Browse CVEs by Ecosystem and Severity

CliInvoke.Specializations has command injection in PowerShell and Cmd shell wrappers

CliInvoke: Argument Injection in Extensibility Runner Factory

Knowns Unrestricted Path Traversal leading to out-of-bounds arbitrary .md file read, write, and deletion in MCP Docs + Memory Tools

FriendsOfFlarum OAuth: Unauthenticated account takeover via unverified email trust in Discord OAuth provider

code16/sharp has a stored XSS via data-html-content Sanitizer Bypass

Cline: Cross-Origin WebSocket Hijacking in Cline Hub Dashboard (`/browser` endpoint)

Podman: Malformed Image can trick podman run into leaking host environment variables into the container

DBHub HTTP transport DNS rebinding allows unauthenticated browser-origin SQL execution

http4s-scala-xml has an XML External Entity (XXE) processing issue

phpMyFAQ's two-factor authentication login bypasses the password factor

phpMyFAQ has Stored XSS in Admin FAQ Editor via HTML Entity Bypass in Frontend FAQ Submission

ixo Blockchain x/bonds DID-resolved payer drain + x/entity ICA authorization bypass

Decepticon: Role-boundary forgery via ChatML special-token literals in web crawl output composed into LLM context

Snipe-IT: Stored XSS via Inline XML Rendering in the Uploaded Files API

ZITADEL: Actions V1 sandbox escape: host file read via require()

Snipe-IT: Stored XSS via Custom Field name in asset-list column headers

Snipe-IT: 2FA bypass via the API token flow

SunEditor: Critical XSS vulnerability - sanitizer bypass

Klever-Go: Elasticsearch bulk / painless injection via on-chain account name -> explorer/indexer data forgery

Klever-Go Account takeover: `kleverUpdateAccountPermission` authorizes on attacker-controlled `RecipientAddr` instead of the authenticated caller

Klever-Go: /log controls global node logging

OpenC3 COSMOS: Authenticated remote code execution via the user-writable config overlay (table definitions, cmd/tlm definitions, and script suites)

OpenC3 COSMOS: Authenticated OS command injection via the `pypi_url` setting

Formie: Unauthenticated users can overwrite incomplete submissions via submit action

Formie: Integration form-settings action allows SSRF and exfiltration of stored integration credentials

Moquette: Pattern-ACL wildcard injection (cross-tenant authorization bypass) plus a remote-unauthenticated DoS cluster, a Will-message authorization bypass, and a cross-session durable-corruption bug

plone.app.portlets Vulnerable to Remote Code Execution via TALES Injection

Spree: Broken Access Control in `PATCH /api/v3/store/carts/:id/associate` (IDOR)

lightrag-hku: No Rate Limiting on /login Endpoint Allows Brute-Force Attacks

Nuclei: Arbitrary Code Execution via Goja JavaScript Engine Vulnerability

KubeEdge: Command Injection in NodeUpgradeJob - RCE on edge nodes via v1alpha2 API

KubeEdge: keadm DecompressTarGz path traversal enables arbitrary file write on Windows during edge node join

KubeEdge: ConfigUpdateJob updateFields enables remote shell injection and code execution on edge nodes

[mcp-atlassian] Authentication bypass in HTTP transport: AtlassianOpaqueTokenVerifier accepts any non-empty token

MPXJ: Potential Path Traversal Vulnerability in Primavera P3 PRX and SureTrak STX readers

MPXJ: XXE Vulnerability in MerlinReader

deepstream: PATCH_MULTI action bypasses Valve permission system allowing unauthorized record writes

microsandbox: Secret values exposed in world-readable process arguments

Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion

Mnemosyne has JWT signature verification bypass sync server that allows authentication bypass

AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing

ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement

kcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters in any workspace

LMDeploy has Remote Code Execution by Pickle Deserialization via handle_zmq_recv in lmdeploy/lmdeploy/pytorch/disagg/conn/engine_conn.py

Semantic MediaWiki vulnerable to stored XSS through wikitext via improper use of non-reserved data attributes

org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issue

Opencast: Stored XSS in Paella player via WebVTT/DFXP caption cue text

Grav CMS vulnerable to remote code execution via .zip file upload

Grav: Missing admin.super guard on core group blueprint access field allows admin.users operator to escalate to super-admin

Grav: Blueprint dynamic-data bare-function branch is denylist-gated and omits error_log, giving arbitrary file write