CRITICAL10.0Read-only volume remount bypass via guest CAP_SYS_ADMIN
LOW2.0NocoDB: OAuth Token Scope Not Enforced at ACL Layer Allows Scope Escalation
CRITICAL9.8EPSS 0.04%A use-after-free vulnerability exists within the DNS-over-HTTPS implementation.
CRITICAL10.0EPSS 0.03%NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to poisoning via promiscuous records for the authority section.
CRITICAL9.8EPSS 0.32%NLnet Labs Unbound 1.19.1 up to and including version 1.25.0 has a vulnerability in the DNSSEC validator that enables denial of service and…
LOW3.7EPSS 0.04%Rsync versions before 3.4.3 contain an off-by-one out-of-bounds stack write vulnerability in the establish_proxy_connection() function in s…
CRITICAL10.0Malicious code in @beproduct/nestjs-auth (0.1.2 through 0.1.19) — Mini Shai-Hulud worm
CRITICAL9.8EPSS 0.10%Turbo: Unexpected local code execution during Yarn Berry detection
CRITICAL9.8EPSS 0.10%NGINX JavaScript has a vulnerability when the js_fetch_proxy directive is configured with at least one client-controlled NGINX variable (fo…
CRITICAL9.8EPSS 0.08%vm2 Has a Sandbox Breakout Using Async Generator
CRITICAL9.6EPSS 0.05%DeepSeek TUI: run_tests Tool Enables RCE via Malicious Repository Without Approval
CRITICAL9.3Apostrophe has default XSS via `xmp` raw-text passthrough in `sanitize-html`
CRITICAL9.1EPSS 0.10%SillyTavern has a Path Traversal issue
CRITICAL9.8EPSS 0.09%SillyTavern has Authentication Bypass via SSO Header Injection
CRITICAL9.8Open Source Kubectl MCP Server vulnerable to arbitrary code execution via user interaction with crafted HTML page