Search Vulnerabilities

AppArmor Base Profile Misconfiguration in snapd Permits Confined Snaps Unauthorized Access to Hashed Passwords via systemd-userdbd

Kronosnet: kronosnet: encryption key exposure in memory after cryptographic configuration changes

Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations

In OpenStack Ironic before 37.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return unreda...

Bludit's persistent authentication tokens not revoked upon account disablement

Gryph Agents Payload Filter Fails to Strip Tool Payload for Sensitive Content

FacturaScripts: Unstripped Image Metadata (EXIF) Leakage via Library Module File Upload/Download

OpenBao's Namespace Deletion May Not Delete Data Properly

ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction

Phoenix Contact: Improper removal of sensitive information in MGUARD products

OpenClaw < 2026.4.14 - Redaction Bypass via sourceConfig and runtimeConfig Aliases

In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext Kubernetes Secret data

Windows Recovery Environment Security Feature Bypass Vulnerability

Global vanishing does not completely remove user email

Trino: Iceberg REST catalog static and vended credentials are accessible via query JSON

Anchorr Privilege Escalation: Jellyseerr User → Anchorr Admin via Stored XSS

Improper Removal of Sensitive Information Before Storage or Transfer in GitLab

Improper Removal of Sensitive Information Before Storage or Transfer in GitLab

tfplan2md has Sensitive Value Exposure in Generated Reports

Qemu-kvm: uefi-vars: information disclosure vulnerability in uefi_vars_write callback