Search Vulnerabilities

Apache Airflow Providers Edge3: Edge3 Worker RPC RCE on Airflow 2

Mercku M6a devices through 2

XMLUnit for Java before 2

The Restaurant Brands International (RBI) assistant platform through 2025-09-06 allows remote attackers to review the stored audio of conversations...

In SonarQube before 25

The EKEN video doorbell T6 BT60PLUS_MAIN_V1

PureVPN client applications on Linux through September 2025 allow IPv6 traffic to leak outside the VPN tunnel upon network events such as Wi-Fi rec...

PureVPN client applications on Linux through September 2025 mishandle firewalling

Click Studios Passwordstate before 9

In guix-daemon in GNU Guix before 1618ca7, a content-addressed-mirrors file can be written to create a setuid program that allows a regular user to...

In One Identity OneLogin before 2025

Plex Media Server (PMS) 1

The gh package before 1

WordPress 3

qBittorrent before 5

SMA: Sunny Portal demo system privilege escalation

@misskey-dev/summaly Redirect Filter Bypass

Incorrect resource transfer between spheres issue exists in RevoWorks SCVX and RevoWorks Browser

yt-dlp and youtube-dl vulnerable to file system modification and RCE through improper file-extension sanitization

Proxy-Authorization request header isn't stripped during cross-origin redirects in urllib3