190607 matches found
PT-2026-98248
Name of the Vulnerable Software and Affected Versions ServiceNow AI Platform affected versions not specified Description An improper access control issue exists within the ServiceNow AI Platform. This flaw could allow an unauthenticated user to create, modify, or delete instance data beyond...
PT-2026-97736
Name of the Vulnerable Software and Affected Versions DIAEnergie versions prior to 1.11.00.022 Description Improper Access Control allows unauthorized access or modification of resources within the system. Recommendations Update to version 1.11.00.022 or later...
ASRock IO Driver version 1.00.00.0000 Improper Access Control
ASRock IO Driver version 1.00.00.0000 contains an improper access control vulnerability in AsrDrv103.sys. Included research analyzes the vulnerable driver and its encrypted IOCTL mechanism...
The vulnerability of the JSE component of the Oracle Java SE software platform, as well as the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, allows attackers to trigger a service failure.
The vulnerability of the JSE component of Oracle Java SE software, as well as of the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, is related to access control errors. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
The vulnerability of the JSE component of Oracle Java SE software, as well as of the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, allows attackers to gain unauthorized access to protected information.
The vulnerability of the JSE component of Oracle Java SE software, as well as of the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, is related to access control errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized...
The vulnerability of the Libraries component of the Oracle Java SE software platform, as well as the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, allows attackers to trigger a service failure.
The vulnerability of the Libraries component of the Oracle Java SE software platform, as well as the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, is related to access control errors. Exploiting this vulnerability can allow an attacker to cause service interruptio...
MiracleLinux 9 : libevent-2.1.13-1.el9_8 (AXSA:2026-1905:02)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1905:02 advisory. libevent: Libevent: Denial of Service via malformed RPC data CVE-2026-63383 libevent: Libevent: Off-by-one stack buffer overflow leading to denial o...
CVE-2026-76816
A flaw was found in Netty. The MqttEncoder component does not properly validate client identifiers, will topics, usernames, and PUBLISH topic names before encoding. This allows an attacker to inject prohibited null bytes into MQTT Message Queuing Telemetry Transport UTF-8 string fields when an...
CVE-2026-6718
IBM Concert 1.0.0 through 3.0.0 is vulnerable to improper access control which allows unauthorized modification of application files...
CVE-2026-6718
IBM Concert 1.0.0 through 3.0.0 is vulnerable to improper access control which allows unauthorized modification of application files...
EUVD-2026-85658
IBM Concert 1.0.0 through 3.0.0 is vulnerable to improper access control which allows unauthorized modification of application files...
CVE-2026-6718 Multiple Vulnerabilities in IBM Concert Software
IBM Concert 1.0.0 through 3.0.0 is vulnerable to improper access control which allows unauthorized modification of application files...
CVE-2026-6718 Multiple Vulnerabilities in IBM Concert Software
IBM Concert 1.0.0 through 3.0.0 is vulnerable to improper access control which allows unauthorized modification of application files...
UBUNTU-CVE-2026-66070
RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.17, 4.0.22, 4.1.13, and 4.2.6, matchorigin/1 returned the bare reflected Origin and allowed credentials even when the wildcard "" was configured, so the response echoed the attacker's origin together with...
CVE-2026-95602
Authorization Bypass Through User-Controlled Key vulnerability in YITH YITH WooCommerce Request A Quote allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects YITH WooCommerce Request A Quote: from n/a before 4.46.1...
CVE-2026-95604
Unauthenticated Broken Access Control in Loops & Logic = 4.2.4 versions...
CVE-2026-95527
Unauthenticated Broken Access Control in Conekta Payment Gateway = 6.2.4 versions...
CVE-2026-95513
Unauthenticated Broken Access Control in Online Booking & Scheduling Calendar for WordPress by vcita = 4.6.0 versions...