Search Vulnerabilities

oxenstored keeps quota related use counts across domain destruction

Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destination

Tarfile.extract() doesn't fully respect filter parameter

Stale PSA ClusterRoleBinding Persists After RoleTemplate Downgrade in Rancher

WordPress wpForo Forum plugin < 3.0.2 - Broken Access Control vulnerability

Improper preservation of permissions vulnerability in Archiving Push functionality in Synology Surveillance Station before 9

Snipe-IT: Privilege Escalation via API Permissions Assignment

NVIDIA Display Driver for Linux contains a vulnerability in a kernel mode layer handler, where a user could cause improper permission handling

MantisBT authorization bypass allows continued access to self-uploaded attachments on private issues

Joplin Server delta API returns note content after share access is revoked

filemanagement_storage_service has an improper preservation of permissions vulnerability

Improper Access Control via Gateway API in Multiple WSO2 Products Allows Unauthorized Operations

uutils coreutils mknod Security Label Inconsistency and Broken Cleanup on SELinux Systems

uutils coreutils mv Silent Ownership Loss in Cross-Device Operations

uutils coreutils cp Unexpected Privileged Executable Creation with -p

In OpenSSH before 10

Networkmanager: networkmanager file access

3scale-porta: readonly fields not validated server-side

Improper preservation of permissions in Elastic Defend on Windows hosts can lead to arbitrary files on the system being deleted by the Defend servi...

Nagios Log Server < 2024R1.3.2 Set Email Privilege Escalation