GO-2026-6197 vulnerabilities

Vulnerabilities for packages: telegraf...

GO-2024-3281 vulnerabilities

Vulnerabilities for packages: rancher-agent...

GO-2024-3134 vulnerabilities

Vulnerabilities for packages: juicefs...

GO-2026-5213 vulnerabilities

Vulnerabilities for packages: openbao...

GO-2022-0411 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner...

CVE-2026-14478

The CVE-2026-14478 issue concerns Autodesk's installer named pipes. A malicious executable run on a victim machine could allow a local, low-privilege attacker to inject unauthenticated IPC messages into these named pipes, and to modify pipe permissions or ownership, with potential impact to confi...

GHSA-FP3F-MC75-235C vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-48588 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, authentik, openstack-horizon-2026.1, authentik-fips...

EUVD-2024-0595

Malicious code in bioql PyPI...

EUVD-2021-9851

Malicious code in bioql PyPI...

EUVD-2022-46022

Malicious code in bioql PyPI...

CVE-2024-31202

A “CWE-732: Incorrect Permission Assignment for Critical Resource” in the ThermoscanIP installation folder allows a local attacker to perform a Local Privilege Escalation...

CVE-2024-31202

CVE-2024-31202 concerns ThermoscanIP. Root cause: CWE-732 — incorrect permission assignment for a critical resource in the ThermoscanIP installation folder. This misconfiguration enables a local attacker with low privileges and no user interaction to achieve Local Privilege Escalation. CVSSv3.1 m...

CVE-2024-31202

A “CWE-732: Incorrect Permission Assignment for Critical Resource” in the ThermoscanIP installation folder allows a local attacker to perform a Local Privilege Escalation...

Rockwell Automation Pavilion 8

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION : Exploitable remotely/low attack complexity Vendor : Rockwell Automation Equipment : Pavilion 8 Vulnerability : Incorrect Permission Assignment for Critical Resource 2. RISK EVALUATION Successful exploitation of this vulnerability could allow...

CVE-2023-34042

The spring-security.xsd file inside the spring-security-config jar is world writable which means that if it were extracted it could be written by anyone with access to the file system. While there are no known exploits, this is an example of “CWE-732: Incorrect Permission Assignment for Critical...

Design/Logic Flaw

The spring-security.xsd file inside the spring-security-config jar is world writable which means that if it were extracted it could be written by anyone with access to the file system. While there are no known exploits, this is an example of “CWE-732: Incorrect Permission Assignment for Critical...

CVE-2023-34042

The spring-security.xsd file inside the spring-security-config jar is world writable which means that if it were extracted it could be written by anyone with access to the file system. While there are no known exploits, this is an example of “CWE-732: Incorrect Permission Assignment for Critical...

CVE-2023-34042

The CVE-2023-34042 issue concerns the Spring Security spring-security-config jar where the spring-security.xsd file is world-writable. This enables a local authenticated attacker to write the file, reflecting CWE-732: Incorrect Permission Assignment for Critical Resource. The connected IBM and OS...

CVE-2023-34042

The spring-security.xsd file inside the spring-security-config jar is world writable which means that if it were extracted it could be written by anyone with access to the file system. While there are no known exploits, this is an example of “CWE-732: Incorrect Permission Assignment for Critical...