Lucene search
+L

5166 matches found

RedhatCVE
RedhatCVE
•added 2026/06/05 7:10 p.m.•18 views

CVE-2026-8851

SOGo versions 5.12.7 and prior contains a SQL injection vulnerability in the Access Control List management functionality that allows authenticated users to extract arbitrary data from the database by injecting SQL subqueries through the uid parameter of the addUserInAcls endpoint. Attackers can...

8.6CVSS5.8AI score0.00422EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/06/05 9:01 a.m.•23 views

EUVD-2026-34793

Improper Authentication, Missing authentication for critical function, Weak Authentication vulnerability in DTS Electronics Industry and Trade Ltd. Co. Redline WR3200 allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Redline WR3200: from 7.1.3 before 7.1.8...

9.8CVSS5.5AI score0.00642EPSS
SaveExploits0References1
OSV
OSV
•added 2026/06/04 7:28 p.m.•25 views

GHSA-V39M-97P8-GQG7 Shopware: Privilege escalation: non-admin user with user:create ACL can create admin accounts

UserController::upsertUser writes user data in SYSTEMSCOPE and does not filter the admin field. A non-admin API user with user:create or user:update ACL permission can set admin: true on new or existing users, escalating to full admin access. The Problem In...

6.5CVSS5.8AI score0.00472EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/06/04 2:22 p.m.•29 views

EUVD-2026-34283

Improper Access Control, Missing Authorization vulnerability in Kurt Software Studio WriteUp Mobile App allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects WriteUp Mobile App: from 1.3.0 through 04062026...

8.8CVSS5.8AI score0.00417EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2026/06/04 10:49 a.m.•18 views

kernel: smb: client: validate the whole DACL before rewriting it in cifsacl

A flaw was found in the Linux kernel's Server Message Block SMB client, specifically within the cifsacl functionality. A malicious SMB server could provide a malformed Discretionary Access Control List DACL that claims to contain more Access Control Entries ACEs than are actually present. This...

8.8CVSS5.8AI score0.00472EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/06/04 3:36 a.m.•22 views

CVE-2026-49186

The local MQTT broker does not enforce topic-level Access Control Lists ACLs. This allows any client to subscribe using wildcard characters or + to enumerate hidden network devices or publish rogue control commands...

8.6CVSS5.8AI score0.00466EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/04 12:00 a.m.•42 views

PT-2026-46396

Name of the Vulnerable Software and Affected Versions Arista EOS affected versions not specified Description On affected platforms running Arista EOS with MACsec and egress ACLs configured on the same interfaces, the ACL policies may not be enforced for packets egressing on those ports. This...

6.9CVSS5.4AI score0.00282EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/04 12:00 a.m.•0 views

CVE-2024-27891: security-advisory-0102

On affected platforms running Arista EOS with MACsec and egress ACLs configured on the same interfaces, the ACL policies may not be enforced for packets egressing on those ports. This can cause outgoing packets to incorrectly be allowed or denied...

6.9CVSS5.8AI score0.00282EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2026/06/03 3:25 p.m.•34 views

Important: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

9.8CVSS5.8AI score0.00827EPSS
SaveExploits0References8
NVD
NVD
•added 2026/06/02 10:16 a.m.•34 views

CVE-2026-41115

An improper authorization vulnerability has been identified in Apache Kafka. The implementation of the CONSUMERGROUPDESCRIBE 69 API validates the DESCRIBE operation on the GROUP resource instead of the READ operation that documented in the official kafka documentation and the KIP-848. This...

4.3CVSS0.00454EPSS
SaveExploits0References2
CVE
CVE
•added 2026/06/02 9:45 a.m.•47 views

CVE-2025-53302

CVE-2025-53302 in WordPress Theme Constructor (<= 1.6.5) is a Missing Authorization / Broken Access Control issue. Publicly disclosed details indicate unauthenticated access to restricted functionality due to ACL constraints, affecting Constructor versions up to 1.6.5. CVSS v3.1 base score is ...

5.3CVSS5.8AI score0.00187EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/06/02 9:45 a.m.•24 views

EUVD-2025-210030

Missing Authorization vulnerability in Anton Shevchuk Constructor allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Constructor: from n/a through 1.6.5...

5.3CVSS5.8AI score0.00187EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/06/02 8:56 a.m.•31 views

EUVD-2026-33904

An improper authorization vulnerability has been identified in Apache Kafka. The implementation of the CONSUMERGROUPDESCRIBE 69 API validates the DESCRIBE operation on the GROUP resource instead of the READ operation that documented in the official kafka documentation and the KIP-848. This...

4.3CVSS5.8AI score0.00454EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/06/02 8:56 a.m.•18 views

CVE-2026-41115 Apache Kafka: Improper Authorization in CONSUMER_GROUP_DESCRIBE API

An improper authorization vulnerability has been identified in Apache Kafka. The implementation of the CONSUMERGROUPDESCRIBE 69 API validates the DESCRIBE operation on the GROUP resource instead of the READ operation that documented in the official kafka documentation and the KIP-848. This...

5.8AI score0.00454EPSS
SaveExploits0References1
CVE
CVE
•added 2026/06/02 8:56 a.m.•515 views

CVE-2026-41115

An improper authorization vulnerability exists in Apache Kafka regarding the CONSUMER_GROUP_DESCRIBE (69) API. The API currently validates the DESCRIBE operation on the GROUP resource, which contradicts the READ operation specified in official documentation and KIP-848. This discrepancy can lead ...

5.8AI score0.00454EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/02 12:00 a.m.•0 views

CVE-2026-41115: Improper Authorization

An improper authorization vulnerability has been identified in Apache Kafka. The implementation of the CONSUMERGROUPDESCRIBE 69 API validates the DESCRIBE operation on the GROUP resource instead of the READ operation that documented in the official kafka documentation and the KIP-848. This...

4.3CVSS5.7AI score0.00454EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/06/02 12:00 a.m.•27 views

PT-2026-45773

NamelessMC is website software for Minecraft servers. In version 2.2.4, modules/Forum/pages/forum/get quotes.php only checks whether the caller is logged in, then reads a post by attacker-controlled post ID and returns its content. The backend helper in modules/Forum/classes/Forum.php does not...

7.1CVSS5.8AI score0.00381EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/02 12:00 a.m.•0 views

CVE-2025-53302: Missing Authorization

Missing Authorization vulnerability in Anton Shevchuk Constructor allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Constructor: from n/a through 1.6.5...

5.3CVSS5.8AI score0.00187EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/05/30 12:00 a.m.•27 views

RockyLinux 8 : kernel-rt (RLSA-2026:21745)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:21745 advisory. kernel: Bluetooth: MGMT: Fix possible UAFs CVE-2025-39981 kernel: ima: don't clear IMADIGSIG flag when setting or removing non-IMA xattr CVE-2025-68183...

9.4CVSS6AI score0.01338EPSS
SaveExploits0References37
Tenable Nessus
Tenable Nessus
•added 2026/05/30 12:00 a.m.•19 views

RockyLinux 9 : kernel (RLSA-2026:21556)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:21556 advisory. kernel: proc: use the same treatment to check proclseek as ones for procreaditer et.al CVE-2025-38653 kernel: ima: don't clear IMADIGSIG flag when setti...

9.4CVSS6.2AI score0.01338EPSS
SaveExploits0References39
Rows per page
Query Builder