Browse and filter security vulnerabilities across ecosystems
Browse and filter security vulnerabilities across ecosystems
Nuxt Ollama: public runtime configuration discloses the configured cloud API key
GRR vulnerable to Arbitrary File Read and Deletion
Cronicle: Non-admin uid/gid injection in create_event/update_event → run-as-arbitrary-user (incl. root) — sibling of CVE-2026-39401
GRR has a Reflected XSS issue
Asterisk: SQL Injection in cel_pgsql and cel_tds via CELGenUserEvent eventtype Field
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Asterisk: Stack buffer overflow in MWI NOTIFY Message-Account parsing
Asterisk: CVE-2022-37325 fix is absent from current chan_ooh323 Q.931 party-number parser
Asterisk: ARI REST-over-WebSocket read-only bypass allows arbitrary module path load and conditional RCE
Asterisk: NULL Pointer Dereference in HTTP AMI Digest Authentication
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
dd-trace: ReDOS in URL query string obfuscation
Sunhillo SureLine OS Command Injection via networkDiag.cgi
Sunhillo SureLine Path Traversal via radarUpdater.cgi
MLflow: Arbitrary file read on unauthenticated MLflow servers via prompt model version source
CKEditor: Cross-site scripting (XSS) in the engine package
MembershipWorks WordPress Plugin < 6.17 Information Disclosure via WordPress REST API
CTFer.io's CTFd Terraform Provider allows a local or remote attacker to read team passwords in state as non sensitive values
AWS API MCP Server OAuth Token Audience Validation Bypass
Showing 1 - 20 of 1,000+ results