CWE-287

A vulnerability, which was classified as critical, has been found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97

A vulnerability has been found in TOTOLINK A720R 4.1.5cu.374 and classified as critical. This vulnerability affects unkn

A vulnerability classified as critical has been found in Multilaser Sirius RE016 MLT1.0. Affected is an unknown function

A vulnerability was found in Papendorf SOL Connect Center 3.3.0.0 and classified as problematic. Affected by this issue

A vulnerability was found in eGauge EG3000 Energy Monitor 3.6.3. It has been classified as problematic. This affects an

A vulnerability classified as problematic was found in Lucky LM-520-SC, LM-520-FSC and LM-520-FSC-SAM up to 20250321. Af

A vulnerability, which was classified as problematic, was found in atjiu pybbs up to 6.0.0. This affects the function ad

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. In versions 7.

A vulnerability was identified in code-projects Hostel Management System 1.0. This affects an unknown part of the file h

A security flaw has been discovered in zhenfeng13 My-Blog 1.0.0. This vulnerability affects unknown code of the file /bl

An issue was discovered in Tenda AC8 v4.0 AC1200 Dual-band Gigabit Wireless Router AC8v4.0 Firmware 16.03.33.05. The roo

PendingIntent hijacking vulnerability in CertificatePolicy in framework prior to SMR Apr-2023 Release 1 allows local att

A vulnerability was found in roncoo roncoo-pay up to 9428382af21cd5568319eae7429b7e1d0332ff40. The impacted element is a

A vulnerability was found in Apeman ID71 218.53.203.117. The impacted element is an unknown function of the file /onvif/

A weakness has been identified in haxxorsid Stock-Management-System up to fbbbf213e9c93b87183a3891f77e3cc7095f22b0. This

A vulnerability has been found in Shiguangwu sgwbox N3 2.0.25. The affected element is an unknown function of the file /

Vulnerability in Tyche softwares Product Delivery Date for WooCommerce – Lite.This issue affects Product Delivery Date f

Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. A vulnerability present in versions 0.9

An issue in TAAGSOLUTIONS GmbH MyTaag v.2024-11-24 and before allows a remote attacker to escalate privileges via the de

An issue in TAAGSOLUTIONS GmbH MyTaag v.2024-11-24 and before allows a physically proximate attacker to escalate privile

An issue in TAAGSOLUTIONS GmbH MyTaag v.2024-11-24 and before allows a remote attacker to escalate privileges via the "/

A vulnerability exists in ChurchCRM 5.13.0 that allows an attacker to execute arbitrary JavaScript in a victim's browser

KubeVirt is a virtual machine management add-on for Kubernetes. Versions 1.5.3 and below, and 1.6.0 contained a flawed i

KubeVirt is a virtual machine management add-on for Kubernetes. Prior to 1.5.3 and 1.6.1, due to the peer verification l

An issue has been discovered in GitLab CE/EE affecting all versions from 16.8 before 17.10.7, 17.11 before 17.11.3, and

An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.4, macOS S

An authentication issue was addressed with improved state management. This issue is fixed in App Store Connect 3.0. An a

Error in 3GPP specification implementation in Exynos baseband prior to SMR Apr-2023 Release 1 allows incorrect handling

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (

sudo-rs is a memory safe implementation of sudo and su written in Rust. With `Defaults targetpw` (or `Defaults rootpw`)

Instruction authentication bypass vulnerability in the Findnetwork module Impact: Successful exploitation of this vulner

Scanning certain QR codes that included text with a website URL could allow the URL to be opened without presenting the

A security vulnerability was discovered in Moodle that allows students to enroll themselves in courses without completin

A security vulnerability was discovered in Moodle that allows some users to access sensitive information about other stu

In ExtremeCloud Universal ZTNA, a syntax error in the 'searchKeyword' condition caused queries to bypass the owner_id fi

A vulnerability has been found in 70mai M300 up to 20250611 and classified as problematic. Affected by this vulnerabilit

CVAT is an open source interactive video and image annotation tool for computer vision. In versions 1.1.0 through 2.41.0

The Construction Light WordPress theme before 1.6.8 does not have authorisation and CSRF when activating via an AJAX ac

A vulnerability has been found in Ningyuanda TC155 57.0.2.0. The affected element is an unknown function of the componen

Nitrokey 3 Firmware is the the firmware of Nitrokey 3 USB keys. For release 1.8.0, and test releases with PIV enabled pr

Improper access control vulnerability in SemClipboard prior to SMR Apr-2023 Release 1 allows attackers to read arbitrary

A vulnerability, which was classified as problematic, has been found in YXJ2018 SpringBoot-Vue-OnlineExam 1.0. This issu

A vulnerability classified as critical has been found in Comodo Internet Security Premium 12.3.4.8162. This affects an u

A vulnerability was found in newbee-mall 1.0. Impacted is the function mallKaptcha of the file /common/mall/kaptcha. The

A vulnerability was identified in Tomofun Furbo 360 and Furbo Mini. Affected by this issue is the function upload_file_t

HCL IEM is affected by an improper invalidation of access or JWT token vulnerability.  A token was not invalidated which

An authentication bypass vulnerability exists in multiple WSO2 products when FIDO authentication is enabled. When a user

A vulnerability classified as problematic has been found in 70mai 1S up to 20250611. This affects an unknown part of the

Authentication vulnerability in the mobile application（tech.palm.id）may lead to the risk of information leakage.

Improper authentication in Windows SMB Client allows an unauthorized attacker to perform tampering over a network.