CWE-284

Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by an Improper Access Control vul

An issue was discovered in the GrowthExperiments extension for MediaWiki through 1.39.3. Attackers might be able to see

PowerJob V4.3.1 is vulnerable to Incorrect Access Control via the create app interface.

PowerJob V4.3.1 is vulnerable to Incorrect Access Control via the create user/save interface.

Improper access control in firmware for some Intel(R) NUC Boards, Intel(R) NUC 11 Performance Kit, Intel(R) NUC 11 Perfo

A vulnerability was found in KylinSoft kylin-software-properties on KylinOS. It has been declared as critical. This vuln

The JobSearch WP Job Board plugin for WordPress is vulnerable to authorization bypass due to a missing capability check

The CMP – Coming Soon & Maintenance plugin for WordPress is vulnerable to Maintenance Mode Bypass in versions up to, and

Improper Access Control in GitHub repository plantuml/plantuml prior to 1.2023.9.

lrzip-next LZMA v23.01 was discovered to contain an access violation via the component /bz3_decode_block src/libbz3.c.

Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by an Improp

Permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause an app to

The leakage of the client secret in Kaibutsunosato v13.6.1 allows attackers to obtain the channel access token and send

Instances of UniFi Network Application that (i) are run on a UniFi Gateway Console, and (ii) are versions 7.5.176. and e

An issue was discovered when using Document Level Security and the SPO "Limited Access" functionality in Elastic Sharepo

Vulnerability of input parameters being not strictly verified in the input. Successful exploitation of this vulnerabilit

Improper access control for some Intel Unison software may allow an unauthenticated user to potentially enable denial of

MikroTik RouterOS v7.1 to 7.11 was discovered to contain incorrect access control mechanisms in place for the Rest API.

A vulnerability was found in Thecosy IceCMS 2.0.1. It has been rated as critical. Affected by this issue is some unknown

Adobe Experience Manager versions 6.5.18 and earlier are affected by an Improper Access Control vulnerability. An attack

An information disclosure vulnerability was discovered in Bosch IP camera devices allowing an unauthenticated attacker t

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. If guest has vi

Improper access control in the Intel(R) Retail Edge android application before version 3.0.301126-RELEASE may allow an a

Remult is a CRUD framework for full-stack TypeScript. If you used the apiPrefilter option of the `@Entity` decorator, by

Improper access control in the Intel Unite(R) android application before version 4.2.3504 may allow an authenticated use

OroPlatform is a package that assists system and user calendar management. Back-office users can access information from

OroCalendarBundle enables a Calendar feature and related functionality in Oro applications. Back-office users can access

OroCommerce package with customer portal and non authenticated visitor website base features. Back-office users can acce

Wyse Management Suite 3.8 and below contain an improper access control vulnerability. A malicious admin user can disabl

Wyse Management Suite 3.8 and below contain an improper access control vulnerability. A authenticated malicious adm

Wyse Management Suite 3.8 and below contain an improper access control vulnerability. A authenticated malicious admin u

AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper access control via the physical netwo

GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provide

Improper access control in the Intel(R) Connect M Android application before version 1.82 may allow an authenticated use

Micronaut Security is a security solution for applications. Prior to versions 3.1.2, 3.2.4, 3.3.2, 3.4.3, 3.5.3, 3.6.6,

An improper access control vulnerability exists in a Huawei datacom product. Attackers can exploit this vulnerability to

Improper access control in GearManagerStub prior to SMR May-2023 Release 1 allows a local attacker to delete application

A vulnerability classified as critical has been found in Abstrium Pydio Cells 4.2.0. This affects an unknown part of the

Improper Access Control in GitHub repository instantsoft/icms2 prior to 2.16.1-git.

A vulnerability was found in Little Apps Little Software Stats. It has been declared as critical. Affected by this vulne

Kyverno is a policy engine designed for Kubernetes. Kyverno seccomp control can be circumvented. Users of the podSecurit

jupyter-server is the backend for Jupyter web applications. Improper cross-site credential checks on `/files/` URLs coul

An issue was discovered in the Boomerang Parental Control application before 13.83 for Android. The app is missing the a

A vulnerability was found in MTab Bookmark up to 1.2.6 and classified as critical. This issue affects some unknown proce

A vulnerability was found in Watchdog Anti-Virus 1.4.214.0. It has been rated as critical. Affected by this issue is the

A vulnerability classified as problematic was found in Lespeed WiseCleaner Wise Force Deleter 1.5.3.54. This vulnerabili

A vulnerability was found in Max Secure Anti Virus Plus 19.0.2.1 and classified as critical. Affected by this issue is t

A vulnerability was found in Max Secure Anti Virus Plus 19.0.2.1. It has been classified as critical. This affects the f

Improper access control vulnerablility in Tips prior to SMR May-2023 Release 1 allows local attackers to launch arbitrar

Improper access control in the Intel(R) Unite(R) android application before Release 17 may allow a privileged user to po