Dell Container Storage Modules (CSM), versions prior to v1.18.0, contains a Missing Authentication for Critica

Dell Container Storage Modules (CSM), versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-storage gRPC server. An unauthenticated

CVSS 10.0

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Fun

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially expl

CVSS 10.0

Payload is a free and open source headless content management system. In @payloadcms/plugin-form-builder versi

Payload is a free and open source headless content management system. In @payloadcms/plugin-form-builder versions before 3.90.0 and canary versions before 4.0.0-canary.34, an attacker can craft a form

CVSS 10.0

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.22.0, the SSR

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.22.0, the SSR-only getHead() serializer in ui/src/plugins/meta/Meta.js used getAttr() to interpolate va

CVSS 10.0

Dell Container Storage Modules (CSM) Operator, versions prior to 1.18.0 contains an Improper Privilege Managem

Dell Container Storage Modules (CSM) Operator, versions prior to 1.18.0 contains an Improper Privilege Management vulnerability in the ContainerStorageModule Custom Resource reconciler. A low privileg

CVSS 9.9

Langflow: PythonREPLComponent executes unsandboxed Python code, enabling authenticated RCE and privilege escal

### Summary Langflow's built-in Python interpreter components — `PythonREPLComponent` (Python Interpreter) and the legacy `PythonREPLToolComponent` (Python REPL Tool) — executed arbitrary user- or mo

CVSS 9.9

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerab

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the csm-docs. An unauthenticated attacker with remote access could potentially ex

CVSS 9.8

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerab

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the CSM Authorization. An unauthenticated attacker with remote access could poten

CVSS 9.8

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an untrusted user who can query readable collecti

CVSS 9.8

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary ver

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, an attacker can submit a request to a specific update endpoi

CVSS 9.8

An OS command injection vulnerability in the shell-based temporary-file cleanup instructions in Progress Softw

An OS command injection vulnerability in the shell-based temporary-file cleanup instructions in Progress Software Autonomous REST Connector GenAI Agents ARCGenAI-Generator version 2.0 allows an attack

CVSS 9.6

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Improper Neutralization of Special Ele

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Improper Neutralization of Special Elements Used in a Template Engine vulnerability. A low privileged attacker with remote acces

CVSS 9.6

Mooncake through 0.3.13.post1 contains a missing authentication vulnerability in the Store REST service, which

Mooncake through 0.3.13.post1 contains a missing authentication vulnerability in the Store REST service, which binds to 0.0.0.0 without authentication on any route. Unauthenticated attackers can call

CVSS 9.3

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an unauthenticated user can submit prototype-sens

CVSS 9.3

The Crayons plugin for SPIP before 3.5.0 contains a missing authorization vulnerability that allows unauthenti

The Crayons plugin for SPIP before 3.5.0 contains a missing authorization vulnerability that allows unauthenticated attackers to modify arbitrary editable object fields by omitting the secu_ anti-forg

CVSS 9.3