VulnCheck

OpenMed < 1.5.2 Remote Code Execution via PII Model Loading

Python StateMachine 3.0.0 < 3.2.0 RCE via SCXML eval() Injection

rConfig Core < 8.2.8 Privilege Escalation via Users API role field

AIT-GUI < 2.5.1 Missing Authentication via Sessions.create()

AIT-DSN < 2.2.2 Missing Authentication via SLE API Routes

SuperPlane < 0.30.0 SMTP Header Injection via Webhook Event Title

gpsd gpsprof Code Injection via SKY.satellites used Field

Care Everywhere Gateway 14.3.10 Hard-coded Credentials RCE via WildFly

SuperPlane < 0.27.0 Broken Object Level Authorization via CanvasService gRPC

GFI Archiver < 15.13 Stored XSS via CallHomeSettingsWizard.aspx