CWE-863

Mattermost versions 10.5.x <= 10.5.1, 9.11.x <= 9.11.9 fail to check if a file has been deleted when creating a bookmark

Mattermost versions 10.5.x <= 10.5.1, 10.4.x <= 10.4.3, 9.11.x <= 9.11.9 fail to prevent Wrangler posts from triggering

Mattermost versions 10.4.x <= 10.4.2, 10.5.x <= 10.5.0, 9.11.x <= 9.11.10 fail to properly validate permissions for the

Mattermost versions 10.7.x <= 10.7.0, 10.5.x <= 10.5.3, 9.11.x <= 9.11.12 fail to properly enforce access controls for g

Mattermost versions 10.7.x <= 10.7.0, 10.5.x <= 10.5.3, 9.11.x <= 9.11.12 fails to properly enforce access control restr

Mattermost versions 10.5.x <= 10.5.4, 9.11.x <= 9.11.13 fail to properly restrict API access to team information, allowi

Mattermost versions 10.5.x <= 10.5.10, 10.11.x <= 10.11.2 fail to properly validate guest user permissions when adding c

Mattermost versions 10.11.x <= 10.11.3, 10.5.x <= 10.5.11 fail to properly validate team membership permissions in the A

Mattermost versions <11.0 fail to properly enforce the "Allow users to view archived channels" setting which allows regu

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.9 before 18.3.6, 18.4 before 18.4.4, and 1

In Gitea before 1.22.5, branch deletion permissions are not adequately enforced after merging a pull request.

A vulnerability was detected in JeecgBoot up to 3.9.0. This issue affects the function queryPageList of the file /sys/sy

A flaw has been found in JeecgBoot up to 3.9.0. Impacted is the function getDeptRoleList of the file /sys/sysDepartRole/

A vulnerability was found in JeecgBoot up to 3.9.0. The impacted element is the function loadDatarule of the file /sys/s

A vulnerability was determined in JeecgBoot up to 3.9.0. This affects an unknown function of the file /sys/sysDepartPerm

A vulnerability was identified in JeecgBoot up to 3.9.0. This impacts the function getParameterMap of the file /sys/sysD

A security flaw has been discovered in JeecgBoot up to 3.9.0. Affected is the function queryDepartPermission of the file

A weakness has been identified in JeecgBoot up to 3.9.0. Affected by this vulnerability is the function getPositionUserL

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allo

An issue was discovered in GitLab EE affecting all versions from 16.5 prior to 17.7.7, 17.8 prior to 17.8.5, and 17.9 pr

Mattermost versions 9.11.x <= 9.11.8  fail to enforce proper access controls on the /api/v4/audits endpoint, allowing us

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are

An authenticated administrator could modify the Created By username for a user account

Mattermost versions 10.5.x <= 10.5.3, 9.11.x <= 9.11.11 fail to check `RestrictSystemAdmin` setting if user doesn't have

An issue has been discovered in GitLab CE/EE affecting all versions from 18.0 before 18.0.1. In certain circumstances, a

Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Incorrect Author

An issue has been discovered in GitLab EE affecting all versions from 18.0 before 18.0.4 and 18.1 before 18.1.2 that cou

An issue has been discovered in GitLab EE affecting all versions from 18.0 before 18.0.4 and 18.1 before 18.1.2 that cou

The ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution plugin for WordPress is vulnerable

In JetBrains TeamCity before 2025.11 improper access control could expose GitHub App token's metadata

In Soffid Console 3.6.31 before 3.6.32, authorization to use the pam service is mishandled.

This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4. A person wi

Vulnerability in the Unified Audit component of Oracle Database Server. Supported versions that are affected are 19.3-1

A Local Code Execution Vulnerability exists in the product and version listed above. The vulnerability is due to a defau

The vulnerability allows an unauthenticated attacker to access information in PAM database.

An error when handling authorization related to the import / export interfaces on the RISC Platform prior to the saas-20

This vulnerability exists in the CAP back office application due to improper authorization checks on certain API endpoin

Broken access control vulnerability in the IcProgress Innovación y Cualificación plugin. This vulnerability allows an at

Broken access control vulnerability in the Innovación y Cualificación local administration plugin ajax.php. This vulnera

Zincati is an auto-update agent for Fedora CoreOS hosts. Zincati ships a polkit rule which allows the `zincati` system u

An Improper Authorization vulnerability was identified in the EOL OVA based connect component which is deployed for inst

Incorrect Authorization vulnerability in the OpenText Content Server REST API on Windows, Linux allows users without the

Open Policy Agent (OPA) is an open source, general-purpose policy engine. Prior to version 1.4.0, when run as a server,

Incorrect Authorization vulnerability in OpenText™ Operations Bridge Manager.  The vulnerability could allow authentica

Incorrect Authorization vulnerability in OpenText™ Operations Bridge Manager. The vulnerability could allows privilege e

Alchemy's Modular Account is a smart contract account that is compatible with ERC-4337 and ERC-6900. In versions on the

A low-privileged user is able to obtain information about tasks executed on devices controlled by Proget MDM (Mobile Dev

In Proget MDM, a low-privileged user can retrieve passwords for managed devices and subsequently use functionalities res

In Proget MDM, a low-privileged user can access information about changes contained in backups of all devices managed by

A low-privileged user can access information about profiles created in Proget MDM (Mobile Device Management), which cont