Filter

Cloudflare CfntsOut of Bounds Slice index in cfnts leads to remote panic

8.6
First published (updated )

Cloudflare Lua-resty-jsonOut of Bounds Access Leading to Undefined Behavior

7.5
First published (updated )

Cloudflare WarpRemote access to warp-svc.exe in Cloudflare WARP

7.3
First published (updated )

Cloudflare Lol-htmllol-html panics on certain HTML inputs

7.5
First published (updated )

Cloudflare WarpPlaintext transmission of DNS requests in Windows 1.1.1.1 WARP client

7.4
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Cloudflare WranglerDirectory traversal vulnerability in Cloudflare Wrangler

First published (updated )

Cloudflare Odoh-rsInvalid Slice Split Results in Server Panic

First published (updated )

Cloudflare WarpInjecting Activity Loads in WARP Mobile Client

First published (updated )

Cloudflare WarpSpoofing User's Activity Loads in WARP Mobile Client (Android)

3.9
First published (updated )

Cloudflare WarpInsufficient Validation on Override Codes for Always-Enabled WARP Mode

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

debian/cfrpkiNUL character in ROA causes OctoRPKI to crash

7.5
First published (updated )

debian/cfrpkiOctoRPKI lacks contextual out-of-bounds check when validating RPKI ROA maxLength values

7.5
First published (updated )

Cloudflare CloudflaredLocal Privilege Escalation in cloudflared

7.8
First published (updated )

go/github.com/cloudflare/cfrpkiInfinite open connection causes OctoRPKI to hang forever

7.5
First published (updated )

debian/cfrpkiMisconfigured IP address field in ROA leads to OctoRPKI crash

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Cloudflare WarpPrivilege escalation through unquoted service binary path on Cloudflare WARP for Windows

7.8
First published (updated )

Cloudflare ZlibMemory corruption issues is Cloudflare zlib implementation

EPSS
0.04%
First published (updated )

Cloudflare MiniflareServer-Side Request Forgery (SSRF) in Miniflare

8.1
EPSS
0.05%
First published (updated )

Cloudflare Golz4Out-of-bounds write in github.com/cloudflare/golz4

First published (updated )

Cloudflare OctorpkiInfinite certificate chain depth results in OctoRPKI running forever

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Debian Debian LinuxArbitrary filepath traversal via URI injection

First published (updated )

debian/cfrpkiOctoRPKI crashes when processing GZIP bomb returned via malicious repository

First published (updated )

Cloudflare Warpsupport_uri validation missing in WARP client for Windows

8.9
First published (updated )

Cloudflare WarpWARP client manifest misconfiguration leading to Task Hijacking

First published (updated )

go/github.com/cloudflare/cfrpkiOctoRPKI crash when maximum iterations number is reached

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Cloudflare WarpLock WARP switch bypass using warp-cli 'add-trusted-ssid' command

8.8
First published (updated )

Cloudflare Warp Mobile ClientLock WARP switch feature bypass on WARP mobile client for iOS

8.2
First published (updated )

Cloudflare Warp Mobile ClientLock WARP switch bypass by removing VPN profile on iOS mobile client

8.5
First published (updated )

Cloudflare Warp Mobile ClientLock WARP switch bypass on WARP mobile client using iOS quick action

7.5
First published (updated )

Cloudflare WarpBypassing Cloudflare Zero Trust policies using warp-cli set-custom-endpoint command

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203