Lucene search
+L

4 matches found

Cvelist
Cvelist
added 2026/07/20 12:04 p.m.40 views

CVE-2026-63733 SurrealDB before 3.2.0 Permissions Bypass via PERMISSIONS Clause

SurrealDB versions before 3.2.0 contain a permissions bypass vulnerability where data-modifying statements within PERMISSIONS clauses execute with enforcement disabled. Attackers with permission to perform a guarded operation can write to tables they lack permission for by embedding CREATE, UPDAT...

5.3CVSS0.00287EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/07/20 12:04 p.m.11 views

EUVD-2026-45904

SurrealDB versions before 3.2.0 contain a permissions bypass vulnerability where data-modifying statements within PERMISSIONS clauses execute with enforcement disabled. Attackers with permission to perform a guarded operation can write to tables they lack permission for by embedding CREATE, UPDAT...

5.3CVSS5.4AI score0.00287EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/07/20 12:04 p.m.11 views

CVE-2026-63733 SurrealDB before 3.2.0 Permissions Bypass via PERMISSIONS Clause

SurrealDB versions before 3.2.0 contain a permissions bypass vulnerability where data-modifying statements within PERMISSIONS clauses execute with enforcement disabled. Attackers with permission to perform a guarded operation can write to tables they lack permission for by embedding CREATE, UPDAT...

5.3CVSS5.4AI score0.00287EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/01/18 12:00 a.m.9 views

Oracle WebLogic Server 输入验证错误漏洞

Oracle WebLogic Server is an application services middleware from Oracle for cloud and traditional environments that provides a modern, lightweight development platform that supports full lifecycle management of applications from development to production and simplifies application deployment and...

6.1CVSS5.6AI score0.00946EPSS
SaveExploits0References4
Rows per page
Query Builder