Search Vulnerabilities

gonic has arbitrary file write in createPlaylist: any authenticated user can write playlist M3U content to attacker-controlled path on the host

Steeltoe: TLS private keys written to /tmp with default permissions, never deleted

OpenClaw 2026.4.23 < 2026.4.24 - Insecure File Permissions in Config Recovery via OpenClaw.json

Prisma Access Agent: Local Privilege Escalation by Authorized Users

Fission: Incomplete capability denylist in Environment/Function PodSpec validation allows tenant-added CAP_SYS_TIME and cross-tenant node wall-cloc...

clash-verge-service-ipc before 2

In Mimecast Incydr before 2

Openshift-pipelines-operator-rh: openshift-pipelines-operator: tekton-scheduler-rolebinding grants system:authenticated write access to kueue and c...

MDM Server Registration Overriding

Dräger Protector Software Local Privilege Escalation via Insecure File Permissions

Dräger Protector Software Local Privilege Escalation via Insecure File Permissions

Kiro IDE Insufficient File Write Restrictions to Execution-Sensitive Paths

Incorrect permission assignment for critical resource issue exists in ServerView Agents for Windows V11

Incorrect Permission Assignment for Critical Resource vulnerability in Suprema's BioStar

An Incorrect Permission Assignment for Critical Resource vulnerability in ASUS System Control Interface allows a local user to elevate privileges t...

Incorrect permission assignment for a critical resource in Armoury Crate allows a local user to bypass the driver’s validation mechanism, resulting...

electerm: Local code through electerm's single-instance socket

NitroSense V3: Security Vulnerability Information

Hitachi Vantara Pentaho Data Integration & Analytics - Incorrect Permission Assignment for Critical Resource

A high-severity vulnerability in the deployment of Genetec RabbitMQ that allows a privilege escalation attack