CVE Program partner

securin

Securin

API
CVEs, 365 days7374 all time, 0 rejected
Quality99%median 99%
CVSS by the CNA98%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA1%lower is better
OrganisationSecurin
RoleCNA
TypeVendor, Open Source, Researcher
Reports tomitre
ScopeVulnerabilities found in Securin products and services (including end-of-life/end-of-service products), as well as vulnerabilities in third-party software discovered by Securin that are not in another CNA’s scope.
Advisorieshttps://www.securin.io/discover-zero-days

Latest CVEs · RSS

  • CVE-2026-105429 2026-10-14 · CVSS 8.9
    Improper neutralization of special elements in the NetBird client SSH configuration manager (client/ssh/config/manager.go) in NetBird versions 0.60.0 through 0.
  • CVE-2026-107911 2026-10-09 · CVSS 7.7
    A type confusion vulnerability in the _read_flags function (src/commands/cmd_dispatcher.c) in FalkorDB before 4.20.0 allows a remote authenticated attacker who
  • CVE-2026-107910 2026-10-09 · CVSS 9.2
    An improper authentication vulnerability in the is_authenticated function (src/bolt/bolt_api.c) in FalkorDB before 4.20.0 allows a remote unauthenticated attack
  • CVE-2026-107909 2026-10-09 · CVSS 8.8
    A heap-based out-of-bounds write in the ws_read_frame function (src/bolt/ws.c) and the buffer_apply_mask function (src/bolt/buffer.c) in FalkorDB before 4.20.0
  • CVE-2026-107908 2026-10-09 · CVSS 9.3
    A heap-based out-of-bounds write in the BoltReadHandler function (src/bolt/bolt_api.c) in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to cau
  • CVE-2026-7826 2026-10-09 · CVSS 8.8
    A heap-based out-of-bounds read in the BufferSerializerIOv2_ReadBuffer function (src/serializers/serializer_io.c) in FalkorDB before 4.18.4 allows a remote atta
  • CVE-2026-7827 2026-10-09 · CVSS 9.2
    A stack-based buffer overflow in the _RdbLoadEntity function of the RDB graph decoders (src/serializers/decoders/*/decode_graph_entities.c) in FalkorDB before 4
  • CVE-2026-5759 2026-10-09 · CVSS 9.3
    A double free and use-after-free vulnerability in the RdbLoadDeletedNodes function of the RDB graph decoders (src/serializers/decoders/*/decode_graph_entities.c
  • CVE-2026-107615 2026-10-08 · CVSS 7.8
    An uncontrolled search path element vulnerability in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to execute arbitrary c
  • CVE-2026-107614 2026-10-08 · CVSS 6.1
    An integer underflow in WinCursorShapeUtils::trimTransparent() in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to crash
  • CVE-2026-107613 2026-10-08 · CVSS 5.9
    A NULL pointer dereference vulnerability in the Win8ScreenDriver component of GlavSoft TightVNC Server for Windows before 2.8.88 allows an attacker to crash the
  • CVE-2026-107612 2026-10-08 · CVSS 7.8
    Incorrect permission assignment in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to read or overwrite the inter-process c
  • CVE-2026-107611 2026-10-08 · CVSS 7.1
    An out-of-bounds read vulnerability in the ZRLE decoder of GlavSoft TightVNC Viewer for Windows before 2.8.88 allows a malicious or compromised VNC server to re
  • CVE-2026-44038 2026-10-08 · CVSS 4.8
    A global out-of-bounds read in the Huffman decoder of the bundled IJG JPEG libraries (dcmjpeg/libijg8, libijg12 and libijg16) of OFFIS DCMTK 3.7.0 allows an att
  • CVE-2026-44037 2026-10-08 · CVSS 6.8
    Uncontrolled mutual recursion between DcmJSONReader::parseDataSet(), DcmJSONReader::parseElement() and DcmJSONReader::parseSequence() in dcmdata/libsrc/dcjsonrd
  • CVE-2026-44036 2026-10-08 · CVSS 6.8
    Uncontrolled mutual recursion between DcmXMLParseHelper::parseDataSet() and DcmXMLParseHelper::parseSequence() in the XML-to-DICOM converter (dcmdata/libdcxml/x
  • CVE-2026-44035 2026-10-08 · CVSS 6.8
    Uncontrolled recursion in DcmDicomDir::moveRecordToTree() in dcmdata/libsrc/dcdicdir.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (st
  • CVE-2026-44034 2026-10-08 · CVSS 4.8
    A heap-based out-of-bounds read in DcmRLECodecDecoder::decodeFrame() in dcmdata/libsrc/dcrleccd.cc of OFFIS DCMTK 3.7.0 allows an attacker to read up to 63 byte
  • CVE-2026-44033 2026-10-08 · CVSS 6.8
    Uncontrolled recursion in XMLNode::ParseXMLElement() and XMLNode::emptyTheNode() in the bundled XML parser (ofstd/libsrc/ofxml.cc) of OFFIS DCMTK 3.7.0 allows a
  • CVE-2026-44031 2026-10-08 · CVSS 8.7
    Uncontrolled recursion in DcmSequenceOfItems::read() and DcmItem::read() in the dcmdata library of OFFIS DCMTK 3.7.0 allows a remote, unauthenticated attacker t
  • CVE-2026-7840 2026-07-01 · CVSS 9.8
    UltraVNC repeater through 1.8.2.2 contains a global buffer overflow in its embedded HTTP administration server. The functions wi_senderr() and wi_replyhdr() in
  • CVE-2026-7839 2026-07-01 · CVSS 9.1
    UltraVNC repeater through 1.8.2.2 initializes the HTTP administration server with a hardcoded default password. In repeater/webgui/settings.c:197, when settings
  • CVE-2026-7838 2026-07-01 · CVSS 8.8
    UltraVNC viewer through 1.8.2.2 contains an integer overflow leading to a heap buffer overflow in the RFB protocol failure-response parsing path. In vncviewer/C
  • CVE-2026-7831 2026-07-01 · CVSS 7.5
    UltraVNC viewer through 1.8.2.2 contains an off-by-one stack buffer overflow in the RFB ServerInit message handler. In vncviewer/ClientConnection.cpp, when the
  • CVE-2026-7830 2026-07-01 · CVSS 7.4
    UltraVNC through 1.8.2.2 uses inadequate cryptography in the MS-Logon II authentication scheme (rfbUltraVNC_MsLogonIIAuth). In rfb/dh.cpp the Diffie-Hellman key

All CVE Program partners