Search Vulnerabilities

Signal K Server has Unauthenticated State Pollution leading to Remote Code Execution (RCE)

n8n Vulnerable to Remote Code Execution via Expression Injection

SamuNatsu HaloBot Inter-plugin API index.js html_renderer dynamically-managed code resources

Improper control of dynamically managed code resources in Ivanti Endpoint Manager prior to version 2024 SU4 SR1 allows a remote, unauthenticated at...

Improper Sandboxing in Google Apigee's JavaCallout Policy Allows for Remote Code Execution

youlaitech youlai-mall orders improper control of dynamically-identified variables

youlaitech youlai-mall addresses deleteAddress improper control of dynamically-identified variables

Improper control of dynamically-managed code resources vulnerability in WebAPI component in Synology DiskStation Manager (DSM) before 7

GZDoom engine allows arbitrary code execution via ZScript actor states

Improper control of dynamically-managed code resources for some Intel(R) NPU Drivers within Ring 3: User Applications may allow a denial of service

Rack has Possible Information Disclosure Vulnerability

Arbitary Code execution in Keras load_model()

Remote Code Execution via Unauthenticated Configuration Manipulation

A vulnerability in the Eclipse Open VSX Registry’s automated publishing system could have allowed unauthorized uploads of extensions

Improper Control of Dynamically-Managed Code Resources in Crafter Studio

comfyanonymous comfyui utils.py set_attr dynamically-determined object attributes

NASA CryptoLib before 1

In NASA CryptoLib before 1

Apache ShardingSphere ElasticJob-UI allows RCE via event trace data source JDBC

Langflow Privilege Escalation