Search Vulnerabilities

A wildcard replay, as another piece of data, triggers poisoning in the serve expired reply path

Trezor Safe improper security check in on-device display

Secure Boot Security Feature Bypass Vulnerability

Improper Data Validation in liboauth2

DVP80ES3 Improperly Implemented Security Check for Standard vulnerability

Backpropagate: backprop ui --auth and backprop ui --share do not enforce authentication

free5GC: UE Security Capability bypass on NGAP PathSwitchRequest

free5GC: Missing Concurrent NAS SMC Validation During NGAP Handover

Ella Core: UE Downlink Redirection via Forged PDUSessionResourceSetupResponse

Ella Core: UE Security Capability bypass on NGAP PathSwitchRequest

Ella Core: Handover failures during concurrent Security Mode Command

MantisBT has a Content Security Policy bypass via attachments

HCL BigFix Service Management (SM) is affected by a security misconfiguration vulnerability due to CSP header

HCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerability

A security misconfiguration was identified in Eaton Intelligent Power Protector (IPP), where an HTTP response header was set with an insecure attri...

Zcash zcashd before 6

SuiteCRM Vulnerable to Remote Code Execution via Module Loader Package Scanner Bypass

Acceptance of CertificateVerify Message before ClientKeyExchange in TLS 1.2

IBM WebSphere Application Server could provide weaker than expected security

Org.keycloak.protocol.oidc.grants: disabled identity providers are still accepted for jwt authorization grant