110414 matches found
CVE-2026-78023
Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are vulnerable to an Authorization Bypass Through User-Controlled Key vulnerability (CWE-639). A low privileged attacker with remote access could exploit this flaw to achieve Elevation of privileges . No specific exploi...
CVE-2026-78023
Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...
CVE-2026-78023
Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...
API-Security-Checklist
English | 繁中版 | 简中版 | العربية | Azərbaycan | Български | বাংলা | Català | Čeština | Deutsch | Ελληνικά | Español | فارسی | Français | हिंदी | Indonesia | Italiano | 日本語 | 한국어 | ພາສາລາວ | Македонски | മലയാളം | Монгол | Nederlands | Polski | Português Brasil | ไทย | Türkçe | Українська | Tiếng Việt...
CVE-2026-97075
Missing Authorization vulnerability in WP Media WP Rocket wp-rocket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Rocket: from n/a before 3.23.5...
CVE-2026-76769
Dell Secure Connect Gateway (SCG) Policy Manager , versions prior to 5.34.00.16 , is impacted by a Missing Authorization vulnerability (CWE-862). A low privileged attacker with remote access could exploit this flaw to achieve Elevation of privileges . Remediation is available via security update ...
EUVD-2026-95561
Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...
CVE-2026-76769
Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...
CVE-2026-76769
Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...
Vulnerabilities in Splunk Enterprise
Splunk has identified several vulnerabilities in Splunk Enterprise. These vulnerabilities apply to various versions of Splunk Enterprise and include insufficient authorization checks in REST API endpoints, allowing unauthorized users to access privileged functions or sensitive data. Some of these...
EUVD-2026-95541
Missing Authorization vulnerability in WP Media WP Rocket wp-rocket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Rocket: from n/a before 3.23.5...
cve-2025-29927-lab
Лаборатория CVE-2025-29927 Минимальная лаборатория воспроизведения для CVE-2025-29927 — обход авторизации промежуточного слоя Next.js CVSS 9.1. Сопутствующая статья: N-Day анализ на Medium Что это такое Приложение Next.js 15.2.2 уязвимое с маршрутом /dashboard, защищённым cookie. Проверку...
CVE-2026-101028
Incorrect Authorization vulnerability in ash-project ash allows an actor to infer data in related records they cannot read via Ash.count/2, Ash.exists/2 and Ash.aggregate/3. Ash.Actions.Aggregate.run/4 lib/ash/actions/aggregate.ex applied only the root resource's read policy before running the...
CVE-2026-101028
Incorrect Authorization vulnerability in ash-project ash allows an actor to infer data in related records they cannot read via Ash.count/2, Ash.exists/2 and Ash.aggregate/3. Ash.Actions.Aggregate.run/4 lib/ash/actions/aggregate.ex applied only the root resource's read policy before running the...
CVE-2026-101028
The ash-project ash framework (versions 2.6.0 to 3.34.6 ) contains an Incorrect Authorization vulnerability in the Ash.Actions.Aggregate.run/4 function. The root cause is that the aggregate path skips applying read policies for related resources, whereas the standard read path correctly applies t...
EUVD-2026-95511
Incorrect Authorization vulnerability in ash-project ash allows an actor to infer data in related records they cannot read via Ash.count/2, Ash.exists/2 and Ash.aggregate/3. Ash.Actions.Aggregate.run/4 lib/ash/actions/aggregate.ex applied only the root resource's read policy before running the...
CVE-2026-101028 Ash.count, Ash.exists and Ash.aggregate skip related resources' read policies in filters and sorts
Incorrect Authorization vulnerability in ash-project ash allows an actor to infer data in related records they cannot read via Ash.count/2, Ash.exists/2 and Ash.aggregate/3. Ash.Actions.Aggregate.run/4 lib/ash/actions/aggregate.ex applied only the root resource's read policy before running the...
Ops Manager Improper Authorization in Daily Host Monitoring Retrieval
An authenticated Ops Manager user with a read-only project role can retrieve a daily host monitoring record associated with a different project when they possess the required record identifier. Insufficient ownership validation can expose deployment metadata, including host and configuration...
CVE-2026-87108
An authenticated Ops Manager user with a read-only project role can exploit a flaw in daily host monitoring retrieval. Due to insufficient ownership validation , an attacker possessing a specific record identifier can retrieve a monitoring record associated with a different project . This unautho...
CVE-2026-87108 Ops Manager Improper Authorization in Daily Host Monitoring Retrieval
An authenticated Ops Manager user with a read-only project role can retrieve a daily host monitoring record associated with a different project when they possess the required record identifier. Insufficient ownership validation can expose deployment metadata, including host and configuration...