Search Vulnerabilities

Capgo - Deleted Bundle Selection via Missing Deletion Filter in /updates Endpoint

Arista EOS IPsec Tunnel Sequence Number Mismatch via Interface Flaps when Anti-Replay is Disabled

Operation on a Resource after Expiration or Termination in Kibana Leading to Unauthorized File Access

OCSP responder certificate validity period not checked in public_key

Possible arbitrary code execution during DNSSEC validation

Discourse: Cached outdated summaries can leak removed content

post edit time limit is not enforced on some post update operations

OpenClaw < 2026.4.23 - Webhook Route Secret Cache Not Invalidated After Rotation

Apache::Session versions through 1.94 for Perl re-creates deleted sessions

OpenClaw < 2026.4.15 - Bearer Token Validation Bypass via Stale SecretRef Resolution

Permalink Preview Information Disclosure After Permission Revocation

Parse Server MFA recovery codes not consumed after use

Heap-use-after-free in CIccCmm::AddXform()

Vulnerable cross-model authorization in juju

In Plex Media Server (PMS) through 1

In JetBrains YouTrack before 2025

BIG-IP HTTP/2 vulnerability

MongoDB may be susceptible to Invariant Failure in Transactions due Upsert Operation

Wasmtime has host panic with `fd_renumber` WASIp1 function

Insecure device pairing in end of life Amazon Cloud Cam