Search Vulnerabilities

Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF Improper Authorization Allows Privilege Escalation to ...

Pki-core: dogtag-pki: redhat-pki: pki-core: ca renewal request processing omits realm authorization check performed by enrollment path

Easy Appointments <= 3.12.27 - Missing Authorization to Authenticated (Contributor+) Arbitrary Connection Deletion

CWE-863: ABAC authorization bypass via trailing slash route normalization in Eclipse BaSyx Go Components

portprotonqt allows any users to mount and unmount arbitrary file systems and modify the network configuration via NetworkManager

$graphLookup Aggregation Stage Authorization Check Inconsistency Allowing Unauthorized Collection Access

Improper Access Control Allowing Cross-User Session Metadata Disclosure in $listSessions Aggregation Stage

tlsCATrusts Role Restriction Not Enforced via PROXY Protocol v2 on Unix Domain Socket

MongoDB mongos Improper Authorization Check in Cursor Termination Allowing Cross-Database Privilege Misuse

Traefik before 3.6.23 IngressRouteTCP ServersTransport Namespace Bypass

Traefik before 3.7.7 Namespace Confusion via HTTPRoute ExtensionRef

n8n before 1.123.64 Credential Exfiltration via GraphQL Node

n8n before 2.30.1 Missing OAuth Authorization Check

n8n before 2.30.1 Privilege Escalation via run_node_tool

Incorrect Authorization in Kibana Leading to Machine Learning Audit Log Integrity Compromise

Incomplete List of Disallowed Inputs in Kibana Leading to Server-Side Request Forgery

FUXA Vulnerable to Unauthenticated Remote Code Execution via Script Test Mode Authorization Bypass

FUXA has an unauthenticated arbitrary tag value disclosure via /api/getTagValue

FUXA Vulnerable to Pre-auth RCE via Path Manipulation & Configuration Injection

Shelf has cross-organization IDOR: authenticated users could read/attach another workspace's assets, tags, custodians, bookings, QR codes and audit...