CWE-284

In PrestaShop between versions 1.5.0.0 and 1.7.6.5, there are improper access control since the the version 1.5.0.0 for

In PrestaShop between versions 1.5.5.0 and 1.7.6.5, there is improper access control on customers search. The problem is

"In PrestaShop between versions 1.7.0.0 and 1.7.6.5, there is improper access controls on product attributes page. The p

Improper access control in Nextcloud Deck 1.0.0 allowed an attacker to inject tasks into other users decks.

A vulnerability in the user management functionality of Cisco IoT Field Network Director (FND) could allow an authentica

An Ubuntu-specific modification to Pulseaudio to provide security mediation for Snap-packaged applications was found to

Cisco Webex Business Suite before 39.1.0 contains a vulnerability that could allow an unauthenticated, remote attacker t

vulnerability within the Multimedia Viewer feature of Cisco Webex Meetings could allow an authenticated, remote attacker

Computing For Good's Basic Laboratory Information System (also known as C4G BLIS) version 3.4 and earlier suffers from a

Computing For Good's Basic Laboratory Information System (also known as C4G BLIS) version 3.5 and earlier suffers from a

In 3S-Smart Software Solutions GmbH CODESYS Control V3 products prior to version 3.5.14.0, user access management and co

The potential exists for exposure of the product's password used to restrict unauthorized access to Rockwell PLC5/SLC5/0

Systems using the Marel Food Processing Systems Pluto platform do not restrict remote access. Marel has created an updat

A vulnerability in SonicWall SonicOS and SonicOSv with management enabled system on specific configuration allow unprivi

Hanwha Techwin SRN-4000, SRN-4000 firmware versions prior to SRN4000_v2.16_170401, A specially crafted http request and

A configuration issue has been discovered in Forcepoint Email Security 8.4.x and 8.5.x: the product is left in a vulnera

When configuring a stateless firewall filter in Junos OS, terms named using the format "internal-n" (e.g. "internal-1",

Fujifilm FCR Capsula X/ Carbon X/ FCR XC-2, model versions CR-IR 357 FCR Carbon X, CR-IR 357 FCR XC-2, FCR-IR 357 FCR Ca

Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 anyone can change the administrator and moderator

Citrix Workspace App before 1904 for Windows has Incorrect Access Control.

Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Incorrect Access Control.

Open-Xchange GmbH OX App Suite 7.8.3 is affected by: Incorrect Access Control.

Certain Symfony products are affected by: Incorrect Access Control. This affects Symfony 2.7.30 and Symfony 2.8.23 and S

An Insufficient Access Control vulnerability (leading to credential disclosure) in coreconfigsnapshot.php (aka configura

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supporte

A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthe

Incorrect access control in the database manager component in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and

In Rockwell Automation PanelView 5510 (all versions manufactured before March 13, 2019 that have never been updated to v

eClass platform < ip.2.5.10.2.1 allows an attacker to use GETS method to request /admin page to bypass the password vali

A vulnerability has been identified in SIPROTEC 5 devices with CPU variants CP200 (All versions < V7.59), SIPROTEC 5 dev

The invite-anyone plugin before 1.3.16 for WordPress has incorrect access control for email-based invitations.

The woo-confirmation-email plugin before 3.2.0 for WordPress has no blocking of direct access to supportive xl folders i

An access vulnerability in CA Common Services DIA of CA Technologies Client Automation 14 and Workload Automation AE 11.

A broken access control vulnerability in Smart Battery A4, a multifunctional portable charger, firmware version ?<= r1.7

The web application portal of the Cobham EXPLORER 710, firmware version 1.07, allows unauthenticated access to port 5454

A vulnerability in Cisco Aironet Access Points (APs) Software could allow an unauthenticated, remote attacker to gain un

The Conexus telemetry protocol utilized within Medtronic MyCareLink Monitor versions 24950 and 24952, CareLink Monitor v

Vulnerability in YingZhi Python Programming Language v1.9 allows arbitrary anonymous uploads to the phone's storage

Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allows anyone to act as a moderator to a slide sh

Cloud Foundry Container Runtime, versions prior to 0.29.0, deploys Kubernetes clusters utilize the same CA (Certificate

Improper access control in the Helpdesk App of Odoo Enterprise 10.0 through 12.0 allows remote authenticated attackers t

Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Incorrect Access Control.

Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Incorrect Access Control.

The Quest Kace K1000 Appliance, versions prior to 9.0.270, allows a remote attacker to exploit the misconfigured Cross-O

An incorrect implementation of a local web server in eID client (Windows version before 3.1.2, Linux version before 3.0.

A flaw was discovered in the python-novajoin plugin, all versions up to, excluding 1.1.1, for Red Hat OpenStack Platform

cPanel before 55.9999.141 allows daemons to access their controlling TTYs (SEC-31).

cPanel before 59.9999.145 allows code execution in the context of other accounts via mailman list archives (SEC-141).

cPanel before 58.0.4 allows code execution in the context of other user accounts through the PHP CGI handler (SEC-142).

The Bluetooth Low Energy (BLE) subsystem on Tapplock devices before 2018-06-12 allows replay attacks.