Search Vulnerabilities

EVE Has Partially Predetermined Vault Key

EVE Doesn't Protect Rootfs

EVE Seals Vault Key With SHA1 PCRs

EVE Doesn't Protect Config Partition with Measured Boot

EVE's Debug Functions Unlockable Without Triggering Measured Boot

EVE Freely Allocates Buffer on The Stack With Data From Socket

EVE: SSH as Root Unlockable Without Triggering Measured Boot

EVE Doesn't Measure Config Partition From 2 Fronts

Local Path Provisioner vulnerable to Path Traversal via parameters.pathPattern

Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage

Alist vulnerable to Path Traversal in multiple file operation handlers

Alist has Insecure TLS Config

Apache Answer Exposure of Private Personal Information to an Unauthorized Actor vulnerability

ingress-nginx vulnerable to Allocation of Resources Without Limits or Throttling

ingress-nginx has Improper Check for Unusual or Exceptional Conditions

ingress-nginx's `nginx.ingress.kubernetes.io/auth-method` Ingress annotation can be used to inject configuration into nginx

ingress-nginx's `rules.http.paths.path` Ingress field can be used to inject configuration into nginx

Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints

Navidrome has XSS via comment from song metadata

melange has a path traversal in license-path which allows reading files outside workspace