Browse CVEs by Ecosystem and Severity

Gogs has a Migration Redirect Bypass that Leads to Internal Repository Theft

expr-eval vulnerable to Code Execution

Gogs Vulnerable to CSRF Leading to Organization Owner Takeover

Gogs has Stored XSS in `.ipynb` Preview

Budibase has arbitrary file read by workspace-builder via PWA-zip symlink upload

Budibase: POST /api/attachments/:datasourceId/url is unauthenticated and lets anonymous callers mint S3 PUT pre-signed URLs using stored datasource IAM credentials

scimPatch vulnerable to prototype pollution via unfiltered keys in patch

OpenDJ Pre-Auth RCE via Java Deserialization in JMX RMI

Spinnaker has non-safe yaml deserialization, allowing RCE when using specific types

OpenAM has pre-auth Reflected XSS in OAuth2 / OIDC response_mode=form_post via state parameter (FormPostResponse.ftl)

xwiki-pro-macros has remote code execution from page title and content via excerpt-include macro

Grafana: Pre-authentication denial of service in the public dashboard query handler

Canonical ADSys Uses a Less Trusted Source

Mise Vulnerable to Arbitrary Code Execution via Tera Templates in .tool-versions Files (Trust Bypass)

Paymenter vulnerable to Remote Code Execution via public file uploads

Grafana Loki datasource plugin's callResource handler contains a path traversal vulnerability.

Apache NiFi: Missing authorization when replacing Process Groups with restricted components

Cloudflare Quiche: Use-after-free in connection ID iterator FFI functions

OpenRemote Manager: removeAlarms cross-realm IDOR (bulk delete)

Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit

Traefik Kubernetes Ingress NGINX provider fails open when auth-secret resolution fails

Craft CMS: Blind SSRF and Arbitrary JavaScript Injection via Host Header Poisoning in actionResourceJs

StarCitizenWiki Extension Embed Video: Stored XSS via unsanitized class passed to template

Grafana Operator: Privilege escalation from namespace admin to cluster admin via GrafanaDashboard jsonnetLib fileName

Concurrent Ruby: ReadWriteLock allows wrong-thread write release and stray read-release counter corruption

Concurrent Ruby: `ReentrantReadWriteLock` read-count overflow grants a write lock without exclusivity

Concurrent Ruby : `AtomicReference#update` livelocks when the stored value is `Float::NAN`

Oj: Integer Overflow in Oj.load 2GB String Handling

Oj: Use-After-Free in Oj::Parser SAJ Long Key Callback

Oj: Use-After-Free in Oj::Parser array_class/hash_class GC Marking

Oj: Negative-Size memcpy in Oj::Parser create_id Attribute Handling

CoreWCF: SPNEGO SecurityContextToken proof key wrapped without confidentiality

CoreWCF: XML Signature Wrapping in WS-Security endorsing/supporting signature verification allows replay of captured signed messages

CoreWCF: Authentication bypass in CoreWCF SAML 1.1 / 2.0 token signature validation

CoreWCF: SAML SubjectConfirmation methods and holder-of-key proof keys are not enforced

CoreWCF: SAML token replay protection is inoperative

CoreWCF: UnixDomainSocket Non-Reentrant POSIX Identity Resolution

CoreWCF NetNamedPipe transport accepts attach to a pre-existing named pipe instance

CoreWCF: Unix Domain Socket PosixIdentity transport accepts connections that skip the security upgrade

CoreWCF: Kafka consume pump halts permanently on a Kafka tombstone (null-value record), causing persistent endpoint denial of service.

CoreWCF: SamlSerializer skips SignatureValue verification when SAML signing token is not an X.509 certificate

CoreWCF: WS-Security signature substitution via document-wide Signature lookup

CoreWCF: Pre-authentication infinite-loop CPU exhaustion in CoreWCF net.tcp / net.pipe / net.uds framing handshake

Oj: Use-After-Free in Oj::Parser SAJ Callback via Input Mutation

Oj: Use-After-Free in Oj::Doc Iterators via Reentrant Close

Oj: Heap Buffer Overflow in Oj.dump Exception Serialization via Large Indent

Oj: Stack Buffer Overflow in Oj::Doc#each_child via Deeply Nested Input

jupyterlab-git extension: Stored XSS leading to RCE

Oj: intern.c form_attr (uninitialized stack read)

Faraday: Uncontrolled recursion in NestedParamsEncoder allows stack exhaustion DoS via deeply nested query parameters