Browse CVEs by Ecosystem and Severity

Magento Path Traversal vulnerability

Magento OS Command ('OS Command Injection') vulnerability

Magento Stored Cross-Site Scripting (XSS) vulnerability

Magento does not properly restrict excessive authentication attempts

Command Injection in sequenceserver

Microsoft Security Advisory CVE-2024-38168 | .NET Denial of Service Vulnerability

Microsoft Security Advisory CVE-2024-38167 | .NET Information Disclosure Vulnerability

Server-Side Request Forgery in axios

Prototype pollution in izatop bunt

CometVisu Backend for openHAB affected by RCE through path traversal

CometVisu Backend for openHAB affected by SSRF/XSS

Shopware vulnerable to Server Side Template Injection in Twig using Context functions

Shopware vulnerable to Server Side Template Injection in Twig using deprecation silence tag

Jenkins Remoting library arbitrary file read vulnerability

Gitea Cross-site Scripting Vulnerability

Redisson vulnerable to Deserialization of Untrusted Data

Juju's unprivileged user running on charm node can leak any secret or relation data accessible to the local charm

REXML DoS vulnerability

REXML DoS vulnerability

Mattermost allows unsolicited invites to expose access to local channels

Mattermost failed to properly validate that the channel that comes from the sync message is a shared channel

XWiki Platform vulnerable to Cross-Site Scripting (XSS) through conflict resolution

IdentityServer Open Redirect vulnerability

XWiki Platform vulnerable to remote code execution from account via SearchSuggestConfigSheet

Studio 42 elFinder vulnerable to Incorrect Access Control

Authz zero length regression

tgstation-server's DreamMaker environment files outside the deployment directory can be compiled and ran by insufficiently permissioned users

Admidio Vulnerable to RCE via Arbitrary File Upload in Message Attachment

Admidio has Blind SQL Injection in ecard_send.php

RaspAP allows an attacker to escalate privileges

Starship vulnerable to shell injection via undocumented, unpredictable shell expansion in custom commands

Remote code execution in Spring Cloud Data Flow

Volcano has insecure permissions

CLSA Directory Traversal vulnerability

SixLabors ImageSharp has Excessive Memory Allocation in Gif Decoder

SixLabors ImageSharp Out-of-bounds Write

Woodpecker's custom workspace allow to overwrite plugin entrypoint executable

TorchServe vulnerable to bypass of allowed_urls configuration

gix-path can use a fake program files location

1Panel has an SQL injection issue related to the orderBy clause

TorrentPier Deserialization of Untrusted Data vulnerability

Mimekit has vulnerable dependency that can lead to denial of service

SurrealDB vulnerable to Improper Authentication when Changing Databases as Scope User

Decidim cross-site scripting (XSS) in the admin panel

Decidim cross-site scripting (XSS) in the pagination

Decidim vulnerable to data disclosure through the embed feature

Microsoft Security Advisory CVE-2024-38095 | .NET Denial of Service Vulnerability

Microsoft Security Advisory CVE-2024-38081 | .NET Elevation of Privilege Vulnerability

Microsoft Security Advisory CVE-2024-35264 | .NET Remote Code Execution Vulnerability

Microsoft Security Advisory CVE-2024-30105 | .NET Denial of Service Vulnerability