Find published vulnerabilities, affected versions, and available fixes.
Bring the source evidence into your coding agent to investigate what affects your project.
Sponsored by MoxsoBuild security habits with adaptive training and phishing simulations.Opens in a new tabExplore advisories by severity, ecosystem, and known exploitation. Take the evidence into your next agent session.
Recent security developmentsTanium addressed an insufficient logging vulnerability in Tanium Server.
No structured fix or guidance is available here. Check the latest publisher advisory.
Exploitation not established
OpenBao before 2.6.4 and 2.7.x before 2.7.1 fails to write response audit entries for the unauthenticated sys/generate-root, sys/rekey, and sys/rekey-recovery-key endpoints when request audit logging succeeds but response audit logging fails. An attacker using these endpoints can complete root token generation or rekey operations without a corresponding response audit record, hindering forensic detection.
No structured fix or guidance is available here. Check the latest publisher advisory.
Exploitation not established
Insufficient logging in SQL Server allows an authorized attacker to bypass a security feature over a network.
No structured fix or guidance is available here. Check the latest publisher advisory.
Exploitation not established
VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform certain operations without them being logged.
No structured fix or guidance is available here. Check the latest publisher advisory.
