Search Vulnerabilities

In OpenStack Ironic before 37

Bludit's persistent authentication tokens not revoked upon account disablement

Gryph Agents Payload Filter Fails to Strip Tool Payload for Sensitive Content

FacturaScripts: Unstripped Image Metadata (EXIF) Leakage via Library Module File Upload/Download

OpenBao's Namespace Deletion May Not Delete Data Properly

ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction

Phoenix Contact: Improper removal of sensitive information in MGUARD products

OpenClaw < 2026.4.14 - Redaction Bypass via sourceConfig and runtimeConfig Aliases

In Argo CD 3

Windows Recovery Environment Security Feature Bypass Vulnerability

Global vanishing does not completely remove user email

Trino: Iceberg REST catalog static and vended credentials are accessible via query JSON

Anchorr Privilege Escalation: Jellyseerr User → Anchorr Admin via Stored XSS

Improper Removal of Sensitive Information Before Storage or Transfer in GitLab

Improper Removal of Sensitive Information Before Storage or Transfer in GitLab

tfplan2md has Sensitive Value Exposure in Generated Reports

Qemu-kvm: uefi-vars: information disclosure vulnerability in uefi_vars_write callback

Coolify leaksensitive information `email_change_code` in `/api/v1/teams/{team_id | current}/members` API endpoint

CBORDecoder reuse can leak shareable values across decode calls

URI Credential Leakage Bypass over CVE-2025-27221