Search Vulnerabilities

A vulnerability exists in REB500 for an authenticated user with low-level privileges to access and alter the content of directories by using the DA...

A vulnerability exists in REB500 for an authenticated user with Installer role to access and alter the contents of directories that the role is not...

Business Logic Error in Universal Software's FlexCity/Kiosk

Role Delegation - Moderately critical - Access bypass - SA-CONTRIB-2026-002

Mini site - Moderately critical - Cross-Site Scripting - SA-CONTRIB-2025-117

CVAT vulnerable to privilege escalation of users with staff status

Kiteworks MFT has a Privilege Defined With Unsafe Actions

VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)

Privilege Defined With Unsafe Actions in GitLab

Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions (4.0.16 only)

In Wing FTP Server through 7

Two-factor Authentication (TFA) - Less critical - Access bypass - SA-CONTRIB-2025-085

Privilege Chaining in Delphix

Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions

Incorrect permissions in Ivanti Secure Access Client before 22

Incorrect permissions in Ivanti Secure Access Client before version 22

Improper authorization in Ivanti Secure Access Client before version 22

Excessive binary privileges in Ivanti Connect Secure before version 22

Privilege Defined With Unsafe Actions in GitLab

Untrusted search path vulnerability in B&R APROL