LOW3.7EPSS 0.02%Fastify Vulnerable to DoS via Unbounded Memory Allocation in sendWebStream
LOW2.9EPSS 0.03%In the context switch logic Xen attempts to skip an IBPB in the case of a vCPU returning to a CPU on which it was the previous vCPU to run.
LOW2.5EPSS 0.01%In libexpat before 2.7.4, XML_ExternalEntityParserCreate does not copy unknown encoding handler user data.
LOW3.5EPSS 0.04%Backstage has a Possible SSRF when reading from allowed URL's in `backend.reading.allow`
LOW3.7EPSS 0.07%Lobe Chat has IDOR in Knowledge Base File Removal that Allows Cross User File Deletion
LOW3.7EPSS 0.06%Outray cli is vulnerable to race conditions in tunnels creation
LOW3.5EPSS 0.08%QuestDB UI's Web Console is Vulnerable to Cross-Site Scripting
LOW3.1EPSS 0.10%When doing SSH-based transfers using either SCP or SFTP, and asked to do public key authentication, curl would wrongly still ask and authen…
LOW3.7EPSS 0.04%qs's arrayLimit bypass in its bracket notation allows DoS via memory exhaustion
LOW3.3EPSS 0.02%Mattermost Desktop App exposes sensitive information in its application logs
LOW3.7EPSS 0.04%Improper Validation of Query Parameters in Auth0 Next.js SDK
LOW3.5EPSS 0.02%Astro Development Server has Arbitrary Local File Read
LOW2.7EPSS 0.03%Astro development server error page is vulnerable to reflected Cross-site Scripting
LOW3.1EPSS 0.06%PostgreSQL CREATE STATISTICS does not check for schema CREATE privilege
LOW3.7EPSS 0.05%EverShop is vulnerable to Unauthorized Order Information Access (IDOR)
LOW3.7EPSS 0.08%Vercel’s AI SDK's filetype whitelists can be bypassed when uploading files
LOW3.0EPSS 0.03%Lobe Chat vulnerable to Server-Side Request Forgery with native web fetch module
LOW3.6EPSS 0.06%ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used.
LOW3.6EPSS 0.01%ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leadi…