RIOT OS (IoT operating system) tapslip6 utility has a stack buffer overflow due to unbounded strcpy/strcat with user-controlled device name input. PoC available.
Buffer Overflow
Stack Overflow
Riot
NVD
GitHub
VulDB
CVSS 4.0
2.4
EPSS
0.0%
wlc is a Weblate command-line client using Weblate's REST API. Prior to 1.17.0, the SSL verification would be skipped for some crafted URLs. [CVSS 2.5 LOW]
TLS
NVD
GitHub
CVSS 3.1
2.5
EPSS
0.0%
PILOS (Platform for Interactive Live-Online Seminars) is a frontend for BigBlueButton. Prior to 4.10.0, Cross-Site Request Forgery (CSRF) vulnerability exists in an administrative API endpoint responsible for terminating all active video conferences on a single server. [CVSS 2.4 LOW]
CSRF
Pilos
NVD
GitHub
CVSS 3.1
2.4
EPSS
0.0%
Metabase is an open-source data analytics platform. versions up to 55.13 is affected by server-side request forgery (ssrf).
SSRF
Metabase
NVD
GitHub
CVSS 4.0
2.1
EPSS
0.1%