Open Source Vulnerabilities
SOCFortress CoPilot: Hardcoded Default Header Secret - Unauthenticated Active-Response Invocation and Alert Injection
SOCFortress CoPilot: Hardcoded Default Header Secret - Unauthenticated Active-Response Invocation and Alert Injection
SOCFortress CoPilot: Stored comment and SOC-field XSS permits privileged account takeover
SOCFortress CoPilot: Stored comment and SOC-field XSS permits privileged account takeover
SOCFortress CoPilot: Cross-Tenant Arbitrary Object-Store Write via the Data-Store Upload Endpoint (customer_user)
SOCFortress CoPilot: Cross-Tenant Arbitrary Object-Store Write via the Data-Store Upload Endpoint (customer_user)
commercial-gitlab-rails-ee-19.2
commercial-gitlab-rails-ee-19.2
commercial-gitlab-rails-ee-19.2
az, az
python-cryptography is a package designed to expose cryptographic primitives and recipes to Python developers
az/ az
python-cryptography is a package designed to expose cryptographic primitives and recipes to Python developers
az, az
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers
az/ az
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers
az, az
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers
az/ az
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers
wazuh-dashboard-dashboards-notifications-fips
libmspack, libmspack, libmspack
libmspack
CVE-2026-119602 affecting package libmspack 0.11alpha-1
libmspack
CVE-2026-119602 affecting package libmspack 0.11alpha-1
clamav
CVE-2026-119602 affecting package clamav 1.5.4-2
afflib
CVE-2026-119601 affecting package afflib for versions less than 3.7.23-1
afflib
CVE-2026-119601 affecting package afflib for versions less than 3.7.23-1
epiphany-browser, epiphany-browser, epiphany-browser
WHartTest 2.2.0 through 2.8.1 Missing Authorization via task_center Scheduled-Task APIs
WHartTest 2.2.0 through 2.8.1 Missing Authorization via task_center Scheduled-Task APIs
Tamery (Conar) 0.26.1 before 0.99.0 Authorization Bypass via chatsMessages.update
Tamery (Conar) 0.26.1 before 0.99.0 Authorization Bypass via chatsMessages.update
Tamery (Conar) 0.32.0 before 0.99.0 Broken Authorization via connectionsResources.create
Tamery (Conar) 0.32.0 before 0.99.0 Broken Authorization via connectionsResources.create
Songloft 2.9.0 before 2.13.6 Hardcoded Admin Credentials in Embedded Backend
Songloft 2.9.0 before 2.13.6 Hardcoded Admin Credentials in Embedded Backend
ShowDoc through 3.9.5 Authorization Bypass via paramDescLib deleteEntries
ShowDoc through 3.9.5 Authorization Bypass via paramDescLib deleteEntries
MuseBot before 2.0.0 Authentication Bypass via Hard-Coded Session Key
MuseBot before 2.0.0 Authentication Bypass via Hard-Coded Session Key
Blossom through 1.17.1 Authorization Bypass via Folder Endpoints
Blossom through 1.17.1 Authorization Bypass via Folder Endpoints
PowerDNS-Admin through 2026.08.1 Authorization Bypass via /domain/<domain_name>/update
PowerDNS-Admin through 2026.08.1 Authorization Bypass via /domain/<domain_name>/update
FilePress through 3.0.1 Missing Authorization in PicHome Library Folder Operations
FilePress through 3.0.1 Missing Authorization in PicHome Library Folder Operations
CoreShop through 1.5.5 SQL Injection via order Parameter in Agent/GetGoodsPageList
CoreShop through 1.5.5 SQL Injection via order Parameter in Agent/GetGoodsPageList
CoreShop through 1.5.5 SQL Injection via order Parameter in GetGoodsPageList
CoreShop through 1.5.5 SQL Injection via order Parameter in GetGoodsPageList
DataCap through 2025.1.1 Privilege Escalation via allocationRole Missing Authorization
DataCap through 2025.1.1 Privilege Escalation via allocationRole Missing Authorization
