Browse CVEs by Ecosystem and Severity

rpc.py vulnerable to Deserialization of Untrusted Data

Shinken Solutions Shinken Monitoring vulnerable to Incorrect Access Control

Tooxie Shiva 0.10.0 allows absolute path traversal because Flask send_file function used unsafely

wger vulnerable to brute force attempts

Server-Side Request Forgery in calibreweb

SQL injection in calibreweb

Server-Side Request Forgery in calibreweb

Cobbler has Exposed Dangerous Method or Function

Cobbler vulnerable to arbitrary code execution

Cobbler Improper Validation of Security Tokens

OpenStack Murano Code Execution

OpenStack Neutron allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism

OpenStack Nova logs sensitive context from notification exceptions

OpenStack Octavia Amphora-Agent not requiring Client-Certificate

Openstack Magnum Unsafe Credential Handling

OpenStack os-vif Ageing time of 0 disables linuxbridge MAC learning

Plone Unauthenticated Write Vulnerability

Radicale is vulnerable to directory traversal on Windows Filesystem Storage Backend component

ReviewBoard and Djblets library are vulnerable to code execution

OpenStack Object Storage (swift) Code Injection vulnerability

web2py is vulnerable to password brute-force attack

web2py remote code execution via hardcoded encryption key in session.connect function

pnpm: Project env lockfile can short-circuit package-manager resolution and execute lockfile-selected pnpm bytes

ImageMagick has a Heap Buffer Over-Write in SF3 encoder when writing multi-frame image

ImageMagick: Memory Leak in wand option parser when providing invalid arguments

Nezha Monitoring: Pre-auth path traversal via /dashboard.. prefix confusion leaks jwt_secret_key

pnpm: Transitive dependency alias path traversal allows project path override via symlink replacement

Nezha vulnerable to cross-tenant terminal/file-manager session hijack via WebSocket stream UUID without ownership check

YARD static cache reads raw traversal paths before router sanitization

Cargo crates in third party registries can override the cached source of other crates

php-weasyprint: shell command injection via configurable WeasyPrint binary path due to inverted is_executable() guard (mirror of KnpLabs/snappy GHSA-vpr4-p6fq-85jc)

Nebula Mesh: Web UI lacks ownership checks, enabling cross-operator access to hosts and networks (read, block, delete)

phpMyFAQ has an incomplete fix for GHSA-xvp4-phqj-cjr3 — editUser() and updateUserRights() lack authorization guards

mcp-pinot: Unauthenticated tool invocation via default oauth_enabled=False + host 0.0.0.0 bind

deepstream is vulnerable to prototype pollution

Scriban: ExpressionDepthLimit guard is non-enforcing — parser-recursion DoS in 6.6.0–7.2.0 (incomplete fix for GHSA-wgh7-7m3c-fx25 / GHSA-p6q4-fgr8-vx4p)

Scriban: array * int (ScriptArray<T>.TryEvaluate) bypasses LoopLimit — incomplete fix for GHSA-c875-h985-hvrc, missed sibling of GHSA-24c8-4792-22hx

Backpropagate: backprop ui --auth and backprop ui --share do not enforce authentication

Remark42: Cross-Site Scripting (XSS) on /api/v1/img via content-type spoofing

Incus has an arbitrary file write on its client due to trusted image hash

Incus has an argument injection in backup compression algorithm leading to AFW and ACE

Incus has an arbitrary file write via path traversal in S3 multipart upload

Incus has arbitrary file read+write on host via templates/ symlink in malicious image

Incus has a restricted project bypass leading to arbitrary command execution

Incus has an arbitrary file write on host via `exec-output` symlink in crafted image

Incus has an arbitrary file read+write on host via rootfs/ symlink in malicious image

ImageMagick has Null Pointer Dereference caused by the distort operation when passing incorrect arguments

fluent-plugin-opentelemetry Has Denial of Service (DoS) via Large Payloads and Decompression Bombs in `in_opentelemetry`

Fluentd is Vulnerable to Server-Side Request Forgery (SSRF) via Placeholder Expansion in `out_http`

Fluentd is Vulnerable to Denial of Service (DoS) via Gzip Decompression Bomb in `in_http` and `in_forward`