CWE-863

Multiple vulnerabilities in the authorization process of Cisco ASR 5000 Series Software (StarOS) could allow an authenti

Corero SecureWatch Managed Services 9.7.2.0020 does not correctly check swa-monitor and cns-monitor user’s privileges, a

Istio is an open source platform for providing a uniform way to integrate microservices, manage traffic flow across micr

ScratchOAuth2 is an Oauth implementation for Scratch. Any ScratchOAuth2-related data normally accessible and modifiable

K7Computing Pvt Ltd K7Antivirus Premium 15.1.0.53 is affected by: Incorrect Access Control. The impact is: Local Process

K7Computing Pvt Ltd K7AntiVirus Premium 15.1.0.53 is affected by: Incorrect Access Control. The impact is: gain privileg

In createOrUpdate of Permission.java and related code, there is possible permission escalation due to a logic error. Thi

PlugIns\IDE_ACDStd.apl in ACDSee Professional 2021 14.0 1721 has a User Mode Write Access Violation starting at IDE_ACDS

PlugIns\IDE_ACDStd.apl in ACDSee Professional 2021 14.0 1721 has a User Mode Write Access Violation starting at IDE_ACDS

In checkUriPermission and related functions of MediaProvider.java, there is a possible way to access external files due

The unofficial SwiftFormat extension before 1.3.7 for Visual Studio Code allows remote attackers to execute arbitrary co

Windows Services and Controller App Elevation of Privilege Vulnerability

Windows Container Manager Service Elevation of Privilege Vulnerability

Improper component protection vulnerability in Samsung Internet prior to version 14.0.1.62 allows untrusted applications

In shouldLockKeyguard of LockTaskController.java, there is a possible way to exit App Pinning without a PIN due to a per

In ActivityTaskManagerService.startActivity() and AppTaskImpl.startActivity() of ActivityTaskManagerService.java and App

A flaw was discovered in gfs2 file system’s handling of acls (access control lists). An unprivileged local attacker coul

The Agent in NinjaRMM 5.0.909 has Incorrect Access Control.

In shouldBlockFromTree of ExternalStorageProvider.java, there is a possible permissions bypass. This could lead to local

In stopVpnProfile of Vpn.java, there is a possible VPN profile reset due to a permissions bypass. This could lead to loc

Privilege escalation vulnerability in Avast Antivirus prior to 20.4 allows a local user to gain elevated privileges by "

AVideo Platform is an open-source Audio and Video platform. It is similar to a self-hosted YouTube. In AVideo Platform b

MinIO is an open-source high performance object storage service and it is API compatible with Amazon S3 cloud storage se

The Hide-Thread-Content plugin through 2021-01-27 for MyBB allows remote attackers to bypass intended content-reading re

Electric Coin Company Zcashd before 2.1.1-1 allows attackers to trigger consensus failure and double spending. A valid c

In Visualware MyConnection Server before 11.0b build 5382, each published report is not associated with its own access c

The auth_internal plugin in Tiny Tiny RSS (aka tt-rss) before 2021-03-12 allows an attacker to log in via the OTP code w

The Acexy Wireless-N WiFi Repeater REV 1.0 (28.08.06.1) Web management administrator password can be changed by sending

In Liberty lisPBX 2.0-4, configuration backup files can be retrieved remotely from /backup/lispbx-CONF-YYYY-MM-DD.tar or

Information Exposure vulnerability in context asset handling of Apache Tapestry allows an attacker to download files ins

Emmanuel MyDomoAtHome (MDAH) REST API REST API Domoticz ISS Gateway 0.2.40 is affected by an information disclosure vuln

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.8. GitLab was not properly validati

In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, unauthenticated users can use the wpcf7r_get_nonce

In FreeBSD 13.0-STABLE before n245764-876ffe28796c, 12.2-STABLE before r369857, 13.0-RELEASE before p1, and 12.2-RELEASE

Information Exposure vulnerability in Hitachi ABB Power Grids eSOMS allows unauthorized user to gain access to report da

ORY Oathkeeper is an Identity & Access Proxy (IAP) and Access Control Decision API that authorizes HTTP requests based o

Spring Security versions 5.5.x prior to 5.5.1, 5.4.x prior to 5.4.7, 5.3.x prior to 5.3.10 and 5.2.x prior to 5.2.11 are

In MediaWiki before 1.31.15, 1.32.x through 1.35.x before 1.35.3, and 1.36.x before 1.36.1, bots have certain unintended

Certain Shenzhen PENGLIXIN components on DEPSTECH WiFi Digital Microscope 3, as used by Shekar Endoscope, allow a TELNET

An issue in the noReentrance() modifier of the Ethereum-based contract Accounting 1.0 allows attackers to carry out a re

Improper access control in Jfinal CMS 5.1.0 allows attackers to access sensitive information via /classes/conf/db.proper

Discourse is a platform for community discussion. In affected versions any private message that includes a group had its

An informtion disclosure issue exists in D-LINK-DIR-605 B2 Firmware Version : 2.01MT. An attacker can obtain a user name

The WPS Hide Login WordPress plugin before 1.9.1 has a bug which allows to get the secret login page by setting a random

Wire is an open source secure messenger. In affected versions if the an attacker gets an old but valid access token they

In checkCallerIsSystemOr of CompanionDeviceManagerService.java, there is a possible way to get a nearby Bluetooth device

The Grav admin plugin prior to version 1.10.11 does not correctly verify caller's privileges. As a consequence, users wi

On BIG-IP 15.1.x before 15.1.3, 14.1.x before 14.1.4.2, 13.1.0.8 through 13.1.3.6, and all versions of 16.0.x, when runn

Privilege escalation vulnerability in Liferay Portal 7.0.3 through 7.3.4, and Liferay DXP 7.1 before fix pack 20, and 7.

DSpace is an open source turnkey repository application. In version 7.0, any community or collection administrator can e