Search Vulnerabilities

Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions

tarfile: Skip DIRTYPE normalization during GNU LONGNAME/LONGLINK handling

Keycloak: keycloak: information disclosure via authorization bypass in admin api

HCL Nomad server on Domino is affected by a missing default frame-ancestors directive

Side-channel information leakage in ResourceTiming in Google Chrome prior to 146

A potential vulnerability was reported in the Lenovo FileZ Android application that, under certain conditions, could allow a local authenticated us...

Copyparty has unexpected JavaScript execution via crafted URL to folder with `.prologue.html`

Copyparty ftp/sftp: Sharing a single file did not fully restrict source-folder access

Blind SSRF on OpenProject instance via webhooks

Dell Alienware Command Center (AWCC), versions prior to 6

Dell Alienware Command Center (AWCC), versions prior to 6

Improper Restriction of Excessive Authentication Attempts in github.com/anyproto/anytype-heart

Caching of authentication context

Auth misconfiguration when multiple providers enabled

Improper Encoding or Escaping of Output in GitLab

Missing Authorization in GitLab

Incorrect privilege assignment in composite databases

Anytype Heart's gRPC API client challenge verification can be bypassed on localhost

Craft CMS Vulnerable to Stored XSS via User Group Name in User Permissions Page

QTS, QuTS hero