Browse CVEs by Ecosystem and Severity

GeoNetwork Web Module: Unauthenticaded Server-Side Request Forgery in SLD Tool

Microsoft Security Advisory CVE-2026-69522 – .NET and Visual Studio Remote Code Execution Vulnerability

Microsoft Security Advisory CVE-2026-69439 – .NET and Visual Studio Elevation of Privilege Vulnerability

Microsoft Security Advisory CVE-2026-71328 – .NET and Visual Studio Remote Code Execution Vulnerability

mongodb: Reject "." and NUL bytes in database and collection names

Composer arbitrary command execution via a malicious package's Perforce source URL

SVGO: removeScripts allows executable links through namespace and control-character bypasses

Microsoft Security Advisory CVE-2026-50646 – .NET Remote Code Execution Vulnerability

SiYuan: The publish-access gate treats encrypted notebooks as publicly accessible by default, allowing anonymous readers to retrieve fully decrypted document content while a notebook is unlocked

SiYuan: Non-administrator responses from /api/system/getConf omit three secrets that the configuration-export path explicitly strips, disclosing the session-cookie signing key and the OS username to anonymous readers

SiYuan: Embedded (transclusion) block content is returned without publish-access filtering, leaking private and password-protected document content to anonymous readers

SiYuan: The session-cookie signing key (Conf.CookieKey) is returned to anonymous readers by /api/system/getConf

SiYuan: Publish-access filter on renderAttributeView leaves related-database content unfiltered and fails open on non-block first columns

SurrealDB: Custom API route lets authenticated callers override namespace/database scope via URL path

CodeWhale: Project config `allow_shell` override enables arbitrary shell command execution via cloned repository

CodeWhale: rlm_eval auto-approves arbitrary Python execution, bypassing the user's approval policy (RCE)

CodeWhale: Argument Injection in `git_blame` Tool Allows Arbitrary File Read Without Approval

CodeWhale: js_execution leaks parent environment to model context via missing env scrub

CodeWhale: Argument Injection in `git_show` Tool Allows Arbitrary File Write Without Approval

CodeWhale: exec_shell_interact sends LLM-controlled input to a running shell without an approval prompt (privilege escalation)

CodeWhale: Project config `instructions` override enables arbitrary file read into AI system prompt via cloned repository

CodeWhale: image_analyze follows workspace symlinks, leaking external file bytes

SiYuan: Graph endpoints omit the publish-password tier: anonymous readers receive block-level content of password-protected documents

SiYuan: Publish-boundary bypass via WebSocket broadcast: anonymous readers receive a live unfiltered feed of all edits including protected/forbidden documents (publish mode)

rubyzip path traversal vulnerability

SiYuan: Anonymous publish-password authentication bypass via getHeadingChildrenDOM / getHeading*Transaction / getBacklinkDoc (publish mode)

SiYuan: Cross-boundary content disclosure via getBacklinkDoc/getBackmentionDoc (publish mode): reader-reachable rendered DOM of publish-forbidden docs; sibling list endpoints are filtered

SiYuan: Full-content disclosure of publish-disabled documents via getHeading*Transaction endpoints (publish mode): reader-reachable rendered DOM with no publish-access check

Claude Code Templates: Unauthenticated OS command injection (RCE) in Claude Code Studio server (--studio)

Semaphore UI: Manager-to-owner privilege escalation via custom-role slug collision

SiYuan: Stored and reflected XSS in SiYuan through an SVG sanitizer bypass

OpenChoreo: Authenticated OS command injection via OpenChoreo Workflow Plane templates enables code execution in privileged pods

OpenChoreo: Cross-project command execution and wirelog view access via OpenChoreo openchoreo-api exec and wirelogs endpoints

Grav: Remote code execution via unrestricted callable in Blueprint::dynamicData()

EasyAdmin custom-action dispatcher bypasses access_control on other routes

elFinder: ZIP extraction bypasses uploadDeny MIME filter allowing PHP file upload (RCE)

Filament: Multi-factor authentication (app) can be bypassed when recovery codes are enabled

elFinder: SSRF protection bypass via DNS rebinding in the `fsock_get_contents()` fallback

`zbus_polkit`: authorization bypass via PID reuse

MapFish Print has XXE that allows reading arbitrary files of certain types

Pimcore: Account Takeover via Password Reset URL Injection allows unauthenticated attacker to hijack any admin account with 2FA bypass

9router: Unauthenticated LLM proxy access via /codex rewrite authorization bypass

Yamcs Core API has Multiple Missing Function Level Access Control vulnerabilities

datadog-opentelemetry has unbounded W3C tracestate parsing that may lead to DoS

KubeVela Terraform remote loader DoS via unbounded file read

silverstripe/userforms vulnerable to remote code execution via userforms email subject

@logtape/syslog: syslog log injection via unescaped control characters and unvalidated SD-NAME keys

@arikusi/deepseek-mcp-server has an Authorization Bypass Through User-Controlled Key

genieacs-mcp: DNS rebinding reaches local GenieACS MCP Streamable HTTP transport

phpMyFAQ privilege escalation: GroupController::updatePermissions lets a GROUP_EDIT admin grant rights they do not hold