Browse CVEs by Ecosystem and Severity

nimiq-primitives: Panic DoS in trie chunk processing via ROOT-keyed item

Windows-MCP: HTTP transports expose unauthenticated PowerShell control with wildcard CORS

Apache Camel K: Kubernetes namespace authorized users can create a Build resource

Mattermost has a Path Traversal issue

phpMyFAQ: Missing Password Reset Token Allows Account Takeover via Username/Email Enumeration

phpMyFAQ: IDOR Account Takeover

phpMyFAQ: Unauthenticated Password Reset Endpoint Allows User Enumeration and Forced Password Change Without Token Validation

Caddy Defender trusted proxy client IP bypass

PenPot MCP REPL server binds to 0.0.0.0 with unauthenticated /execute endpoint — RCE

Jaspersoft Reports: Java Deserialization Vulnerability Lleads to Remote Code Execution (RCE)

BillaBear is Vulnerable to SQL Injection in the EventRepository

zrok copy writes attacker-controlled WebDAV paths outside the destination root

HAXcms: Mass Token Exfiltration and Cross-Tenant Hijack

HAX open-apis: Credential Theft via Server-Side Request Forgery (SSRF) in open-apis

Scriban: array.insert_at index parameter DoS bypasses LoopLimit and LimitToString

ImageMagick: Infinite Loop in the MIFF decoder can lead to CPU exhaustion

ImageMagick: Heap Buffer Over-Write in IPL decoder when reading multiple images of different dimensions

HAPI FHIR: ReDoS via FHIRPath matches()/replaceMatches() in FHIR Validator HTTP Endpoint

Microsoft Security Advisory CVE-2026-35433 – .NET Elevation of Privilege Vulnerability

Microsoft Security Advisory CVE-2026-42899 – ASP.NET Core Denial of Service Vulnerability

Microsoft Security Advisory CVE-2026-32175 – .NET Core Tampering Vulnerability

ngrok is Vulnerable to Command Injection

Budibase: Builder-to-Admin Privilege Escalation via onboardUsers Endpoint Without SMTP Configuration

ruby-jwt: Empty-key HMAC bypass; cross-language sibling of CVE-2026-44351

TinyIce: Missing authentication on WebRTC ingest endpoint allows unauthorized stream injection

Dozzle: Pre-auth SSRF with response-body reflection via POST /api/notifications/test-webhook (default no-auth deploy)

CI4MS: Stored XSS in Pages Module Content via Broken html_purify Validation Rule

Arcane Backend: Unauthenticated reflected XSS via SVG color parameter enables admin account takeover

Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin

Mattermost doesn't sanitize sensitive configuration fields before including them in support packet generation

AVideo: OS command injection in on_publish.php execAsync via unescaped m3u8 URL

Apache Flink: Remote code execution via SQL injection in code generation

SimpleSAMLphp casserver FileSystemTicketStore path traversal allows out-of-ticket-directory read/unserialize and conditional deletion

Budibase: `PUT /api/datasources/:datasourceId` is protected only by `TABLE/READ` permission instead of builder access, allowing any authenticated app user to overwrite datasource connection parameters including host, port, and URL

NukeViet CMS: Stored Cross-Site Scripting (XSS) via insufficient server-side input sanitization in Request class

nimiq-keys: Unchecked Ed25519 signature length in TaggedPublicKey::verify causes remote node panic via DHT

Crabbox: authentication bypass vulnerability that allows impersonation of others by spoofing identity headers

DeepSeek TUI has SSRF IPV6 bypass

DeepSeek TUI has SSRF via HTTP Redirect Bypass in fetch_url Tool

ethyca-fides has a DOM-based XSS vulnerability in fides.js via fides_description override

go-billy has path traversal vulnerabilities

Portainer Has an Arbitrary File Read via Git Symlink Injection in Stack Auto-Update

Portainer has a bind-mount restriction bypass via HostConfig.Mounts

FlowiseAI: Evaluator create+update mass-assignment allows cross-workspace evaluator takeover

FlowiseAI: Evaluation create+update mass-assignment allows cross-workspace evaluation takeover

FlowiseAI: DatasetRow create+update mass-assignment allows cross-workspace row takeover

FlowiseAI: Dataset create+update mass-assignment allows cross-workspace dataset takeover

FlowiseAI: Assistant create+update mass-assignment allows cross-workspace assistant takeover

FlowiseAI: Vector Store No Permission Checks

n8n Has a Source Control Pull SQL Injection