Browse CVEs by Ecosystem and Severity

SiYuan: Authorization Bypass Allows Arbitrary SQL Execution via Search API

File Browser Signup Grants Admin When Default Permissions Include Admin

Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL

Dagu: Path Traversal via `dagRunId` in Inline DAG Execution

AdGuard Home: HTTP/2 Cleartext (h2c) Upgrade Authentication Bypass

SiYuan Vulnerable to Path Traversal in /export Endpoint Allows Arbitrary File Read and Secret Leakage

WeKnora has Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation

WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool

WeKnora Vulnerable to Broken Access Control in Tenant Management

soft-serve vulnerable to SSRF via unvalidated LFS endpoint in repo import

Gogs: Cross-repository LFS object overwrite via missing content hash verification

Nginx-UI Vulnerable to Unauthenticated Backup Download with Encryption Key Disclosure

ZITADEL has 1-Click Account Takeover via XSS in /saml-post Endpoint

File Browser's TUS Delete Endpoint Bypasses Delete Permission Check

SiYuan: Unauthenticated Reflected XSS via SVG Injection in /api/icon/getDynamicIcon Endpoint

Rancher cloud credentials can be used through proxy API by users without access

Rancher has downstream cluster privilege escalation through cluster and project role template binding (CRTB/PRTB)

Rancher doesn't properly sanitize credentials in cluster template answers

Vikunja Vulnerable to Account Takeover via Password Reset Token Reuse

Vitess users with backup storage access can write to arbitrary file paths on restore

Vijkunja has Weak Password Policy Combined with Persistent Sessions After Password Change

OliveTin: OS Command Injection via `password` argument type and webhook JSON extraction bypasses shell safety checks

Kargo has an Authorization Bypass Vulnerability in Batch Resource Creation API Endpoints

Milvus: Unauthenticated Access to Restful API on Metrics Port (9091) Leads to Critical System Compromise

Gogs's update .git/config file allows remote command execution

Local Path Provisioner vulnerable to Path Traversal via parameters.pathPattern

Alist has Insecure TLS Config

Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints

SiYuan has Arbitrary File Write via /api/file/copyFile leading to RCE

Kyverno Cross-Namespace Privilege Escalation via Policy apiCall

Free5gc NRF is vulnerable to scope validation bypass via maliciously crafted targetNF value

Fleet has a JWT signature bypass vulnerability in Azure AD MDM enrollment

External Secrets Operator insecurely retrieves secrets through the getSecretKey templating function

Arcane Has a Command Injection in Arcane Updater Lifecycle Labels That Enables RCE

WeKnora has Command Injection in MCP stdio test

OpenFlagr contains an authentication bypass vulnerability in the HTTP middleware

Bypassing Kyverno Policies via Double Policy Exceptions

Harvest May Expose OS Default SSH Login Password Via SUSE Virtualization Interactive Installer

Ollama Platform has missing authentication enabling attackers to perform model management operations

OpenShift GitOps authenticated attackers can obtain cluster root access through forged ArgoCD custom resources

ZITADEL Vulnerable to Unauthenticated Full-Read SSRF via V2 Login

Step CA Has Authorization Bypass in ACME and SCEP Provisioners

Mattermost fails to to verify the token used during code exchange

Mattermost fails to properly validate OAuth state tokens during OpenID Connect authentication

Grafana Incorrect Privilege Assignment vulnerability

Milvus Proxy has a Critical Authentication Bypass Vulnerability

Soft Serve is vulnerable to SSRF through its Webhooks

NeuVector Enforcer is vulnerable to Command Injection and Buffer overflow

NetBird VPN does not remove the default password of an admin account

Gardener provider extensions vulnerable to code injection when Terraform is used for infrastructure provisioning