Browse CVEs by Ecosystem and Severity

CI4MS: Stored Cross‑Site Scripting (Stored XSS) in Backend User Management Allows Session Hijacking and Full Administrative Account Compromise

CI4MS: Blogs Categories Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

CI4MS: Blogs Posts Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

CI4MS: Blogs Posts (Categories) Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

CI4MS: Pages Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

CI4MS: Menu Management (Posts) Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

CI4MS: Menu Management (Pages) Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

CI4MS: Backup Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM Blind XSS

CI4MS: System Settings (Social Media Management) Full Platform Compromise & Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

CI4MS: Logs Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

CI4MS: Blogs Tags Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

Payload: Pre-Authentication Account Takeover via Parameter Injection in Password Recovery

CI4MS: Permissions Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

CI4MS: Methods Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

OpenClaw has a CWD `.env` environment variable injection which bypasses host-env policy and allows config takeover

OpenClaw: /pair approve command path omitted caller scope subsetting and reopened device pairing escalation

parse-server has cloud function validator bypass via prototype chain traversal

SiYuan is Vulnerable to Cross-Origin RCE via Permissive CORS Policy and JavaScript Snippet Injection

SiYuan: Stored XSS in Attribute View Gallery/Kanban Cover Rendering Allows Arbitrary Command Execution in Desktop Client

FastMCP OpenAPI Provider has an SSRF & Path Traversal Vulnerability

SciTokens is vulnerable to SQL Injection in KeyCache

baserCMS Update Functionality Vulnerable to OS Command Injection

baserCMS has OS Command Injection Leading to Remote Code Execution (RCE)

Mlflow: Command Injection when serving models with enable_mlserver=True

FHIR Validator HTTP service has SSRF via /loadIG Chains with startsWith() Credential Leak for Authentication Token Theft

NocoBase Affected by Sandbox Escape to RCE via console._stdout Prototype Chain Traversal in Workflow Script Node

nginx-ui's Unauthenticated MCP Endpoint Allows Remote Nginx Takeover

nginx-ui Backup Restore Allows Tampering with Encrypted Backups

ci4-cms-erp/ci4ms: System Settings (Mail Settings) Full Platform Compromise & Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

MLflow Command Injection vulnerability

MLFlow path traversal vulnerability

MikroORM is vulnerable to SQL Injection via specially crafted object

mpp has multiple payment bypass and griefing vulnerabilities

OpenClaw: Silent privilege escalation via gateway shared-auth reconnect

OpenClaw: Gateway Backend Reconnect lets Non-Admin Operator Scopes Self-Claim operator.admin

Zebra node crash — V5 transaction hash panic (P2P reachable)

Handlebars.js has JavaScript Injection via AST Type Confusion

pyLoad: Server-Side Request Forgery via Download Link Submission Enables Cloud Metadata Exfiltration

Incus has an abitrary file write through its systemd-creds options

Incus vulnerable to arbitrary file read and write through pongo templates

Spring AI: SpEL injection is triggered when a user-supplied value is used as a filter expression key

OpenClaw Gateway: RCE and Privilege Escalation from operator.pairing to operator.admin via device.pair.approve

Convict has Prototype Pollution via startsWith() function

Convict has prototype pollution via load(), loadFile(), and schema initialization

OpenBao has Reflected XSS in its OIDC authentication error message

OpenBao lacks user confirmation for OIDC direct callback mode

Langflow has Authenticated Code Execution in Agentic Assistant Validation

Vikunja: Unauthenticated Instance-Wide Data Breach via Link Share Hash Disclosure Chained with Cross-Project Attachment IDOR