Search Vulnerabilities

Craft has a potential authenticated Remote Code Execution via malicious attached Behavior

Craft CMS vulnerable to potential authenticated Remote Code Execution via malicious attached Behavior

Barracuda RMM < 2025.1.1 Service Center Insecure Reflection RCE

An issue in AWS Wrappers for Amazon Aurora PostgreSQL may allow for privilege escalation to rds_superuser role

Astro's `X-Forwarded-Host` is reflected with no validation

HTML Cache Poisoning through Unsafe Reflections

CWE-470 in generator-jhipster-entity-audit when having Javers selected as Entity Audit Framework

Kentico Xperience <= 13.0.180 Unsafe Reflection

Unsafe Reflection in base Component class in yiisoft/yii2

The Addressing GLPI plugin allows data enumeration through uncontrolled object instantiation

A high-severity vulnerability that can lead to arbitrary code execution on the system hosting the Web SDK role was found in the Genetec Security Ce...

Telerik Report Server Insecure Type Resolution

Telerik Reporting Insecure Expression Evaluation

Telerik Reporting EntityDataSource Insecure Type Resolution

Unsafe Deserialization Vulnerability

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in the licensing feature of Mitsubishi Electric Ic...

Reflex arbitrary method call in stimulus_reflex

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Mitsubishi Electric Corporation EZSocket versio...

Unsafe Reflection in Github Enterprise Server leading to Command Injection

SailPoint IdentityIQ Unsafe use of Reflection Vulnerability