Search Vulnerabilities

Multiple Vulnerabilities in IBM Guardium Key Lifecycle Manager

IBM WebSphere Application Server Liberty is affected by identity spoofing

Missing large page handling in pmap_pkru_update_range()

Neko has Self-service Privilege Escalation for Authenticated Users

Dell PowerProtect Data Domain appliances, versions 7

NovumOS has Arbitrary Memory Mapping via Syscall 15 (MemoryMapRange)

NovumOS has Privilege Escalation in the Syscall Interface

ChurchCRM: Authenticated Remote Code Execution via Unrestricted PHP File Write in Database Restore Function

ZTE Red Magic 11 Pro (NX809J) contains a vulnerability that allows non-privileged applications to trigger sensitive operations.

Dell Storage Manager - Replay Manager for Microsoft Servers, version(s) 8

Barcode Scanner (+Mobile App) <= 1.11.0 - Unauthenticated Privilege Escalation via Insecure Token Authentication

Weblate: Privilege escalation in the user API endpoint

Chamilo LMS has Privilege Escalation via API User Role Modification

Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability

Connected User Experiences and Telemetry Service Denial of Service Vulnerability

BuddyPress Groupblog <= 1.9.3 - Authenticated (Subscriber+) Privilege Escalation to Administrator via Group Blog IDOR

Chamilo LMS has a REST API Self-Privilege Escalation (Student → Teacher)

Vikunja Affected by Privilege Escalation via Project Reparenting

Aiven Operator has cross-namespace secret exfiltration via ClickhouseUser connInfoSecretSource

File Browser: Proxy auth auto-provisioned users inherit Execute permission and Commands