Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Nozbe Clear all filters
TI-2025-33706 CVE-2025-53813 · GHSA-r4cg-2rhj-cv67

TCC Bypass via misconfigured Node fuses in Nozbe

Priority LOW 21

The configuration of Nozbe on macOS, specifically the "RunAsNode" fuse enabled, allows a local attacker with unprivileged access to execute arbitrary code that inherits Nozbe TCC (Transparency, Consent, and Control) perm…

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.0013 Published 2025-08-26 Fixed in 2025.11 CWE-276
TI-2020-03525 CVE-2020-4035 · GHSA-38f9-m297-6q9g

DoS or local data modification via malicious record IDs in WatermelonDB

Priority LOW 28

In WatermelonDB (NPM package "@nozbe/watermelondb") before versions 0.15.1 and 0.16.2, a maliciously crafted record ID can exploit a SQL Injection vulnerability in iOS adapter implementation and cause the app to delete a…

CVSS 3.1MEDIUM 5.9 Network Low privileges No interaction EPSS 0.00763 Published 2020-06-03 Fixed in 0.15.1, 0.16.2 CWE-89