CWE-284

An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.1

Ruoyi v4.8.0 vulnerable to Incorrect Access Control. There is a missing checkUserDataScope permission check in the reset

Ruoyi v4.8.0 is vulnerable to Incorrect Access Control. There is a missing checkUserDataScope permission check in the au

Incorrect access control in the getUserFormData function of youlai-boot v2.21.1 allows attackers to access sensitive inf

XWiki is an open-source wiki software platform. From 16.7.0 to 16.10.11, 17.4.4, or 17.7.0, in an instance which is usin

Incorrect access control in the component ApiPayController.java of platform v1.0.0 allows attackers to access sensitive

Incorrect access control in the component ApiOrderService.java of platform v1.0.0 allows attackers to access sensitive i

Incorrect access control in the component orderService.queryObject of platform v1.0.0 allows attackers to access sensiti

A lack of Management Frame Protection in Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V

Incorrect access control in the /api/v1/user endpoint of usememos memos v0.25.2 allows unauthorized attackers to create

An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16. Unauthenticate

An issue was discovered in Dynatrace OneAgent before 1.325.47. When attempting to access a remote network share from a m

Dify v1.9.1 is vulnerable to Insecure Permissions. An unauthenticated attacker can directly send HTTP GET requests to th

Incorrect access control in the /api/v1/conversations/*/files API of GT Edge AI Platform before v2.0.10 allows unauthori

Incorrect access control in the /api/v1/conversations/*/messages API of GT Edge AI Platform before v2.0.10-dev allows un

youlai-boot V2.21.1 is vulnerable to Incorrect Access Control. The getRoleForm function in SysRoleController.java does n

Incorrect access control in DEV Systemtechnik GmbH DEV 7113 RF over Fiber Distribution System 32-0078 H.01 allows unauth

Incorrect access control in Comtech EF Data CDM-625 / CDM-625A Advanced Satellite Modem with firmware v2.5.1 allows atta

LoxiLB v.0.9.7 and before is vulnerable to Incorrect Access Control which allows attackers to obtain sensitive informati

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS

A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in macOS

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.26,

A vulnerability, which was classified as critical, was found in wander-chu SpringBoot-Blog 1.0. This affects the functio

A vulnerability, which was classified as critical, was found in Blog Botz for Journal Theme 1.0 on OpenCart. This affect

Visual Studio Elevation of Privilege Vulnerability

A vulnerability classified as critical was found in SourceCodester Best Employee Management System 1.0. Affected by this

A vulnerability, which was classified as critical, was found in Lumsoft ERP 8. Affected is the function DoUpload/DoWebUp

Visual Studio Code JS Debug Extension Elevation of Privilege Vulnerability

Improper access control in BMC Firmware for the Intel(R) Server Board S2600WF, Intel(R) Server Board S2600ST, Intel(R) S

Wazuh SIEM version 4.8.2 is affected by a broken access control vulnerability. This issue allows the unauthorized creati

A vulnerability was found in needyamin Library Card System 1.0. It has been declared as critical. Affected by this vulne

A vulnerability classified as critical was found in hzmanyun Education and Training System 3.1.1. This vulnerability aff

A vulnerability, which was classified as critical, has been found in Lumsoft ERP 8. Affected by this issue is some unkno

Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.

Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.

NVIDIA Riva contains a vulnerability where a user could cause an improper access control issue. A successful exploit of

A vulnerability was found in LoveCards LoveCardsV2 up to 2.3.2 and classified as critical. This issue affects some unkno

Incorrect access control in the component /config/WebSecurityConfig.java of yimioa before v2024.07.04 allows unauthorize

A vulnerability classified as critical has been found in Digiwin ERP 5.1. Affected is the function DoUpload/DoWebUpload

Memory corruption may occur due top improper access control in HAB process.

Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally.

A vulnerability, which was classified as critical, has been found in veal98 小牛肉 Echo 开源社区系统 4.2. This issue affects the

Codemers KLIMS 1.6.DEV lacks a proper access control mechanism, allowing a normal KLIMS user to perform all the actions

A vulnerability was found in ScriptAndTools Online-Travling-System 1.0. It has been declared as critical. This vulnerabi

A vulnerability was found in ScriptAndTools Online-Travling-System 1.0. It has been rated as critical. This issue affect

Lack of input validation/sanitization in the 'ate' management service in the Tenda RX2 Pro 16.03.30.14 allows an unautho

A vulnerability was found in SourceCodester Online Student Clearance System 1.0. It has been rated as critical. This iss

Improper access control for some Intel(R) Data Center GPU Flex Series for Windows driver before version 31.0.101.4314 ma

Improper access control for some Intel(R) Graphics software may allow an authenticated user to potentially enable denial