54450 matches found
GO-2026-4964 vulnerabilities
Vulnerabilities for packages: telegraf...
GHSA-45PQ-889G-FCGH vulnerabilities
Vulnerabilities for packages: telegraf...
SurrealDB: Array element-level (field.*) SELECT permissions leak denied elements to record users
A SELECT permission defined on an array element DEFINE FIELD field. … PERMISSIONS FOR select … is not enforced correctly for RECORD users. Instead of hiding the denied elements, the query leaks a subset of them: a deny-all returns the odd-indexed elements, and a per-element predicate keeps and...
CVE-2026-19841
A flaw has been found in TRENDNET TEW-813DRU 1.01b01. Impacted is an unknown function of the file /etc/vsftpd.conf of the component vsftpd. This manipulation causes incorrect default permissions. The attack is possible to be carried out remotely. A high degree of complexity is needed for the...
EUVD-2026-58718
A flaw has been found in TRENDNET TEW-813DRU 1.01b01. Impacted is an unknown function of the file /etc/vsftpd.conf of the component vsftpd. This manipulation causes incorrect default permissions. The attack is possible to be carried out remotely. A high degree of complexity is needed for the...
CVE-2026-19841
CVE-2026-19841 affects TRENDNET TEW-813DRU running 1.01b01. The flaw involves an unknown function of the component vsftpd, specifically the file /etc/vsftpd.conf, causing incorrect default permissions. The attack is described as remote and requires a high degree of complexity to succeed. Exploita...
CVE-2026-63700
Dell Wyse Management Suite WMS, versions prior to 2605.0.2, contain an Incorrect Default Permission vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Privilege Escalation...
CVE-2026-72822 Grav before 1.0.13 Authentication Bypass via disable2fa
The getgrav/grav-plugin-api Composer package before 1.0.13 affected = 1.0.12 fails to enforce API key scope caps on the disable2fa endpoint. Unlike the sibling generate2fa endpoint, disable2fa authorizes the admin non-self path solely via ACL reads isSuperAdmin/hasPermission and never invokes...
EUVD-2026-58635
Grav Form plugin versions before 9.1.15 contain a stored cross-site scripting vulnerability in radio and toggle field option labels rendered with the Twig |raw filter. Attackers with form authoring permissions can inject HTML and script payloads in option labels that execute in the browsers of...
GO-2026-5596 vulnerabilities
Vulnerabilities for packages: telegraf...
GO-2026-4962 vulnerabilities
Vulnerabilities for packages: mattermost, mattermost-fips...
GO-2022-0197 vulnerabilities
Vulnerabilities for packages: hey...
GO-2025-3842 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector...
GO-2023-1793 vulnerabilities
Vulnerabilities for packages: secrets-store-csi-driver...
GO-2026-5558 vulnerabilities
Vulnerabilities for packages: opentofu...
GO-2026-5213 vulnerabilities
Vulnerabilities for packages: openbao...
GO-2026-4896 vulnerabilities
Vulnerabilities for packages: minio...
GO-2022-0587 vulnerabilities
Vulnerabilities for packages: opa...