9061 matches found
CVE-2023-30971
Technical details (affected components, versions, root cause, or exploit information) are not publicly available in the provided documents. Monitor for updates.
CVE-2023-30971 Gaia unauthenticated endpoints
Gotham Gaia application was found to be exposing multiple unauthenticated endpoints...
EUVD-2023-35309
Gotham Gaia application was found to be exposing multiple unauthenticated endpoints...
CVE-2024-49587 Glutton V1 endpoints missing authentication
Glutton V1 service endpoints were exposed without any authentication on Gotham stacks, this could have allowed users that did not have any permission to hit glutton backend directly and read/update/delete data. The affected service has been patched and automatically deployed to all Apollo-managed...
CVE-2024-49587
CVE-2024-49587 concerns Glutton V1: unauthenticated endpoints on Gotham stacks could let attackers access backend data (read/update/delete). The issue is confirmed across Red Hat/NVD/CVE listings and related feeds, with a documented root cause of exposed service endpoints and no user authenticati...
EUVD-2025-204530
Multiple API endpoints allowed access to sensitive files from other users by knowing the UUID of the file that were not intended to be accessible by UUID only...
GHSA-R2H2-G46H-8MX8 pretix has Broken Access Control Allowing Cross-User File Access via UUID
Multiple API endpoints allowed access to sensitive files from other users by knowing the UUID of the file that were not intended to be accessible by UUID only...
pretix has Broken Access Control Allowing Cross-User File Access via UUID
Multiple API endpoints allowed access to sensitive files from other users by knowing the UUID of the file that were not intended to be accessible by UUID only...
CVE-2025-14881
Multiple API endpoints allowed access to sensitive files from other users by knowing the UUID of the file that were not intended to be accessible by UUID only...
Authorization Bypass Through User-Controlled Key
Overview pretix is a Reinventing presales, one ticket at a time Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the UUID parameter in multiple API endpoints. An attacker can access sensitive files belonging to other users by supplying the...
CVE-2025-14881 Insecure direct object reference
Multiple API endpoints allowed access to sensitive files from other users by knowing the UUID of the file that were not intended to be accessible by UUID only...
CVE-2025-14881 Insecure direct object reference
Multiple API endpoints allowed access to sensitive files from other users by knowing the UUID of the file that were not intended to be accessible by UUID only...
PT-2025-52486
Gotham Gaia application was found to be exposing multiple unauthenticated endpoints...
Palantir Gaia 安全漏洞
Palantir Gaia is a real-time map-based collaborative environment from US-based Palantir. A security vulnerability exists in Palantir Gaia that stems from exposing multiple unauthenticated endpoints, which could lead to unauthorized access...
pretix 安全漏洞
pretix is a ticketing software that cares about your event all the way from pretix Germany. A security vulnerability exists in pretix that stems from multiple API endpoints that allow access to sensitive files via UUID, which could lead to unauthorized data access...
Langflow 安全漏洞
Langflow is a Langflow open source visualization framework for building multi-agent and RAG applications. A security vulnerability exists in Langflow versions prior to 1.7.0 that stems from the API Request component not blocking private IP ranges and cloud metadata endpoints, which could lead to...
PT-2025-52496
Name of the Vulnerable Software and Affected Versions Langflow versions prior to 1.7.0 Description Langflow is a tool for building and deploying AI-powered agents and workflows. The API Request component allows issuing arbitrary HTTP requests within a flow. Prior to version 1.7.0, the component...
Next.js Framework React Server Components DoS (CVE-2025-55184)
The Next.js Framework on the remote host is affected by a denial of service vulnerability: - A pre-authentication denial of service vulnerability exists in React Server Components versions 19.0.0, 19.0.1 19.1.0, 19.1.1, 19.1.2, 19.2.0 and 19.2.1, including the following packages:...
CVE-2025-68435
Zerobyte is a backup automation tool Zerobyte versions prior to 0.18.5 and 0.19.0 contain an authentication bypass vulnerability where authentication middleware is not properly applied to API endpoints. This results in certain API endpoints being accessible without valid session credentials. This...
