CWE-285

A vulnerability was determined in jshERP up to 3.5. Affected is an unknown function of the file /jshERP-boot/user/delete

A security flaw has been discovered in elunez eladmin 1.1. Impacted is the function deleteFile of the component LocalSto

A security flaw has been discovered in Papermerge DMS up to 3.5.3. This issue affects some unknown processing of the com

A flaw has been found in yangzongzhuan RuoYi up to 4.8.1. Affected by this vulnerability is an unknown functionality of

A security flaw has been discovered in CRMEB up to 5.6.1. Impacted is the function Save of the file app/services/system/

A weakness has been identified in CRMEB up to 5.6.1. The affected element is the function editAddress of the file app/se

A vulnerability has been found in SeriaWei ZKEACMS up to 4.3. This affects the function Delete of the file src/ZKEACMS.R

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a

An issue in Moodle’s timed assignment feature allowed students to bypass the time restriction, potentially giving them m

The Tutor LMS Pro – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Re

Incorrect security UI in Omnibox in Google Chrome on Android prior to 142.0.7444.59 allowed a remote attacker to perform

A weakness has been identified in macrozheng mall-swarm and mall up to 1.0.3. Affected is the function cancelUserOrder o

A security vulnerability has been detected in macrozheng mall-swarm and mall up to 1.0.3. Affected by this vulnerability

Files is a module for managing files inside spaces and user profiles. Prior to versions 0.16.11 and 0.17.2, insufficient

A security vulnerability has been detected in macrozheng mall-swarm up to 1.0.3. Affected is the function delete of the

The weDocs plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 2.1.14. This

An authorization bypass vulnerability in FileMaker Server Admin Console allowed administrator roles with minimal privile

A security flaw has been discovered in Campcodes Advanced Voting Management System 1.0. The impacted element is an unkno

A vulnerability was found in Beijing Yunfan Internet Technology Yunfan Learning Examination System 1.9.2. It has been ra

A vulnerability has been found in AppHouseKitchen AlDente Charge Limiter up to 1.29 on macOS and classified as critical.

The WP Booking Calendar plugin for WordPress is vulnerable to Unauthenticated Post-Confirmation Booking Manipulation in

A vulnerability was found in ywoa up to 2024.07.03. It has been declared as critical. This vulnerability affects unknown

In OpenVSX version v0.9.0 to v0.20.0, the /user/namespace/{namespace}/details API allows a user to edit all namespace

Mastodon is a self-hosted, federated microblogging platform. In versions prior to 4.1.23, 4.2.16, and 4.3.4, when the vi

A vulnerability was found in Tutorials-Website Employee Management System 1.0. It has been classified as critical. This

The PeproDev Ultimate Profile Solutions plugin for WordPress is vulnerable to unauthorized access of data via its public

A vulnerability was found in erdogant pypickle up to 1.1.5. It has been classified as critical. This affects the functio

A vulnerability, which was classified as critical, has been found in quequnlong shiyi-blog up to 1.2.1. This issue affec

A vulnerability was found in szluyu99 gin-vue-blog up to 61dd11ccd296e8642a318ada3ef7b3f7776d2410. It has been declared

giscus is a commenting system powered by GitHub Discussions. A bug in giscus' discussions creation API allowed an unauth

A vulnerability has been found in atjiu pybbs up to 6.0.0 and classified as critical. This vulnerability affects unknown

A vulnerability was found in macrozheng mall up to 1.0.3 and classified as problematic. This issue affects the function

A vulnerability, which was classified as problematic, has been found in LitmusChaos Litmus up to 3.19.0. Affected by thi

A vulnerability was detected in Webkul QloApps up to 1.7.0. This affects an unknown function of the component CSRF Token

A flaw has been found in Sistemas Pleno Gestão de Locação up to 2025.7.x. The impacted element is an unknown function of

A vulnerability was determined in roncoo roncoo-pay up to 9428382af21cd5568319eae7429b7e1d0332ff40. Affected is an unkno

The Kognetiks Chatbot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabilit

The Document Library Lite plugin for WordPress is vulnerable to Improper Authorization in all versions up to, and includ

The YITH WooCommerce Wishlist plugin for WordPress is vulnerable to authorization bypass in all versions up to, and incl

The SiteSEO – SEO Simplified plugin for WordPress is vulnerable to unauthorized modification of data due to n incorrect

The g-FFL Cockpit plugin for WordPress is vulnerable to unauthorized modification of data due to IP-based authorization

This vulnerability in Grafana's datasource proxy API allows authorization checks to be bypassed by adding an extra slash

Umbraco is a free and open source .NET content management system. In versions of Umbraco's web backoffice program prior

A Broken Access Control vulnerability in Nagios Network Analyzer 2024R1.0.3 allows low-privilege users with "Read-Only"

ManageWiki is a MediaWiki extension allowing users to manage wikis. Prior to commit 00bebea, when enabling a conflicting

kubewarden-controller is a Kubernetes controller that allows you to dynamically register Kubewarden admission policies.

A vulnerability, which was classified as problematic, has been found in SourceCodester Best Employee Management System 1

GLPI is a free asset and IT management software package. Starting in version 0.72 and prior to version 10.0.18, an anony

A vulnerability, which was classified as problematic, has been found in Eastnets PaymentSafe 2.5.26.0. Affected by this