Search Vulnerabilities

Beetel 777VR1 Telnet Service/SSH Service insecure default initialization of resource

FUXA Unauthenticated Remote Code Execution via Hardcoded JWT Secret in Default Configuration

Advanced Country Blocker <= 2.3.1 - Unauthenticated Authorization Bypass via Insecure Default Secret Key

terraform-provider-proxmox has insecure sudo recommendation in the documentation

Unauthenticated SOAP API in dormakaba access manager

Unauthenticated SOAP API in dormakaba Kaba exos 9300

Harvest may expose OS default ssh login password via SUSE Virtualization Interactive Installer

Stored Cross-site Scripting (XSS) in Kentico Xperience 13

Initialization of a Resource with an Insecure Default in YAOOK

Misskey has a login rate limit bypass via spoofed X-Forwarded-For header

In GroupSession Free edition prior to ver5

DNS Rebinding Protection Disabled by Default in Model Context Protocol Python SDK for Servers Running on Localhost

DNS Rebinding Protection Disabled by Default in Model Context Protocol TypeScript SDK for Servers Running on Localhost

HCL BigFix SaaS Remediate is affected by a security vulnerability

Vault Terraform Provider Applied Incorrect Defaults for LDAP Auth Method

Abilis CPX Fallback Shell Connection Relay

DNN CKEditor Provider allows unauthenticated upload out-of-the-box

VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)

In Liferay Portal 7

WAGO: Vulnerability in hardware switch circuit