Search Vulnerabilities

Rapid7 InsightVM, Nexpose, and Insight Agent Local Privilege Escalation via Unvalidated Executable Invocation

snap-confine Local Privilege Escalation via Capabilities Misconfiguration or Flaw in Execution Environment Setup

snapd snap-confine Sandbox Confinement Bypass via Omission of setuid Restriction in Seccomp Templates

A potential vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated u...

Redhatinsights/incluster-checks: incluster-checks: privileged host-chroot debug pods created in shared default namespace enable privilege escalatio...

Multiple RBAC issues in XAPI

Multiple RBAC issues in XAPI

Multiple RBAC issues in XAPI

Multiple RBAC issues in XAPI

Multiple RBAC issues in XAPI

Daytona: Path traversal in sandbox volume id mounts arbitrary host paths into the sandbox — cross-tenant data access and host escape

Microsoft Azure Synapse Elevation of Privilege Vulnerability

Cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall

IPAM controller service account granted unnecessary full access to Secrets

Local Privilege Escalation in Symantec Endpoint Protection macOS CleanWipe Removal Tool

Fission: Environment Runtime.Container and Builder.Container SecurityContext bypass allows privileged pod creation

Fission builder pods auto-mount the fission-builder ServiceAccount token in the user-supplied builder container

Fission builder accepts arbitrary buildcmd strings from Environment.spec.builder.command, allowing the builder pod to invoke arbitrary executables

Fission runtime pods automount the fission-fetcher service-account token into the user function container, granting function code namespace-wide se...

A vulnerability has been identified in SINEC INS (All versions < V1