CWE-639

Affected devices do not properly enforce user authentication on specific API endpoints. This could facilitate an unauthe

Lupa integrates the runtimes of Lua or LuaJIT2 into CPython. In 2.6 and earlier, attribute_filter is not consistently ap

Winter is a free, open-source content management system (CMS) based on the Laravel PHP framework. Prior to 1.0.477, 1.1.

Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions 8.2.6.4 and prior, th

OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, there is an IDOR through

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.

Penpot is an open-source design tool for design and code collaboration. Prior to 2.14.5, Penpot exposed teams_invitation

n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. Prior

A non-global organization admin in one tenant can bypass tenant boundaries to delete, create, or modify resources in any

Flowise through 3.1.4 contains an insecure direct object reference vulnerability in the OpenAI Assistants integration th

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, Dokploy's WebSocket handlers (in-app te

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, swarm.getNodes, swarm.getNodeInfo, swar

TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege read collaborator to extract a workspa

Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. Prior to 4.5.6, POST /api/v1

Lemur manages TLS certificate creation. Prior to 1.9.2, authenticated users could influence an ACME authority acme_url w

Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. Nezha versions 1.14.13 t

The Branda plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and in

The AS Password Field In Default Registration Form plugin for WordPress is vulnerable to privilege escalation via accoun

The FS Registration Password plugin for WordPress is vulnerable to privilege escalation via account takeover in all vers

Sony BRAVIA Digital Signage 1.7.8 contains an insecure direct object reference vulnerability that allows attackers to by

The Optional Email plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to

OPEXUS eCasePortal before version 9.0.45.0 allows an unauthenticated attacker to navigate to the 'Attachments.aspx' endp

Cal.com is open-source scheduling software. From 3.1.6 to before 6.0.7, there is a vulnerability in a custom NextAuth JW

The Academy LMS – WordPress LMS Plugin for Complete eLearning Solution plugin for WordPress is vulnerable to privilege e

SAPIDO RB-1732 V2.0.43 contains a remote command execution vulnerability that allows unauthenticated attackers to execut

Taskosaur is an open source project management platform with conversational AI for task execution in-app. In 1.0.0, the

Telesquare SKT LTE Router SDT-CS3B1 firmware version 1.2.0 contains an insecure direct object reference vulnerability th

pyLoad is a free and open-source download manager written in Python. From version 0.4.20 to before version 0.5.0b3.dev97

Authorization bypass through User-Controlled key vulnerability in HYPR Server allows Privilege Escalation.This issue aff

ThinkPHP 5.0.23 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrar

NVIDIA NVFlare Dashboard contains a vulnerability in the user management and authentication system where an unauthentica

Authorization bypass through User-Controlled key vulnerability in Akilli Commerce Software Technologies Ltd. Co. E-Comme

An authorization bypass through user-controlled key vulnerability has been reported to affect QuMagie. The remote attack

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to privilege escalation via a

Vikunja before 2.2.1 contains an authorization flaw where the LinkSharing.ReadAll endpoint exposes share hashes to users

ArcadeDB versions before 26.7.2 contain an authorization bypass vulnerability in HTTP handlers for time series, batch, P

Authorization bypass through User-Controlled key vulnerability in Menulux Software Inc. Mobile App allows Software Integ

The type=track branch authorises on _is_my_case(t_attach.case) only and never checks VinceTrackAttachment.shared. A coor

The TrueBooker plugin for WordPress is vulnerable to Account Takeover in all versions up to, and including, 1.2.6. This

The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to Authorization Bypass Thr

mdjnelson/moodle-mod_customcert is a Moodle plugin for creating dynamically generated certificates with complete customi

An improper authorization vulnerability in scoped user-to-server (ghu_) token authorization in GitHub Enterprise Server

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, a mass

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, a mass

A flaw was found in migration-planner. An authenticated attacker could exploit an improper access control vulnerability

A flaw was found in migration-planner. The agent-API middleware processes JSON Web Tokens (JWTs) for authentication, but

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.

IBM Langflow OSS 1.0.0 through 1.10.0 voice mode contains improper shared-state handling that allows reuse of API client

Avo is a framework to create admin panels for Ruby on Rails apps. Prior to 3.32.1 and 4.0.0.beta.51, Avo's association a

Cal.com OSS ships lacks authorization on webhook teamId creation, allowing any authenticated user to create a webhook on