Search Vulnerabilities

Wago: Vulnerability in Smart Designer Web-Application

Parse Server: Protected field change detection oracle via LiveQuery watch parameter

Discourse has inferable private group membership or existence via exclude_groups parameter

Compiler-induced timing leak in sp_256_get_entry_256_9 on RISC-V

Non-constant time multiplication subroutine __muldi3 on RISC-V RV32I

Authlib Vulnerable to JWE RSA1_5 Bleichenbacher Padding Oracle

Private channel enumeration via /mute slash command

projectsend Auth.php response discrepancy

OpenClaw File Existence tools.exec.safeBins information exposure

Go Ethereum Improperly Validates the ECIES Public Key in RLPx Handshake

GFI MailEssentials AI < 22.4 ListServer.IsPathExist() Absolute Directory Traversal to File Enumeration

GFI MailEssentials AI < 22.4 ListServer.IsDbExist() Absolute Directory Traversal to File Enumeration

OwnCloud 8.1.8 - Username Disclosure

Directus Affected by User Enumeration via Password Reset Timing Attack

WeKan < 8.19 Attachments Publication Information Disclosure

AnythingLLM Vulnerable to Username Enumeration w/ Password Recovery

H3C SSL VPN n/a Username Enumeration via Login Script Credential Verification

GLPI 9.5.7 Username Enumeration Vulnerability via Lost Password Endpoint

In JetBrains TeamCity before 2025

Potential non-constant time compiled code with Clang LLVM