1480 matches found
CVE-2024-57676
The D-Link DIR-816A2 router (specifically firmware 816A2_FWv1.10CNB05_R1B011D88210 ) is vulnerable to an access control issue in the form2WlanBasicSetup.cgi component. An unauthenticated attacker can exploit this deficiency by sending a crafted POST request to set up the 2.4G and 5G wlan services...
CVE-2024-57681
The D-Link DIR-816A2 router, specifically the 816A2_FWv1.10CNB05_R1B011D88210 firmware, contains an access control issue within the form2alg.cgi component. This vulnerability allows unauthenticated attackers to set the agl service of the device by sending a specially crafted HTTP POST request . A...
CVE-2024-57679
The D-Link DIR-816A2 router, specifically running firmware 816A2_FWv1.10CNB05_R1B011D88210 , contains an access control deficiency in the form2RepeaterSetup.cgi component. This vulnerability allows unauthenticated attackers to set the 2.4G and 5G repeater services via a crafted HTTP POST request ...
CVE-2024-57676
An access control issue in the component form2WlanBasicSetup.cgi of D-Link 816A2FWv1.10CNB05R1B011D88210 allows unauthenticated attackers to set the 2.4G and 5G wlan service of the device via a crafted POST request...
CVE-2025-22729 WordPress VOD Infomaniak plugin <= 1.5.9 - Broken Access Control vulnerability
Missing Authorization vulnerability in Infomaniak Network VOD Infomaniak vod-infomaniak allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VOD Infomaniak: from n/a through = 1.5.9...
CVE-2025-22984
An access control issue in the component /api/squareComment/DelectSquareById of iceCMS v2.2.0 allows unauthenticated attackers to access sensitive information...
CVE-2025-22983
An access control issue in the component /square/getAllSquare/circle of iceCMS v2.2.0 allows unauthenticated attackers to access sensitive information...
CVE-2025-22983
A security vulnerability exists in iceCMS version 2.2.0 due to an access control issue in the /square/getAllSquare/circle component. This flaw allows unauthenticated attackers to access sensitive information . As a temporary workaround, it is recommended to restrict access to this specific compon...
CVE-2025-22984
The iceCMS content management system (v2.2.0) is affected by an access control issue in the /api/squareComment/DelectSquareById component. This vulnerability allows unauthenticated attackers to access sensitive information due to improper access controls. While no official patch is currently iden...
CVE-2025-22984
An access control issue in the component /api/squareComment/DelectSquareById of iceCMS v2.2.0 allows unauthenticated attackers to access sensitive information...
CVE-2025-22984
An access control issue in the component /api/squareComment/DelectSquareById of iceCMS v2.2.0 allows unauthenticated attackers to access sensitive information...
CVE-2025-22983
An access control issue in the component /square/getAllSquare/circle of iceCMS v2.2.0 allows unauthenticated attackers to access sensitive information...
CVE-2024-46310
Incorrect Access Control in Cfx.re FXServer v9601 and earlier allows unauthenticated users to modify and read arbitrary user data via exposed API endpoint...
CVE-2024-56272
CVE-2024-56272 corresponds to a Missing Authorization vulnerability in the WordPress plugin Hide Category by User Role for WooCommerce. Connected Red Hat advisory RH-CVE-2024-56272 repeats the same description for the affected plugin, noting the issue exists for versions up to 2.1.1. The provided...
CVE-2025-22543 WordPress ST Gallery WP plugin <= 1.0.8 - Settings Change vulnerability
Missing Authorization vulnerability in Beautiful Templates ST Gallery WP allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ST Gallery WP: from n/a through 1.0.8...
CVE-2024-56276
CVE-2024-56276 is a Missing Authorization vulnerability in WPForms Contact Form (WPForms Lite) that affects Contact Form by WPForms: from n/a through 1.9.2.2. The root cause is misconfigured access control security levels, enabling unauthorized access to or manipulation of form-related functional...
CVE-2025-22299
CVE-2025-22299 is a Missing Authorization / Broken Access Control vulnerability in the WordPress plugin AI for SEO (Bulk Generate Metadata, Alt Text, Image Titles, Captions, Descriptions). Affected versions range up to 1.2.9. Evidence from multiple sources confirms the issue is real and publicly ...
CVE-2025-22304 WordPress WP Visitor Statistics plugin <= 7.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in osama.esh WP Visitor Statistics Real Time Traffic wp-stats-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Visitor Statistics Real Time Traffic: from n/a through = 7.5...
CVE-2024-54767
An access control issue in the component /juisboxinfo.xml of AVM FRITZ!Box 7530 AX v7.59 allows attackers to obtain sensitive information without authentication. NOTE: this is disputed by the Supplier because it cannot be reproduced, and the issue report focuses on an unintended configuration wit...