Search Vulnerabilities

Permalink Preview Information Disclosure After Permission Revocation

Parse Server MFA recovery codes not consumed after use

Heap-use-after-free in CIccCmm::AddXform()

Vulnerable cross-model authorization in juju

In Plex Media Server (PMS) through 1

In JetBrains YouTrack before 2025

BIG-IP HTTP/2 vulnerability

MongoDB may be susceptible to Invariant Failure in Transactions due Upsert Operation

Wasmtime has host panic with `fd_renumber` WASIp1 function

Insecure device pairing in end of life Amazon Cloud Cam

Reference to Expired Domain Vulnerability in OpenText™ ArcSight Enterprise Security Manager

Suspended Directus user can continue to use session token to access API

Dell Avamar, version 19

An operation on a resource after expiration or release in Fortinet FortiManager 6

JWK Set's HTTP client only overwrites and appends JWK to local cache during refresh

Qemu-kvm: virtio-pci: improper release of configure vector leads to guest triggerable crash

Mio's tokens for named pipes may be delivered after deregistration

Decidim's devise_invitable gem vulnerable to circumvention of invitation token expiry period

Destroying OAuth Applications doesn't notify Streaming of Access Tokens being destroyed in mastodon

Client configured with permissive trust policies susceptible to rollback attack in Notary Project