVE-2025-66786 OpenAirInterface CN5G AMF<=v2.0.1 There is a logical error when processing JSON format requests. Unauthorized remote attackers can send malicious JSO… Oai Cn5g Amf after 2.0.1 Fix from $1,9502026-01-07 CRITICAL 9.6 CVE-2025-12543 A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications. The Undertow library fails to pr… Build Of Apache Camel 2.2.39 / 2.3.21+ Fix from $2,3002026-01-07 HIGH 7.1 CVE-2026-21487 iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below have an Out-of-bounds Read, U… Iccdev 2.3.1.2+ Fix from $1,9502026-01-06 HIGH 8.8 CVE-2026-21677 iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have Undefined Behavior in its … Iccdev 2.3.1.1+ Fix from $1,9502026-01-06 HIGH 8.8 CVE-2026-21485 iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below are prone to have Undefined B… Iccdev 2.3.1.2+ Fix from $1,9502026-01-06 CRITICAL 9.8 CVE-2026-21675 iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below contain a Use After Free vulner… Iccdev 2.3.1.1+ Fix from $2,3002026-01-06 MEDIUM 6.6 CVE-2025-61916 Spinnaker is an open source, multi-cloud continuous delivery platform. Versions prior to 2025.1.6, 2025.2.3, and 2025.3.0 are vulnerable to server-si… Spinnaker 2025.1.6 / 2025.2.3+ Fix from $1,6002026-01-05 HIGH 7.1 CVE-2025-52519 An issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 2400, 1580, and 2500. Improper vali… Exynos 1330 Firmware Mitigation only Fix from $1,9502026-01-05 MEDIUM 6.3 CVE-2025-15453 A security vulnerability has been detected in milvus up to 2.6.7. This vulnerability affects the function expr.Exec of the file pkg/util/expr/expr.go… Mitigation only Fix from $1,6002026-01-05 HIGH 7.2 CVE-2025-15438 A vulnerability was determined in PluXml up to 5.8.22. Affected is the function FileCookieJar::__destruct of the file core/admin/medias.php of the co… Pluxml after 5.8.22 Fix from $1,9502026-01-02 CRITICAL 9.1 CVE-2025-69288 Titra is open source project time tracking software. Prior to version 0.99.49, Titra allows any authenticated Admin user to modify the timeEntryRule … Titra 0.99.49+ Fix from $2,3002025-12-31 HIGH 8.8 CVE-2025-15375 A flaw has been found in EyouCMS up to 1.7.7. The impacted element is the function unserialize of the file application/api/controller/Ajax.php of the… Eyoucms 1.7.8+ Fix from $1,9502025-12-31 MEDIUM 6.3 CVE-2025-15246 A vulnerability was determined in aizuda snail-job up to 1.7.0 on macOS. Affected by this vulnerability is the function FurySerializer.deserialize of… Mitigation only Fix from $1,6002025-12-30 HIGH 7.5 CVE-2025-15358 DVP-12SE11T - Denial of Service Vulnerability Dvp 12se11t Firmware 2.16+ Fix from $1,9502025-12-30 MEDIUM 5.0 CVE-2025-15222 A vulnerability has been found in Dromara Sa-Token up to 1.44.0. This issue affects the function ObjectInputStream.readObject of the file SaSerialize… Mitigation only Fix from $1,6002025-12-30 MEDIUM 6.3 CVE-2025-69205 Micro Registration Utility (µURU) is a telephone self registration utility based on asterisk. In versions up to and including commit 88db9a953f38a302… Mitigation only Fix from $1,6002025-12-29 HIGH 7.5 CVE-2025-66864 An issue was discovered in function d_print_comp_inner in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via craft… Binutils No fix yet Fix from $1,9502025-12-29 HIGH 7.5 CVE-2025-66866 An issue was discovered in function d_abi_tags in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE fi… Binutils No fix yet Fix from $1,9502025-12-29 MEDIUM 5.4 CVE-2025-8075 Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has discovered th… Xno 8082r Firmware 2.23.00 / 2.24.00+ Fix from $1,6002025-12-26 HIGH 7.2 CVE-2025-52600 Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has discovered a … Xno 8082r Firmware 2.24.00+ Fix from $1,9502025-12-26 CRITICAL 9.8 CVE-2025-8769 Telenium Online Web Application is vulnerable due to a Perl script that is called to load the login page. Due to improper input validation, an atta… Mitigation only Fix from $2,3002025-12-24 CRITICAL 9.9 CVE-2025-68667 Conduit is a chat server powered by Matrix. A vulnerability that affects a number of Conduit-derived homeservers allows a remote, unauthenticated att… Patch available Fix from $2,3002025-12-23 HIGH 8.8 CVE-2025-59886 Improper input validation at one of the endpoints of Eaton xComfort ECI's web interface, could lead into an attacker with network access to the dev… Xcomfort Ethernet Communication Interface Mitigation only Fix from $1,9502025-12-23 HIGH 7.5 CVE-2025-59301 Delta Electronics DVP15MC11T lacks proper validation of the modbus/tcp packets and can lead to denial of service. Dvp15mc11t Firmware 1.16.0+ Fix from $1,9502025-12-22