CWE-284

Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by an Improper Access Control vulnerability

Improper access control in some Intel(R) GPA Framework software installers before version 2023.3 may allow an authentica

Various Issues Due To Exposed SMI Handler in AmdPspP2CmboxV2. The first issue can be leveraged to bypass the protections

Various Issues Due To Exposed SMI Handler in AmdPspP2CmboxV2. The first issue can be leveraged to bypass the protections

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Ventura 13. An app may

An improper access control vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on

Robotmk before 2.0.1 allows a local user to escalate privileges (e.g., to SYSTEM) if automated Python environment setup

Windows File Explorer Elevation of Privilege Vulnerability

In setSkipPrompt of AssociationRequest.java , there is a possible way to establish a companion device association withou

A logic issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPad

An issue in the Ping feature of IT Solutions Enjay CRM OS v1.0 allows attackers to escape the restricted terminal enviro

An issue in the Hardware info module of IT Solutions Enjay CRM OS v1.0 allows attackers to escape the restricted termina

Azure Connected Machine Agent Elevation of Privilege Vulnerability

Azure CycleCloud Remote Code Execution Vulnerability

Windows Update Stack Elevation of Privilege Vulnerability

Improper access control in some Intel(R) UEFI Integrator Tools on Aptio V for Intel(R) NUC may allow an authenticated us

Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability

Microsoft Office Visio Remote Code Execution Vulnerability

Microsoft SharePoint Elevation of Privilege Vulnerability

Visual C++ Redistributable Installer Elevation of Privilege Vulnerability

Trend Micro Antivirus One versions 3.10.4 and below (Consumer) is vulnerable to an Arbitrary Configuration Update that c

Windows Update Stack Elevation of Privilege Vulnerability

Dell Power Manager (DPM), versions prior to 3.17, contain an improper access control vulnerability. A low privileged att

Microsoft Office Elevation of Privilege Vulnerability

Open Forms allows users create and publish smart forms. Versions prior to 2.2.9, 2.3.7, 2.4.5, and 2.5.2 contain a non-e

Vulnerability of improper access control in the media library module.Successful exploitation of this vulnerability may a

SuiteCRM is an open-source customer relationship management (CRM) system. Prior to version 7.14.5 and 8.6.2, insufficien

HCL DRYiCE MyXalytics is impacted by Improper Access Control (Obsolete web pages) vulnerability. Discovery of outdated a

Multiple security vulnerabilities has been discovered in web interface of NetGuardian DIN Remote Telemetry Unit (RTU), b

Swissphone DiCal-RED 4009 devices allow a remote attacker to gain read access to almost the whole file system via anonym

Incorrect access control in IceCMS v3.4.7 and before allows attackers to authenticate by entering any arbitrary values a

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Layout Templates). Supported versions

vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs. In affected ve

pyLoad is the free and open-source Download Manager written in pure Python. Any unauthenticated user can browse to a spe

WALLIX Bastion 7.x, 8.x, 9.x and 10.x and WALLIX Access Manager 3.x and 4.x have Incorrect Access Control which can lead

Incorrect access control in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows unauthenticated attackers

An access control issue in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows unauthenticated attackers

Data confidentiality vulnerability in the ScreenReader module. Successful exploitation of this vulnerability may affect

Vulnerability of foreground service restrictions being bypassed in the NMS module. Successful exploitation of this vulne

The nearby module has a privilege escalation vulnerability. Successful exploitation of this vulnerability may affect ava

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE

A vulnerability in UniswapFrontRunBot 0xdB94c allows attackers to cause financial losses via unspecified vectors.

Vite is a frontend tooling framework for javascript. The Vite dev server option `server.fs.deny` can be bypassed on case

Incorrect access control in Reprise License Management Software Reprise License Manager v15.1 allows attackers to arbitr

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t

Permission control vulnerability in the WindowManagerServices module.Successful exploitation of this vulnerability may a

A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files

Siklu TG Terragraph devices before 2.1.1 allow attackers to discover valid, randomly generated credentials via GetCreden

An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. Remote attackers can restart the device via a /d

Alldata V0.4.6 is vulnerable to Insecure Permissions. Using users (test) can query information about the users in the sy