CWE-284

A vulnerability classified as critical was found in KylinSoft youker-assistant on KylinOS. Affected by this vulnerabilit

Improper access control vulnerability in SearchWidget prior to version 3.3 in China models allows untrusted applications

Dell SmartFabric Storage Software v1.4 (and earlier) contains an improper access control vulnerability in the CLI. A lo

Active Directory Domain Services Information Disclosure Vulnerability

An improper access control vulnerability [CWE-284] in FortiEDRCollectorWindows version 5.2.0.4549 and below, 5.0.3.1007

Dell Rugged Control Center, version prior to 4.7, contains insufficient protection for the Policy folder. A local malic

A vulnerability classified as critical was found in koroket RedditOnRails. This vulnerability affects unknown code of th

The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_reset_previous_

The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_final_settings_

The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_save_template_c

The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_import_library_

The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_save_mega_menu_

An issue was discovered in Archibus Web Central 2022.03.01.107. A service exposed by the application allows a basic user

Weak access control in NexusPHP before 1.7.33 allows a remote authenticated user to edit any post in the forum (this is

Booked Scheduler 2.5.5 allows authenticated users to create and schedule events for any other user via a modified userId

In affected versions of Octopus Deploy it is possible for a user to view Workerpools without being explicitly assigned p

Improper access control vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker to bypass

Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier allows authenticated att

Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1.

A vulnerability was found in NFine Rapid Development Platform 20230511. It has been declared as problematic. Affected by

A vulnerability was found in NFine Rapid Development Platform 20230511. It has been rated as problematic. Affected by th

A vulnerability classified as problematic has been found in NFine Rapid Development Platform 20230511. This affects an u

The Quick Page/Post Redirect Plugin for WordPress is vulnerable to authorization bypass due to missing capability checks

The JobSearch WP Job Board plugin for WordPress is vulnerable to authorization bypass due to a missing capability check

Some access control/intercom products have unauthorized modification of device network configuration vulnerabilities. At

A vulnerability classified as problematic has been found in Aures Komet up to 20230509. This affects an unknown part of

A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as problematic. This vul

A vulnerability in Cisco Intersight Virtual Appliance could allow an unauthenticated, adjacent attacker to access intern

Improper Access Control vulnerability in AcyMailing Enterprise component for Joomla. It allows unauthorized users to cre

Improper Access Control vulnerability in AcyMailing Enterprise component for Joomla. It allows the unauthorized removal

An improper privilege management vulnerability [CWE-269] in FortiManager 7.2.0 through 7.2.2, 7.0.0 through 7.0.7, 6.4.0

A vulnerability classified as critical has been found in Lissy93 Dashy 2.1.1. This affects an unknown part of the file /

Improper Access Control in GitHub repository microweber/microweber prior to 2.0.

Mattermost fails to check if hardened mode is enabled when overriding the username and/or the icon when posting a post.

Mattermost fails to perform proper authorization in the /plugins/focalboard/api/v2/users endpoint allowing an attacker w

Pleasanter 1.3.47.0 and earlier contains an improper access control vulnerability, which may allow a remote authenticate

Mattermost fails to check whether a user is a guest when updating the tasks of a private playbook run allowing a guest t

A vulnerability, which was classified as problematic, has been found in Thecosy IceCMS up to 2.0.1. This issue affects s

A vulnerability has been found in CodeAstro POS and Inventory Management System 1.0 and classified as problematic. Affec

A vulnerability was found in Ethex Contracts. It has been classified as critical. This affects an unknown part of the fi

A vulnerability classified as problematic has been found in PHPGurukul Online Notes Sharing System 1.0. Affected is an u

Directus is a real-time API and App dashboard for managing SQL database content. Prior to version 9.23.3, the `directus_

Improper access control vulnerability in Bluetooth prior to SMR Mar-2023 Release 1 allows attackers to send file via Blu

Grafana is an open-source platform for monitoring and observability. The option to send a test alert is not available

A user without administrator permissions with access to the UC500 windows system could perform a memory dum

Improper access control vulnerability in Runestone application prior to version 2.9.09.003 in Android R(11) and 3.2.01.0

Improper access control vulnerabilities in Samsung Cloud prior to version 5.3.0.32 allows local attackers to access info

Improper access control vulnerability in MyFiles application prior to versions 12.2.09.0 in Android 11, 13.1.03.501 in A

Improper access control vulnerability in Knox Enrollment Service prior to SMR May-2023 Release 1 allow attacker install

A vulnerability in the IP geolocation rules of Snort 3 could allow an unauthenticated, remote attacker to potentially by