Browse CVEs by Ecosystem and Severity

Casdoor SAML callback handler accepts any well-formed SAMLResponse sent to /api/acs without verifying that it corresponds to an AuthnRequest

Symfony's Mailjet Mailer Webhook Parser Never Verifies the Configured Secret — Unauthenticated Webhook Event Injection

MCP Toolbox for Databases vulnerable to DNS rebinding attacks

Kata guest escape: runtime-rs guest-root to host-root escape via virtiofs

Yamcs Vulnerable to Authenticated Remote Code Execution (RCE) via Jython Algorithm Code Injection

Yamcs Vulnerable to Remote Code Execution via Mission Database algorithm override

Symfony has Unauthenticated PHP Object Deserialization in MonologBridge server:log Listener

Symfony's HEAD Request Bypasses methods: ['GET'] Filter in #[IsGranted] / #[IsSignatureValid] / #[IsCsrfTokenValid]

Symfony Vulnerable to SQL Injection in PdoAdapter::doClear() via Unsanitized $prefix

Symfony has an Argument Injection in SendmailTransport via Dash-Prefixed Recipient Address

Deno's TLS retry copies stale upgrade hook, risking plaintext traffic

Langroid has Prompt to SQL Injection, Leading to RCE

LiquidJS is Vulnerable to Remote Code Execution

Pimcore: Missing Authorization in WebDAV MOVE via unchecked asset move handling

Pimcore has Unsafe PHP Deserialization in Multiple Locations Without allowed_classes Restriction

Symfony Vulnerable to Identity Spoofing via Unanchored DN Regex in X509Authenticator

Jenkins Email Extension Plugin: Attackers able to control email content may specify `file:` URLs for images to read arbitrary files from Jenkins controller filesystem

@hapi/content header parser has a parameter smuggling issue that allows upload-filter bypass via duplicate parameters

Pimcore Admin Classic Bundle Vulnerable to SQL Injection in Translation Grid Date Filter via Unsanitized Property Parameter

Pimcore Vulnerable to SQL Injection in Custom Reports Column Configuration

Yamcs Vulnerable to Server-Side Code Injection (RCE) via Janino Expression Engine in `JavaExprAlgorithmExecutionFactory`

CarrierWave has a denylisted_content_type bypass via Unescaped Regex Metacharacters

Kata Containers have VM Escape via virtiofsd Argument Injection through Default-Enabled Pod Annotations

Kirby CMS has pre-authentication path traversal and PHP file inclusion during user lookup

Kirby CMS has an Arbitrary Method Call via REST API Search and Collection Query Endpoints

FUXA Vulnerable to Unauthenticated Remote Code Execution via Script Test Mode Authorization Bypass

FUXA Vulnerable to Pre-auth RCE via Path Manipulation & Configuration Injection

yeoman-environment Vulnerable to Arbitrary Package Installation without User Confirmation

XWiki Platform has an Unauthenticated XAR Import via REST /wikis/{wikiName}

Typebot has Stored XSS via Rating Block Custom Icon that Bypasses isUnsafe Sandbox in Builder Preview

XWiki Platform has path traversal via resources parameter in ssx and jsx endpoints when using leading slash

KubeVirt has a Link Following vulnerability

Dolibarr ERP CRM contains a remote code evaluation vulnerability

Apache CXF has an LDAP injection vulnerability

Mattermost doesn't enforce request body size limits on plugin HTTP endpoints

Mattermost doesn't properly validate msgpack-encoded WebSocket frames before memory allocation

Nezha Monitoring: RoleMember can run shell on every server (cross-tenant RCE) via POST /api/v1/cron

Arcane: Missing admin authorization on global variables endpoint

Nezha Monitoring: RoleMember-reachable SSRF with full response-body reflection via POST /api/v1/notification

FileBrowser Quantum: Path traversal in public share PATCH allows file ops outside shared directory

YesWiki: Unauthenticated SQL Injection

ImageMagick: Heap Buffer Over-Read in distributed pixel cache server

ImageMagick: Information Disclosure in distributed pixel cache server because it is not using a challenge–response authentication model

ImageMagick: Race Condition in distributed pixel cache server can result in file descriptor hijacking

ImageMagick: Heap Buffer Over-Write in distributed pixel cache server

Boxlite: Path Traversal Vulnerability Leads to Arbitrary File Write on the Host

BoxLite: Permission Bypass Allows Modification of Read-Only Files

ImageMagick: Information Disclosure in PasskeyEncipherImage via AES-CTR nonce reuse

ImageMagick: Division by Zero in binomial kernel

ImageMagick: Heap Buffer Over-Write in json and yaml encoder of a single byte due to incorrect fix