CWE-284

A vulnerability has been found in D-Link DI-7003GV2 24.04.18D1 R(68125) and classified as problematic. This vulnerabilit

A vulnerability, which was classified as problematic, has been found in Netgear DGND3700 1.1.00.15_1.00.15NA. Affected b

A vulnerability has been found in Netgear DGND3700 1.1.00.15_1.00.15NA and classified as problematic. This vulnerability

A vulnerability, which was classified as problematic, was found in yangshare 技术杨工 warehouseManager 仓库管理系统 1.0. This affe

A vulnerability was found in Multilaser Sirius RE016 MLT1.0. It has been rated as problematic. This issue affects some u

A vulnerability classified as critical has been found in SourceCodester Student Result Management System 1.0. This affec

Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Improper Access

Incorrect access control in Xinference before v1.4.0 allows attackers to access the Web GUI without authentication.

The DocCheck Login plugin for WordPress is vulnerable to unauthorized post access in all versions up to, and including,

A vulnerability, which was classified as critical, was found in LB-LINK BL-AC3600 up to 1.0.22. This affects the functio

A vulnerability classified as critical was found in LB-LINK BL-AC1900, BL-AC2100_AZ3, BL-AC3600, BL-AX1800, BL-AX5400P a

A vulnerability, which was classified as critical, has been found in LB-LINK BL-AC1900, BL-AC2100_AZ3, BL-AC3600, BL-AX1

Vulnerability in the JDBC component of Oracle Database Server. Supported versions that are affected are 23.4-23.8. Diff

A vulnerability was found in Metasoft 美特软件 MetaCRM up to 6.4.2. It has been rated as problematic. Affected by this issue

An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139 and in Ruckus ZoneDire

A vulnerability was found in Exrick xboot up to 3.3.4. It has been classified as problematic. This affects an unknown pa

4C Strategies Exonaut before v22.4 was discovered to contain an access control issue.

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. In versions 7.

A vulnerability has been found in zlt2000 microservices-platform up to 6.0.0 and classified as problematic. This vulnera

A vulnerability in the Task API endpoint of the ctrlX OS setup mechanism allowed a remote, unauthenticated attacker to a

A vulnerability in the implementation of access control rules for loopback interfaces in Cisco Secure Firewall Adaptive

Incorrect Access Control in the AJAX endpoint functionality in jonkastonka Cookies and Content Security Policy plugin th

A security issue has been identified in Appian Enterprise Business Process Management version 25.3. The vulnerability is

EzGED3 3.5.0 contains an unauthenticated arbitrary file read vulnerability due to improper access control and insufficie

Incorrect access control in the component \controller\UserController.java of jshERP v3.5 allows attackers to arbitrarily

Incorrect access control in the component \controller\SupplierController.java of jshERP v3.5 allows unauthorized attacke

Incorrect access control in the component /controller/PersonController.java of jshERP v3.5 allows unauthorized attackers

An Insecure Direct Object Reference (IDOR) vulnerability in Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime -

A security vulnerability has been detected in YiFang CMS up to 2.0.5. Affected by this vulnerability is the function exp

Incorrect access control in the Maintenance module of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows a

Incorrect access control in the endpoint /goform/ate of Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 allows attacke

Incorrect access control in Beakon Application before v5.4.3 allows authenticated attackers with low-level privileges to

A vulnerability was detected in Das Parking Management System 停车场管理系统 6.2.0. This impacts an unknown function of the fil

A flaw has been found in Das Parking Management System 停车场管理系统 6.2.0. Affected is an unknown function of the file /Opera

A vulnerability in the directory permissions of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and C

Information disclosure

A vulnerability was identified in D-Link DIR-852 up to 1.00CN B09. Affected by this vulnerability is the function phpcgi

Vite is a frontend tooling framework for JavaScript. Prior to versions 7.1.5, 7.0.7, 6.3.6, and 5.4.20, files starting w

Vite is a frontend tooling framework for JavaScript. Prior to versions 7.1.5, 7.0.7, 6.3.6, and 5.4.20, any HTML files o

A vulnerability in the management interface access control list (ACL) processing feature in Cisco IOS XR Software could

A flaw has been found in Wavlink WL-WN578W2 221110. Impacted is an unknown function of the file /live_online.shtml. Exec

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.

danny-avila/librechat is affected by an authorization bypass vulnerability due to improper access control checks. The `c

A vulnerability in the access control list (ACL) programming of Cisco IOS XE Software for Cisco Catalyst 9500X and 9600X

A security flaw has been discovered in geyang ml-logger up to acf255bade5be6ad88d90735c8367b28cbe3a743. Affected by this

A security flaw has been discovered in givanz Vvveb up to 1.0.7.2. This affects an unknown part of the component Image H

Incorrect access control in the REST API endpoint of HubSpot v1.29441 allows unauthenticated attackers to view users' da

A local file enumeration was found in Keyfactor SignServer versions prior to 7.3.2 .The property VISIBLE_SIGNATURE_CUSTO

An arbitrary file write was found in Keyfactor SignServer versions prior to 7.3.2. The properties ARCHIVETODISK_FILENAME

A security vulnerability has been detected in Verysync 微力同步 up to 2.21.3. The impacted element is an unknown function of