CVE-2026-20212 | Critical | 9.8 | 2026-09-02 | A vulnerability in the Silicon One integration for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute code with r… |
CVE-2026-82456 | Critical | 10.0 | 2026-08-29 | argocd-mcp 0.8.0 binds its HTTP transport to every network interface and accepts MCP sessions without requiring caller credentials when ARGOCD_API_TOKEN is con… |
CVE-2026-72924 | | | 2026-08-25 | GitHub CLI (gh) is GitHub's official command line tool. Versions 2.28.0 through 2.97.0 bind the local listener created by gh codespace ports forward to all ava… |
CVE-2026-16713 | Medium | 4.3 | 2026-08-13 | IBM Documentation Offline 1.0.0 through 1.4.1 IBM Documentation could allow a remote attacker to obtain sensitive information due to a security misconfiguratio… |
CVE-2026-16503 | Critical | 9.1 | 2026-07-31 | Deployment of the VPS.org one-click Supabase template deploys a PostgreSQL instance that is published on all interfaces (0.0.0.0:5432) with a default database… |
CVE-2026-47873 | High | 8.0 | 2026-07-30 | The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's network interfaces (0.0.0.0) rather than restricti… |
CVE-2026-55641 | High | 8.2 | 2026-07-10 | 9Router is an AI router & token saver. Prior to 0.5.2, 9router determines whether a /v1 LLM proxy request is local by reading the client-controlled Host header… |
CVE-2026-0481 | | | 2026-05-15 | Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to perform unauthorized changes to the GPU co… |
CVE-2026-42503 | High | 8.8 | 2026-05-06 | gopls by default communicates via pipe. However, -port and -listen flags are supported as means of debugging.
If -listen is given a value without an explicit h… |
CVE-2026-24015 | Critical | 9.8 | 2026-03-09 | A vulnerability in Apache IoTDB.
This issue affects Apache IoTDB: from 1.0.0 before 1.3.7, from 2.0.0 before 2.0.7.
Users are recommended to upgrade to versi… |
CVE-2026-28395 | Medium | 6.5 | 2026-03-05 | OpenClaw version 2026.1.14-1 prior to 2026.2.12 contains an improper network binding vulnerability in the Chrome extension (must be installed and enabled) rela… |
CVE-2026-21528 | Medium | 6.5 | 2026-02-10 | Binding to an unrestricted ip address in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network. |
CVE-2025-11538 | Medium | 6.8 | 2025-11-13 | A vulnerability exists in Keycloak's server distribution where enabling debug mode (--debug <port>) insecurely defaults to binding the Java Debug Wire Protocol… |
CVE-2025-61934 | Critical | 10.0 | 2025-10-23 | A binding to an unrestricted IP address vulnerability was discovered in Productivity Suite software version v4.4.1.19. The vulnerability allows an unauthentica… |
CVE-2025-55322 | High | 7.3 | 2025-09-24 | Binding to an unrestricted ip address in GitHub allows an unauthorized attacker to execute code over a network. |
CVE-2025-3621 | Critical | 9.6 | 2025-07-15 | Vulnerabilities* in ActADUR local server product, developed and maintained by ProTNS, allows Remote Code Inclusion on host systems.
* vulnerabilities:
*… |
CVE-2024-49384 | Medium | 4.3 | 2024-10-15 | Excessive attack surface in acep-collector service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16… |
CVE-2024-49383 | Medium | 4.3 | 2024-10-15 | Excessive attack surface in acep-importer service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16 (… |
CVE-2024-49382 | Medium | 4.3 | 2024-10-15 | Excessive attack surface in archive-server service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16… |
CVE-2024-47176 | Medium | 5.3 | 2024-09-26 | CUPS is a standards-based, open-source printing system, and `cups-browsed` contains network printing functionality including, but not limited to, auto-discover… |
CVE-2024-36105 | Medium | 5.3 | 2024-05-27 | dbt enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications. Prior to versions 1… |
CVE-2023-5398 | Medium | 5.9 | 2024-04-17 | Server receiving a malformed message based on a list of IPs resulting in heap corruption causing a denial of service. See Honeywell Security Notification for r… |
CVE-2023-41742 | High | 7.5 | 2023-08-31 | Excessive attack surface due to binding to an unrestricted IP address. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build… |
CVE-2023-1968 | Critical | 10.0 | 2023-04-28 |
Instruments with Illumina Universal Copy Service v2.x are vulnerable due to binding to an unrestricted IP address. An unauthenticated malicious actor could us… |
CVE-2022-29820 | Low | 3.0 | 2022-04-28 | In JetBrains PyCharm before 2022.1 exposure of the debugger port to the internal network was possible |