6602 matches found
CVE-2018-11133
creationtimestamp| type| source ---|---|--- 2025-06-10 20:41:02+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2018/CVE-2018-11133.yaml 2025-06-10 20:41:02+00:00| confirmed|...
GO-2025-3744 SpiceDB checks involving relations with caveats can result in no permission when permission is expected in github.com/authzed/spicedb
SpiceDB checks involving relations with caveats can result in no permission when permission is expected in github.com/authzed/spicedb...
GO-2025-3741 kro Confused Deputy vulnerability in github.com/kro-run/kro
kro Confused Deputy vulnerability in github.com/kro-run/kro...
GO-2025-3740 Grafana vulnerable to authenticated users bypassing dashboard, folder permissions in github.com/grafana/grafana
Grafana vulnerable to authenticated users bypassing dashboard, folder permissions in github.com/grafana/grafana. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports...
CVE-2021-33558
creationtimestamp| type| source ---|---|--- 2025-06-09 08:11:19+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-33558.yaml 2025-06-12 21:02:24+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lrgsziadi62h...
GO-2025-3729 Mattermost fails to clear Google OAuth credentials in github.com/mattermost/mattermost-server
Mattermost fails to clear Google OAuth credentials in github.com/mattermost/mattermost-server...
GO-2025-3728 Mattermost fails to properly enforce access control restrictions for System Manager roles in github.com/mattermost/mattermost-server
Mattermost fails to properly enforce access control restrictions for System Manager roles in github.com/mattermost/mattermost-server...
GO-2025-3737 Gokapi vulnerable to stored XSS via uploading file with malicious file name in github.com/forceu/gokapi
Gokapi vulnerable to stored XSS via uploading file with malicious file name in github.com/forceu/gokapi. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from...
CVE-2020-12262
creationtimestamp| type| source ---|---|--- 2025-05-30 17:26:06+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2020/CVE-2020-12262.yaml 2025-05-31 21:02:17+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lqingbowdy27...
GO-2025-3718 Contrast workload secrets leak to logs on INFO level in github.com/edgelesssys/contrast
Contrast workload secrets leak to logs on INFO level in github.com/edgelesssys/contrast...
GO-2025-3717 ActiveMQ Artemis AMQ Broker Operator Starting Credentials Reuse in github.com/arkmq-org/activemq-artemis-operator
ActiveMQ Artemis AMQ Broker Operator Starting Credentials Reuse in github.com/arkmq-org/activemq-artemis-operator...
CVE-2019-25141
creationtimestamp| type| source ---|---|--- 2025-05-29 17:22:45+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2019/CVE-2019-25141.yaml 2025-05-31 21:02:17+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lqingbmgah2a 2026-05-23...
CVE-2024-4620
creationtimestamp| type| source ---|---|--- 2025-05-29 09:42:55+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-4620.yaml 2025-05-31 21:02:23+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lqingchywa2c...
GO-2025-3707 OpenFGA Authorization Bypass in github.com/openfga/openfga
OpenFGA Authorization Bypass in github.com/openfga/openfga...
CVE-2025-3704
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DBAR Productions Volunteer Sign Up Sheets allows Stored XSS.This issue affects Volunteer Sign Up Sheets: from n/a before 5.5.5. The patch is available exclusively on GitHub at...
CVE-2023-38879
creationtimestamp| type| source ---|---|--- 2025-05-27 08:09:41+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-38879.yaml 2025-05-27 21:02:16+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lq6lkkrkoi22...
GO-2025-3700 Character injection in Hubble CLI in github.com/cilium/hubble
Character injection in Hubble CLI in github.com/cilium/hubble...
CVE-2024-0322
Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV...