CWE-1327

argocd-mcp 0.8.0 binds its HTTP transport to every network interface and accepts MCP sessions without requiring caller c

A vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.0.0 before 1.3.7, from 2.0.0 before 2.0.7. Us

Deployment of the VPS.org one-click Supabase template deploys a PostgreSQL instance that is published on all interfaces

gopls by default communicates via pipe. However, -port and -listen flags are supported as means of debugging. If -listen

9Router is an AI router & token saver. Prior to 0.5.2, 9router determines whether a /v1 LLM proxy request is local by re

The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's network int

Binding to an unrestricted ip address in Azure IoT Explorer allows an unauthorized attacker to disclose information over

OpenClaw version 2026.1.14-1 prior to 2026.2.12 contains an improper network binding vulnerability in the Chrome extensi

IBM Documentation Offline 1.0.0 through 1.4.1 IBM Documentation could allow a remote attacker to obtain sensitive inform

Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to per

GitHub CLI (gh) is GitHub's official command line tool. Versions 2.28.0 through 2.97.0 bind the local listener created b