Early Access — Mondoo Vulnerability Intelligence is currently in preview.
Browse and filter security vulnerabilities across ecosystems
Browse and filter security vulnerabilities across ecosystems
Spinnaker vulnerable to SSRF due to improper restrictions on http from user input
Open OnDemand affected by Apache proxy passing sensitive headers
Brightpick Mission Control / Internal Logic Control Unprotected Transport of Credentials
Brightpick Mission Control / Internal Logic Control Unprotected Transport of Credentials
Phoenix Contact: WebSocket Message Interception Leaks Webfrontend Credentials
Audiobookshelf vulnerable to OIDC token exfiltration and account takeover
Brocade ASCG 3.2.0 web interface does not enforce HSTS, as defined by RFC 6797 for ports 8030 and 8100
Security vulnerability exists in Documentum server cloud releases that could allow access to sensitive information which can impact system Operation.
A vulnerability in the media retrieval functionality of Cisco Webex App could allow an unauthenticated, adjacent attacker to gain access to sensiti...
Jberet: jberet-core logging database credentials
PiiGAB M-Bus Unprotected Transport of Credentials
IBM Aspera information disclosure
Apache Tomcat: JSESSIONID Cookie missing secure attribute in some configurations
Insecure transmission of credentials
Moxa MXview Network Management Software
Configuration service port remains open 10 minutes after reboot even when already provisioned
GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the network
An Unprotected Transport of Credentials issue was discovered in ABB Ellipse 8