n/a vulnerabilities
Every vulnerability this feed holds for n/a, merged from five public registers and ordered by what warrants attention first — exploited in the wild, then CVSS, then recency.
88 vulnerabilities tracked. 1 confirmed exploited in the wild. 6 with public exploit code.
- 7.5 OpenSSL Information Disclosure Vulnerability
- 9.8 An issue in AndBible versionCode 1111 allows attackers to execute arbitrary code via uploading a crafted module zip.
- 9.1 Insecure permissions in Bander Notepad (bander.notepad) versionCode 12 allow unauthorized attackers to write and read notes in another…
- 9.1 DB-GPT v0.7.5 and 0.8.0 contains directory traversal in useexamplefile (packages/dbgpt-app/src/dbgptapp/openapi/apiv1/examplesapi.py:129).
- 8.8 Insecure permissions in the feiertage.ImportActivity component of Arbeitszeiterfassung2 versionCode 159 allows unauthorized attackers to…
- 8.8 Xovis AG APS-R-POE, APS-R-POE-PP, APS-R, APS-R-POE-USB, and APS-B 2.10.1.1 and earlier contains an OS command injection vulnerability in…
- 8.1 An issue in Webasyst Framework 4.0.3 and before allows a remote attacker to execute arbitrary code via a crafted OAuth authorization URL…
- 7.8 An issue in IDrive IDrive Backup for Windows Version 7.0.1.1 and below affected, remediated in Version 7.0.1.2 allows a local attacker to…
- 7.8 An issue in IDrive IDrive Backup for Windows Version 7.0.1.1 and below affected, remediated in Version 7.0.1.2 allows a local attacker to…
- 7.8 An issue in Maltego Technologies GmbH Maltego Windows Installer 4.13.0 allows a local attacker to execute arbitrary code via the Maltego…
- 7.5 A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the imsqosnpn module.
- 7.5 OpenAirInterface Core Network v2.2.1 has a stack-based buffer overflow vulnerability in the OAI CN5G UDM NudmUEAU Generate Authentication…
- 7.5 A path traversal vulnerability in the FeaturedImage component of astro-notion-blog 0.13.0 allows attackers to escape the intended…
- 7.5 Insecure permissions in WikiAndPad alpha/beta v0.2alpha03 (versionCode 200300) allows unauthorized attackers to export the application's…
- 7.5 Insecure permissions in the FeatureActionActivity component of Oasis Feng Island versionCode 51801 allows unauthorized attackers to…
- 7.5 Insecure permissions in klassm AndFHEM v2.4.1 (versionCode 241, the verified build) allows unauthorized attackers to arbitrarily manipulate…
- 7.5 Insecure permissions in craftxbox YubiClip XOR fork v1.0.1 (versionCode 10003) allows unauthorized attackers to trigger the OTP-clipboard…
- 7.5 osmo-msc through 1.15.0 contains a stack-based buffer overflow in decodemmename() in src/libmsc/sgsiface.c.
- 7.5 An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and…
- 7.5 An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList function.
- 7.4 bubblewrap.c in Bubblewrap before 0.3.3 misuses temporary directories in /tmp as a mount point.
- 7.1 Homestay3 homestay-backend 0.0.1-SNAPSHOT contains an IDOR in ChatServiceImpl.
- 6.9 A security vulnerability has been detected in Presenton up to 0.9.11-beta.
- 6.9 A weakness has been identified in Presenton up to 0.9.11-beta.
- 6.5 SuperAGI up to v0.0.14 contains an improper access control vulnerability.
- 6.3 A security flaw has been discovered in NocoDB up to 2026.07.0.
- 6.1 Cross Site Scripting vulnerability in BeeHome MyBeeHome before 2025-11-01 allows a remote attacker to execute arbitrary code via the…
- 5.4 qiujie mall-server 0.0.1-SNAPSHOT contains an integer overflow in CartServiceImpl that allows an authenticated user to wrap a cart quantity…
- 5.3 Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue.
- 5.3 A Server-Side Request Forgery (SSRF) in the url/title/author/coverUrl component of FocusPodcast versionCode 70allows attackers to scan…
- 5.3 A security vulnerability has been detected in Kameleo up to 5.3.1.
- 5.3 A vulnerability has been found in JIZHICMS up to 2.5.6.
- 5.3 A vulnerability was identified in libimobiledevice up to 1.4.0.
- 5.3 A security flaw has been discovered in GouGuOA up to 6.1.2.
- 5.1 A flaw has been found in Typemill up to 2.26.0.
- 5.1 A security flaw has been discovered in PostyBirb Plus up to 3.1.75.
- 5.1 Insecure permissions in Mission Control / AIMSICD versionCode 2026080501 allows unauthorized attackers to invoke an exported component,…
- 5.1 A security vulnerability has been detected in libimobiledevice up to 1.4.0.
- 5.1 A vulnerability was found in NocoDB up to 2026.08.0.
- 5.1 An out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and used to match specially crafted subjects…
- 4.8 A vulnerability has been found in Argilla up to 2.8.0.
- 4.8 A vulnerability was identified in Kameleo up to 5.0.1.26.
- 4.3 An issue in Systrome Validation & Certification 1.0 allows an attacker to cause a denial of service via the t URL parameter in the…
- — Keyfactor EJBCA through 9.3.3 performs insufficient authorization checks when self-renewing a client certificate via the RA (Registration…
- — A resource exhaustion issue exists in Free5GC v4.2.3 during PFCP Session Establishment failure handling.
- — An integer underflow vulnerability in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticated remote attacker…
- — Directory Traversal vulnerability in Gleez GleezCMS v.1.2.0 allows a remote attacker to obtain sensitive information via the actionserve…
- — A denial-of-service vulnerability exists in open5GS v2.8.0 in the PFCP transaction handling path.
- — An out-of-bounds memory access vulnerability in the N2 SCTP interface of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticated…
- — An integer truncation vulnerability in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticated remote attacker…
- — A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the imsregistrarpcscf module.
- — A memory exhaustion issue exists in Open5GS v2.8.0 in the HTTP/2 SBI server.
- — Heap/stack buffer overflow in the dlanglname function in d-demangle.c in libiberty allows attackers to potentially cause a denial of…
- — A crafted input file could cause a null pointer dereference in jcopysamplerows() when processed by libjpeg-turbo.
- — A use-after-free flaw was found in the Linux kernel's NFC core functionality due to a race condition between kobject creation and delete.
- — A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped() function.
- — A flaw was found in the Linux kernel.
- — A vulnerability was found in the Linux kernel's EBPF verifier when handling internal data structures.
- — A flaw was found in unzip.
- — An out-of-bounds (OOB) memory access flaw was found in the Linux kernel's eBPF due to an Improper Input Validation.
Showing the 60 that warrant attention first, of 88. Search the full feed for n/a.
What this covers
This feed accumulates forward from the day it started storing records, and a name search that finds nothing here is also looked up against the registers directly — so an older advisory resolves even when it predates the corpus. It is still a reading view, not a substitute for the vendor's own advisory, and absence from this page is not a statement that n/a is free of vulnerabilities.
Query this from an agent over MCP · Check a lockfile by version
Other vendors tracked here
Microsoft Red Hat MediaTek, Inc. Linux Apache Software Foundation Gitea WAVLINK Huawei Eclipse Foundation WSO2 Dell Control Web Panel Hewlett Packard Enterprise (HPE) nodejs Cisco MONGODB Netpbm zephyrproject Unknown mathurvishal Citrix aws Roundcube ag-ui-protocol