190392 matches found
CVE-2026-92370 Remote Session Access Control Bypass Leading to Remote Code Execution
An improper access control vulnerability in TeamViewer Full Client, Host, and related affected modules on Windows, Linux, and macOS allows an authenticated remote attacker to bypass user-configured permission settings during session establishment. By modifying access control parameters for...
CVE-2026-92370 Remote Session Access Control Bypass Leading to Remote Code Execution
An improper access control vulnerability in TeamViewer Full Client, Host, and related affected modules on Windows, Linux, and macOS allows an authenticated remote attacker to bypass user-configured permission settings during session establishment. By modifying access control parameters for...
CVE-2026-92370
An improper access control vulnerability in TeamViewer Full Client, Host , and related modules on Windows, Linux, and macOS allows an authenticated remote attacker to bypass user-configured permission settings during session establishment. By modifying access control parameters for restricted fea...
EUVD-2026-88999
Improper access control in the partial connection API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated low-privileged user to read, create, modify, and delete System Vault entries via a crafted API request...
CVE-2026-93332
An improper access control vulnerability exists in the partial connection API of Devolutions Server version 2026.3.5.0 and earlier . An authenticated low-privileged user can exploit this by sending a crafted API request to perform unauthorized actions, including reading, creating, modifying, and ...
CVE-2026-93332
Improper access control in the partial connection API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated low-privileged user to read, create, modify, and delete System Vault entries via a crafted API request...
CVE-2026-93332
Improper access control in the partial connection API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated low-privileged user to read, create, modify, and delete System Vault entries via a crafted API request...
CVE-2025-33207
NVIDIA ConnectX and Bluefield contain a vulnerability in a control register, where a user with VF access could cause improper access control for the register interface by sending a malicious command to the firmware. A successful exploit of this vulnerability might lead to denial of service...
CVE-2025-33207
NVIDIA Networking BlueField and ConnectX products are vulnerable to a flaw in a control register (CWE-1262). A user with VF access can send a malicious command to the firmware, resulting in improper access control for the register interface. Successful exploitation may lead to a denial of service...
CVE-2025-33207
NVIDIA ConnectX and Bluefield contain a vulnerability in a control register, where a user with VF access could cause improper access control for the register interface by sending a malicious command to the firmware. A successful exploit of this vulnerability might lead to denial of service...
CVE-2025-33207
NVIDIA ConnectX and Bluefield contain a vulnerability in a control register, where a user with VF access could cause improper access control for the register interface by sending a malicious command to the firmware. A successful exploit of this vulnerability might lead to denial of service...
EUVD-2025-211016
NVIDIA ConnectX and Bluefield contain a vulnerability in a control register, where a user with VF access could cause improper access control for the register interface by sending a malicious command to the firmware. A successful exploit of this vulnerability might lead to denial of service...
Improper Neutralization of Special Elements in Data Query Logic
Overview apache-airflow-providers-google is a Provider for Apache Airflow. Implements apache-airflow-providers-google package Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Data Query Logic via GoogleDriveHook in drive.py, where folder names, fi...
WordPress Hostinger Migrator plugin <= 1.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by onecomputerguy in WordPress Plugin Hostinger Migrator versions = 1.0...
WordPress AllAble Connector plugin <= 0.13.4 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin AllAble Connector versions = 0.13.4...
WordPress MCP Content Manager Lite plugin <= 1.1.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin MCP Content Manager Lite versions = 1.1.0...
WordPress FormGent plugin <= 1.12.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Zahid Abbasi in WordPress Plugin FormGent versions = 1.12.2...
WordPress WP Express Checkout (Accept PayPal Payments) plugin <= 2.4.9 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Morato Antoine in WordPress Plugin WP Express Checkout Accept PayPal Payments versions = 2.4.9...
CVE-2026-97561
A flaw was found in the Linux kernel's Server Message Block SMB client. When an administrator mounts a remote share with options configured to force specific local user and group ownership, the client fails to enforce these restrictions and instead accepts ownership values provided by the remote...
EUVD-2026-88563
ZoneMinder before 1.38.4 fails to apply per-monitor access restrictions in the FramesController index endpoint. Authenticated users with Events view permission can call the frames API to list frame records from monitors they are denied access to, disclosing event and frame metadata across monitor...