Lucene search
+L

15560 matches found

ATTACKERKB
ATTACKERKB
added 2026/07/19 12:2 p.m.9 views

CVE-2026-63819

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on f2fsgetnodefoliora kernel BUG at fs/f2fs/file.c:845! Oops: invalid opcode: 0000 1 SMP KASAN NOPTI CPU: 0 UID: 0 PID: 5336 Comm: syz.0.0 Not tainted syzkaller 0 PREEMPTfull Hardware name: QEMU...

7.8CVSS5.2AI score0.00119EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2026/07/19 12:0 a.m.12 views

PT-2026-61323

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter nf tables component where destination corruption occurs during same register operations. For lshift and rshift operations, the system performs shifts in ...

5.4AI score0.00171EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/07/19 12:0 a.m.16 views

PT-2026-61126

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bdev pseudo-filesystem, an internal kernel filesystem that should not be accessible to userspace. A kernel NULL pointer dereference occurs when userspace attempts ...

9.8CVSS5.2AI score0.0069EPSS
SaveExploits0References78
Positive Technologies
Positive Technologies
added 2026/07/19 12:0 a.m.15 views

PT-2026-61315

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ethtool module where the ethnl ops complete function is not called when validate fails, despite ethnl ops begin having already been executed. This occurs during...

5.1AI score0.00166EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/07/19 12:0 a.m.15 views

PT-2026-61384

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfs component where the list of subrequests attached to stream-subrequests is accessed without locks by the functions netfs collect read results and netfs collec...

9.8CVSS5.1AI score0.0038EPSS
SaveExploits0
Veracode
Veracode
added 2026/07/18 4:50 p.m.10 views

Authentication Bypass

netlicensing-mcp is vulnerable to Authentication Bypass. The vulnerability is due to the API key middleware failing to enforce authentication and falling back to the server operator's API key, which allows an unauthenticated attacker to invoke privileged MCP operations under the operator's identi...

5.9AI score
SaveExploits0References3Affected Software1
NVD
NVD
added 2026/07/18 2:17 p.m.18 views

CVE-2023-54366

SurrealDB before 1.0.1 sets default table permissions to FULL instead of NONE, allowing SELECT, CREATE, UPDATE, and DELETE operations on tables without explicit permissions. Attackers with database access or unauthenticated users on publicly exposed instances can perform unrestricted operations o...

8.8CVSS0.00277EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/18 1:10 p.m.37 views

CVE-2024-58367

SurrealDB before 2.0.4 has an improper authorization flaw in field permissions during SELECT, UPDATE, and DELETE, allowing an authorized user to leak protected field values through techniques such as SELECT VALUE, field aliasing, function arguments, WHERE filters, RETURN BEFORE, and SET clause re...

7.1CVSS5.2AI score0.00215EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/18 1:10 p.m.11 views

CVE-2023-54366

SurrealDB before 1.0.1 sets default table permissions to FULL instead of NONE, allowing SELECT, CREATE, UPDATE, and DELETE operations on tables without explicit permissions. Attackers with database access or unauthenticated users on publicly exposed instances can perform unrestricted operations o...

8.8CVSS5.3AI score0.00277EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/07/18 1:10 p.m.10 views

CVE-2023-54366 SurrealDB before 1.0.1 Insecure Default Table Permissions

SurrealDB before 1.0.1 sets default table permissions to FULL instead of NONE, allowing SELECT, CREATE, UPDATE, and DELETE operations on tables without explicit permissions. Attackers with database access or unauthenticated users on publicly exposed instances can perform unrestricted operations o...

8.8CVSS5.3AI score0.00277EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/18 1:10 p.m.7 views

CVE-2023-54366 SurrealDB before 1.0.1 Insecure Default Table Permissions

SurrealDB before 1.0.1 sets default table permissions to FULL instead of NONE, allowing SELECT, CREATE, UPDATE, and DELETE operations on tables without explicit permissions. Attackers with database access or unauthenticated users on publicly exposed instances can perform unrestricted operations o...

8.7CVSS5.3AI score
SaveExploits0References4
CVE
CVE
added 2026/07/18 1:10 p.m.20 views

CVE-2023-54366

CVE-2023-54366 affects SurrealDB prior to 1.0.1, where default table permissions are set to FULL instead of NONE. This misconfiguration allows attackers with database access or unauthenticated users on publicly exposed instances to perform uncontrolled SELECT, CREATE, UPDATE, and DELETE operation...

8.8CVSS5.3AI score0.00277EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/07/18 1:10 p.m.43 views

CVE-2023-54366 SurrealDB before 1.0.1 Insecure Default Table Permissions

SurrealDB before 1.0.1 sets default table permissions to FULL instead of NONE, allowing SELECT, CREATE, UPDATE, and DELETE operations on tables without explicit permissions. Attackers with database access or unauthenticated users on publicly exposed instances can perform unrestricted operations o...

8.8CVSS0.00277EPSS
SaveExploits0References2
NVD
NVD
added 2026/07/17 8:17 p.m.8 views

CVE-2026-14971

IBM PowerVM Novalink 2.2.02.2.12.2.1.1, and 2.3.02.3.0.12.3.12.3.2 IBM NovaLink APIs misconfiguration may increase attack surface and enable unintended or unauthorized operations under non-default conditions...

7CVSS0.00101EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/17 7:49 p.m.15 views

EUVD-2026-45302

IBM PowerVM Novalink 2.2.02.2.12.2.1.1, and 2.3.02.3.0.12.3.12.3.2 IBM NovaLink APIs misconfiguration may increase attack surface and enable unintended or unauthorized operations under non-default conditions...

3.9CVSS5.2AI score0.00101EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/17 7:49 p.m.44 views

CVE-2026-14971 This PowerVM Novalink update is being released to address

IBM PowerVM Novalink 2.2.02.2.12.2.1.1, and 2.3.02.3.0.12.3.12.3.2 IBM NovaLink APIs misconfiguration may increase attack surface and enable unintended or unauthorized operations under non-default conditions...

3.9CVSS0.00101EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/17 7:49 p.m.63 views

CVE-2026-14971

CVE-2026-14971 affects IBM PowerVM Novalink (PowerVM Novalink APIs) with misconfiguration that may increase attack surface and enable unintended or unauthorized operations under non-default conditions. Affected products/versions include PowerVM Novalink 2.2.0, 2.2.1, 2.2.1.1 and 2.3.0, 2.3.0.1, 2...

7CVSS5.2AI score0.00101EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/07/17 12:7 a.m.40 views

CVE-2026-62235 Grav Flex-Objects < 1.4.3 Authorization Bypass via API

Grav Flex-Objects before version 1.4.3 contains a broken access control vulnerability in the admin-next REST API that allows authenticated users with only api.access permission to perform unauthorized CRUD operations on permission-less directories. Attackers with api.access credentials can create...

6.3CVSS0.00169EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/07/17 12:7 a.m.16 views

EUVD-2026-45081

Grav Flex-Objects before version 1.4.3 contains a broken access control vulnerability in the admin-next REST API that allows authenticated users with only api.access permission to perform unauthorized CRUD operations on permission-less directories. Attackers with api.access credentials can create...

6.3CVSS6.1AI score0.00169EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/17 12:7 a.m.7 views

CVE-2026-62231 Grav < 1.0.6 API Key Scope Bypass via ApiKeyAuthenticator

The Grav API plugin getgrav/grav-plugin-api before 1.0.6 contains an authorization bypass: API keys can be created with a restricted scopes array, but the ApiKeyAuthenticator class never reads or enforces these scopes. It loads and returns the owning user's full account object, so a key created...

8.6CVSS5.4AI score
SaveExploits0References5
Rows per page
Query Builder