Search Vulnerabilities

Virt-cdi-operator: containerized-data-importer: cdi.kubevirt.io:view aggregated clusterrole grants create on datavolumes/source, allowing unauthori...

Leantime all versions prior to and 3.6.2 Broken Access Control via tickets.getMilestone JSON-RPC

OpenRemote before 1.26.2 Authentication Bypass via Console Registration

sysPass 3.2.11 Missing Authorization via PublicLinkController Account Decryption

sysPass 3.2.11 Missing Object-Level Authorization via JSON-RPC API

sysPass 3.2.11 Insecure Direct Object Reference via AccountFileController

Keycloak-services: keycloak-services: information disclosure via role-users endpoint bypasses per-user view filter

Kirki <= 6.0.14 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'context' Parameter

Shopper: Multiple data integrity and disclosure issues in admin Livewire components

ITFlow Vulnerable to Authenticated Cross-Tenant Credential Disclosure via Unprotected Credential Modal

AgentGPT 1.0.0 Authorization Bypass via Agent Task Creation

Overseerr 1.35.0 Authorization Bypass via pushSubscriptions API

CyberPanel IncBackups IDOR via Sequential Backup ID

WordPress Shiptastic for WooCommerce plugin <= 5.1.0 - Insecure Direct Object References (IDOR) vulnerability

WordPress Masteriyo - LMS plugin <= 2.3.1 - Insecure Direct Object References (IDOR) vulnerability

WordPress Product Slider for WooCommerce plugin <= 1.13.62 - Insecure Direct Object References (IDOR) vulnerability

WordPress Easy Appointments plugin <= 3.12.27 - Insecure Direct Object References (IDOR) vulnerability

IBM Sterling B2B Integrator and IBM Sterling File Gateway Authorization Bypass

Onlook tRPC Insecure Direct Object Reference via multiple procedures

n8n before 1.123.64, 2.29.8, and 2.30.1 Privilege Escalation via SSO Instance-Role