Search Vulnerabilities

Harvest may expose OS default ssh login password via SUSE Virtualization Interactive Installer

Stored Cross-site Scripting (XSS) in Kentico Xperience 13

Initialization of a Resource with an Insecure Default in YAOOK

Misskey has a login rate limit bypass via spoofed X-Forwarded-For header

In GroupSession Free edition prior to ver5

DNS Rebinding Protection Disabled by Default in Model Context Protocol Python SDK for Servers Running on Localhost

DNS Rebinding Protection Disabled by Default in Model Context Protocol TypeScript SDK for Servers Running on Localhost

HCL BigFix SaaS Remediate is affected by a security vulnerability

Vault Terraform Provider Applied Incorrect Defaults for LDAP Auth Method

Abilis CPX Fallback Shell Connection Relay

DNN CKEditor Provider allows unauthenticated upload out-of-the-box

VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)

In Liferay Portal 7

WAGO: Vulnerability in hardware switch circuit

IBM Fusion insecure default configuration

Himmelblau vulnerable to GID collision via group name-derived mapping (privilege escalation)

Rockwell Automation ControlLogix® Ethernet Remote Code Execution Vulnerability

HAXcms's Insecure Default Configuration Leads to Unauthenticated Access

OCPP Backend Configuration via Insecure Defaults

WAGO: Vulnerability in WAGO Device Sphere