Search Vulnerabilities

NoteGen arbitrary OS command execution via Tauri shell:allow-execute for bash/python

Insecure permission overwrite due to execution of LogPathConfig.exe while installing _connect.BRAIN

Insecure permission assignment due to execution of LogPathConfig.exe during setup

SurrealDB before 2.1.4 Permission Bypass via DEFINE TABLE OVERWRITE

SurrealDB before 1.0.1 Insecure Default Table Permissions

nixos/mysql : `services.mysql` is configured with insecure authentication by default when used with `mysql` or `percona-server`

Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket

WinPVDrivers: Excessive permissions on user-exposed devices

WinPVDrivers: Excessive permissions on user-exposed devices

WinPVDrivers: Excessive permissions on user-exposed devices

Incorrect default permissions issue exists in Pupsman versions prior to 3.9.0

In JetBrains YouTrack before 2026.2.16593 default role configuration exposed excessive user profile details

A flaw in Node.js Permission API can cause a file metadata to be modified even on a path that was set as read-only with e.g

Warp may allow terminal output to access the local clipboard through OSC 52

Nuxt - Arbitrary File Read via World-Connectable vite-node IPC Socket on Linux

Incorrect permissions in ArubaSign by Aruba

Browserbase Skills Autobrowse Trace Artifact default permission

Hermes Agent < 0.16.0 - Sensitive File Permission Vulnerability in Store Files

Netskope Client Service Insufficient Access Controls

Incorrect default permissions issue exists in Optical Disc Archive Software for Windows 5.5.3 and earlier