CWE-284

The issue was addressed with improved checks. This issue is fixed in Xcode 26. An app may be able to read and write file

Webmin 2.510 is vulnerable to a Host Header Injection in the password reset functionality (forgot_send.cgi). The reset l

A Host Header Injection vulnerability exists in the password reset functionality of CraftMyCMS 4.0.2.2. The system uses

Incorrect access control in SigningHub v8.6.8 allows attackers to arbitrarily add user accounts without any rate limitin

Improper access control in Windows Camera Frame Server Monitor allows an authorized attacker to disclose information loc

youlai-boot V2.21.1 is vulnerable to Incorrect Access Control. The importUsers function in SysUserController.java does n

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.2, macOS

Improper access control in Azure File Sync allows an authorized attacker to elevate privileges locally.

When installing Tenable Network Monitor to a non-default location on a Windows host, Tenable Network Monitor versions pr

Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Vent

Improper access control in Visual Studio Code allows an authorized attacker to elevate privileges locally.

An issue in Victure RX1800 EN_V1.0.0_r12_110933 allows physically proximate attackers to execute arbitrary code or gain

Improper access control in users MFA feature in Devolutions Server 2025.1.7.0 and earlier allows a user with user manage

A vulnerability was found in INSTAR 2K+ and 4K 3.11.1 Build 1124. This issue affects some unknown processing of the comp

Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 was discov

Improper access control in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to use the privileged APIs.

The 2wcom IP-4c 2.15.5 device suffers from a Broken Access Control vulnerability. Certain sensitive endpoints are intend

A "Privilege boundary violation" vulnerability is identified affecting multiple Radiometer Products. Exploitation of thi

An Improper Access Control vulnerability [CWE-284] in FortiClient Windows version 7.4.0, version 7.2.6 and below, versio

A use of hard-coded password vulnerability in FortiWLC version 8.5.2 and below, version 8.4.8 and below, version 8.3.3 t

Dell Trusted Device, versions prior to 7.0.3.0, contain an Incorrect Default Permissions vulnerability. A low privilege

Dell Alienware Command Center 6.x, versions prior to 6.7.37.0 contain an Improper Access Control Vulnerability. A low pr

Improper access control for some Intel(R) Arc™ & Iris(R) Xe graphics software before version 32.0.101.6077 may allow

There is no memory isolation between CPU cores of the MIB3 infotainment. This fact allows an attacker with access to the

Improper access control for some Intel(R) Rapid Storage Technology installation software may allow an authenticated user

Improper access control for some SigTest before version 6.1.10 within Ring 3: User Applications may allow an escalation

Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges locally.

theshit is a command-line utility that automatically detects and fixes common mistakes in shell commands. Prior to versi

Dell RecoverPoint for Virtual Machines 6.0.X contains a command execution vulnerability. A Low privileged malicious user

This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 18.4 and iPadOS 1

Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contain an Improper Access Control vulnerability.

Windows Geolocation Service Information Disclosure Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

A flaw was found in the Wildfly Server Role Based Access Control (RBAC) provider. When authorization to control manageme

Incorrect Access Control in the Preview Function of Gleamtech FileVista 9.2.0.0 allows remote attackers to gain unauthor

Tenda W18E V16.01.0.8(1625) is vulnerable to Incorrect Access Control. Unauthorized password change via the web manageme

Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Ac

Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Ac

Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Ac

Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Ac

Improper access control in the EDECCSSA user leaf function for some Intel(R) Processors with Intel(R) SGX may allow an a

Improper access control in some drivers for Intel(R) Ethernet Connection I219 Series before version 12.19.1.39 may allow

Incorrect access control in the component /iclock/Settings?restartNCS=1 of NovaCHRON Zeitsysteme GmbH & Co. KG Smart Tim

NVIDIA Riva contains a vulnerability where a user could cause an improper access control issue. A successful exploit of

Improper access control in temporary access requests and checkout requests endpoints in Devolutions Server 2024.3.13 and

A privilege escalation vulnerability in the Hikashop component versions 1.0.0-5.1.3 for Joomla allows authenticated atta

Systemic Risk Value <=2.8.0 is vulnerable to improper access control in /RiskValue/GroupingEntities/Controls/GetFile.asp

A vulnerability has been found in mingyuefusu 明月复苏 tushuguanlixitong 图书管理系统 up to d4836f6b49cd0ac79a4021b15ce99ff7229d46

An issue was discovered in Appsmith before 1.51. A user on Appsmith that doesn't have admin permissions can trigger the