CVE-2025-22178

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view items on the "Why" page...

CVE-2025-58585

Multiple endpoints with sensitive information do not require authentication, making the application susceptible to information gathering...

EUVD-2025-32510

Multiple endpoints with sensitive information do not require authentication, making the application susceptible to information gathering...

EUVD-2025-6895

Malicious code in bioql PyPI...

EUVD-2025-4488

Malicious code in bioql PyPI...

EUVD-2023-56812

Malicious code in bioql PyPI...

EUVD-2024-52849

Malicious code in bioql PyPI...

EUVD-2024-17384

Malicious code in bioql PyPI...

CVE-2025-57438

The 2wcom IP-4c 2.15.5 device suffers from a Broken Access Control vulnerability. Certain sensitive endpoints are intended to be accessible only after the admin explicitly grants access to a manager-level account. However, a manager-level user can bypass these controls by intercepting and modifyi...

PT-2025-38759

Name of the Vulnerable Software and Affected Versions 2wcom IP-4c version 2.15.5 Description The 2wcom IP-4c device version 2.15.5 is subject to a Broken Access Control issue. Manager-level users can bypass intended access restrictions on sensitive endpoints by intercepting and modifying requests...

CVE-2025-57438

The 2wcom IP-4c 2.15.5 device suffers from a Broken Access Control vulnerability. Certain sensitive endpoints are intended to be accessible only after the admin explicitly grants access to a manager-level account. However, a manager-level user can bypass these controls by intercepting and modifyi...

CVE-2024-57155

Incorrect access control in radar v1.0.8 allows attackers to bypass authentication and access sensitive APIs without a token...

Information Exposure

Overview x402-express is a x402 Payment Protocol Affected versions of this package are vulnerable to Information Exposure where sensitive endpoints could be unintentionally discovered by unauthorized endpoints. Note: This vulnerability impacts builders working on resource servers. Remediation...

Information Exposure

Overview x402-next is a x402 Payment Protocol Affected versions of this package are vulnerable to Information Exposure where sensitive endpoints could be unintentionally discovered by unauthorized endpoints. Note: This vulnerability impacts builders working on resource servers. Remediation Upgrad...

Information Exposure

Overview x402-hono is a x402 Payment Protocol Affected versions of this package are vulnerable to Information Exposure where sensitive endpoints could be unintentionally discovered by unauthorized endpoints. Note: This vulnerability impacts builders working on resource servers. Remediation Upgrad...

Information Exposure

Overview x402 is a x402: An internet native payments protocol Affected versions of this package are vulnerable to Information Exposure where sensitive endpoints could be unintentionally discovered by unauthorized endpoints. Note: This vulnerability impacts builders working on resource servers...

CVE-2024-57155

The software Radar (a lightweight real-time wind control engine by feihu.wang) version v1.0.8 is affected by a critical improper access control vulnerability (CWE-284). This flaw allows attackers to bypass authentication and gain unauthorized access to sensitive APIs without providing a required ...

CVE-2021-23233

Sensitive endpoints in Fresenius Kabi Agilia Link+ v3.0 and prior can be accessed without any authentication information such as the session cookie. An attacker can send requests to sensitive endpoints as an unauthenticated user to perform critical actions or modify critical configuration...

CVE-2025-29722

A CSRF vulnerability in Commercify v1.0 allows remote attackers to perform unauthorized actions on behalf of authenticated users. The issue exists due to missing CSRF protection on sensitive endpoints...

CVE-2025-29722

A CSRF vulnerability in Commercify v1.0 allows remote attackers to perform unauthorized actions on behalf of authenticated users. The issue exists due to missing CSRF protection on sensitive endpoints...