404,903 results · Feed
-
High 8.7
Dell Ansible Storage for Unity , versions prior to 1.2.13 contains an Improper Certificate Validation vulnerability in …
-
High 8.8
Dell Terraform for ObjectScale and Powerstore, versions prior to 1.1.1 (ObjectScale) and versions 1.2.1 through 1.3.0 (…
-
Medium 5.5
Dell Ansible Storage for PowerStore, versions prior to 3.9.0,contains an Insertion of Sensitive Information into Log Fi…
-
High 7.4
Dell Ansible Storage for PowerStore, versions prior to 3.9.0, contains an Improper Certificate Validation vulnerability…
-
Medium 6.6
Dell Terraform Provider for Dell PowerFlex contain(s) an OS Command Injection Vulnerability in the SDC host provisionin…
-
High 8.1
A client certificate authentication bypass in Node.js TLS lets a client change the servername during TLS 1.2 renegotiat…
-
High 8.7
sync-rpc runs asynchronous commands synchronously by putting them in a separate proces. Prior to version 1.3.7, if an a…
-
High 7.6
Dell OpenManage Ansible Modules, versions 6.0.0 through 10.0.3, contains an Improper Neutralization of Special Elements…
-
Medium 6.8
A certificate validation bypass in Node.js https.Agent lets a cached TLS session authenticated under one CA policy be r…
-
Medium 4.6
CWE- 416: Use After Free vulnerability exists that could cause arbitrary code execution when a local attacker could tri…
-
Low 3.5
Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Prior to versions 2.12.7…
-
Medium 6.2
Node.js discloses proxy credentials in ERR_PROXY_INVALID_CONFIG error messages. CVE-2026-48615 established that a proxy…
-
High 7.6
Dell OpenManage Ansible Modules, versions 2.0.2 through 10.0.3, contains an Improper Neutralization of Special Elements…
-
Medium 5.9
An unauthenticated HTTP/2 client can exhaust Node.js server memory because inbound DATA queued on an undrained stream i…
-
Medium 6.9
iopress is a native HTTP server for Node.js with platform-specific async I/O. Prior to version 1.0.5, the chunked-trans…
-
Medium 4.2
A per-host mutual-TLS authorization bypass in Node.js lets a client authorized for the default hostname reach a protect…
-
Medium 5.5
Dell OpenManage Ansible Modules, versions 2.0.4 through 10.0.3, contains an Improper Restriction of XML External Entity…
-
High 7.5
A use-after-free in Node.js HTTP/2 stream teardown can leak response memory, including the contents of other connection…
-
High 7.5
geojson-vt is a JavaScript library for slicing GeoJSON data into vector tiles on the fly, primarily designed to enable …
-
High 7.5
An unauthenticated HTTP/2 client can permanently leak Node.js server memory and file descriptors. If a peer triggers a …
-
High 8.7
Dell OpenManage Ansible Modules, versions 9.2.0 through 10.0.3, contains an Improper Certificate Validation vulnerabili…
-
High 8.1
A re-entrancy flaw in Node.js HTTPS lets an unauthenticated client read memory belonging to other connections, includin…
-
High 8.2
A reachable assertion in Node.js HTTP/2 session teardown lets any unauthenticated client abort the server, over both TL…
-
Medium 6.3
REVA is an interoperability platform. Prior to versions 2.40.5 and 2.46.4, Reva exposes internal metadata folders in th…
-
High 8.7
Dell OpenManage Ansible Modules, versions 5.0.0 through 10.0.3, contains an Improper Certificate Validation vulnerabili…
-
Low 2.9
An uncatchable exception in the Node.js zlib streaming API lets a peer crash a process by disconnecting while data is b…
-
Low 2.5
A Permission Model bypass in Node.js recursive file watching discloses the names of files and directories the process i…
-
Medium 5.1
OpsTree REMS through 1.0.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to …
-
Medium 5.3
OpsTree REMS through 1.0.0 contains an improper attribution vulnerability that allows authenticated users to post comme…
-
Medium 5.3
OpsTree REMS through 1.0.0 contains a server-side request forgery vulnerability that allows authenticated users to make…
-
Critical 9.3
OpsTree REMS through 1.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obt…
-
High 8.7
OpsTree REMS through 1.0.0 contains a missing authentication vulnerability that allows unauthenticated remote attackers…
-
Medium 5.3
OpsTree REMS through 1.0.0 contains an improper authorization vulnerability that allows authenticated users to set an i…
-
Medium 5.3
OpsTree REMS through 1.0.0 contains a prompt injection vulnerability that allows authenticated users to disclose the hi…
-
Low 3.7
Probo is a self-hostable governance, risk, and compliance (GRC) platform built for engineering and security teams. Prio…
-
Medium 5.9
A one-byte heap buffer overflow in Node.js HTTP/2 Alt-Svc handling lets a remote, unauthenticated attacker corrupt proc…
-
High 7.2
Probo is a self-hostable governance, risk, and compliance (GRC) platform built for engineering and security teams. Prio…
-
Low 3.1
Probo is a self-hostable governance, risk, and compliance (GRC) platform built for engineering and security teams. Prio…
-
Low 3.7
Dell Terraform Provider for PowerFlex, versions prior to 1.9.0, contains a vulnerability that may permit the use of de…
-
Medium 4.9
Probo is a self-hostable governance, risk, and compliance (GRC) platform built for engineering and security teams. Prio…