Search
65 results- CRITICAL9.8CVE-2026-42208⚠ KEVEPSS 56.9%LiteLLM has SQL Injection in Proxy API key verification
- CRITICAL9.8CVE-2026-39987⚠ KEVEPSS 82.2%Marimo: Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass
- HIGH8.8CVE-2026-34197⚠ KEVEPSS 83.5%Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeans
- —CVE-2026-33634⚠ KEVEPSS 29.4%Trivy ecosystem supply chain was briefly compromised
- CRITICAL9.8CVE-2026-33017⚠ KEVEPSS 24.0%Unauthenticated Remote Code Execution in Langflow via Public Flow Build Endpoint
- HIGH8.8CVE-2025-34291⚠ KEVEPSS 32.7%Langflow CORS misconfiguration enables Account Takeover and RCE
- HIGH8.2CVE-2025-58360⚠ KEVEPSS 81.4%GeoServer is vulnerable to Unauthenticated XML External Entities (XXE) attack via WMS GetMap feature
- CRITICAL9.8CVE-2025-3248⚠ KEVEPSS 92.7%Langflow Unauth RCE
- CRITICAL9.8CVE-2025-24813⚠ KEVEPSS 94.1%Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT
- CRITICAL9.8CVE-2025-24893⚠ KEVEPSS 93.7%XWiki Platform allows remote code execution as guest via SolrSearchMacros request
- CRITICAL9.8CVE-2024-36401⚠ KEVEPSS 94.4%Remote Code Execution (RCE) vulnerability in geoserver
- CRITICAL9.8CVE-2024-27348⚠ KEVEPSS 94.3%Apache HugeGraph-Server: Command execution in gremlin
- CRITICAL9.8CVE-2024-23897⚠ KEVEPSS 94.5%Arbitrary file read vulnerability through the Jenkins CLI can lead to RCE
- CRITICAL10.0CVE-2023-46604⚠ KEVEPSS 94.4%Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack
- MEDIUM5.3CVE-2023-44487⚠ KEVEPSS 94.4%nghttp2 - security update
- CRITICAL9.8CVE-2022-24816⚠ KEVEPSS 94.0%Improper Control of Generation of Code ('Code Injection') in jai-ext
- HIGH8.8CVE-2023-4863⚠ KEVEPSS 93.3%libwebp: OOB write in BuildHuffmanTable
- CRITICAL9.8CVE-2023-33246⚠ KEVEPSS 94.4%Apache RocketMQ may have remote code execution vulnerability when using update configuration function
- HIGH8.6CVE-2023-32315⚠ KEVEPSS 94.4%Administration Console authentication bypass in openfire xmppserver
- HIGH8.9CVE-2023-27524⚠ KEVEPSS 84.0%Apache superset missing check for default SECRET_KEY
- HIGH7.5CVE-2022-36537⚠ KEVEPSS 93.9%ZK Framework vulnerable to malicious POST
- HIGH8.8CVE-2022-33891⚠ KEVEPSS 93.5%Apache Spark UI can allow impersonation if ACLs enabled
- CRITICAL9.8CVE-2020-16846⚠ KEVEPSS 94.4%salt - security update
- CRITICAL9.8CVE-2020-11651⚠ KEVEPSS 94.2%salt - security update
- MEDIUM6.5CVE-2020-11652⚠ KEVEPSS 93.7%SaltStack Salt is vulnerable Arbitrary Directory Access
Page 1 of 3Next →