Все уязвимости

node-opcua: Namespace-Level RBAC Fail-Open - Anonymous Write/Call Bypass via Unbound `DefaultRolePermissions

An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions...

.NET Security Feature Bypass Vulnerability

Visual Studio Code Security Feature Bypass Vulnerability

Visual Studio Code Security Feature Bypass Vulnerability

Apache Tomcat: OpenSSL-FFM FIPS failure does not prevent start-up

Apache Kafka: Broker silently skips JWT signature verification for SASL/OAUTHBEARER when the JWKS endpoint URL is not configured

A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP...

MCP Registry: OCI ownership validation fails open on upstream rate limits, allowing attacker-controlled package claims

Apache Pulsar: Namespace encryption requirement not enforced after a failure during topic initialization

Not Failing Securely ('Failing Open') in hMailServer

hex_core's default HTTP adapter doesn't verify TLS certificates on OTP 24 and 25

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Not Faili

SumatraPDF: `sumatrapdfrestrict.ini` never revokes any permission (fail-open policy initialization)

Fail-open response masking in Docker Sandboxes can expose proxy-managed credentials

Not Failing Securely ('Failing Open') in hMailServer

OpenViking < 0.3.9 Authentication Bypass via VikingBot OpenAPI

pgjdbc does not enforce requireAuth when the value excludes every authentication method

Authentication bypass via blank auth token in P4Search

djust: Multi-tenant isolation fails open on the WebSocket/SSE path, disclosing other tenants' data

IGEL OS 12 / 11 Secure Boot Bypass via Unsigned igel.conf File

TDuck survey form 6.0 Information Disclosure via Fail-Open Form Ownership Check

@bytebase/dbhub's read-only mode does not prevent database writes

heym before 0.0.105 Authentication Bypass via Redis Node

Busybox: busybox: httpd silently fails open when ip deny rules contain invalid cidr prefix lengths

APITable through 1.13.0-beta.1 Fail-Open Authorization in the Fusion API Node Permission Guard

Moquette fails open when configured authentication or authorization classes cannot load

AuthPoint Gateway Improper Authentication in LDAP Sync Allows First-Factor Authentication Bypass

Tinyauth: forward-auth per-app ACL is matched case-sensitively against the (case-insensitive) hostname, letting an authenticated user reach apps they are not on the allowlist for

SSRF protection bypass in safeurl via IPv6 addresses and unresolvable hosts