Lucene search
+L

166239 matches found

Patchstack
Patchstack
added 2026/06/19 8:46 a.m.18 views

WordPress CheckView Automated Testing plugin <= 2.1.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by sequenceX0 in WordPress Plugin CheckView Automated Testing versions = 2.1.0...

7.5CVSS5.8AI score0.00346EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2026/06/19 8:16 a.m.24 views

CVE-2026-46461

Dell Server Hardware Manager, versions prior to 3.2.2, contains an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

7.8CVSS0.00137EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/19 7:46 a.m.76 views

CVE-2026-46461

Dell Server Hardware Manager, versions prior to 3.2.2, contains an Improper Access Control vulnerability. A low-privileged attacker with local access could potentially exploit this to achieve Elevation of Privileges (CVE-2026-46461). Root cause: improper access control in the service/component ha...

7.8CVSS5.9AI score0.00137EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/06/19 7:46 a.m.64 views

CVE-2026-46461

Dell Server Hardware Manager, versions prior to 3.2.2, contains an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

7.8CVSS0.00137EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/06/19 7:46 a.m.16 views

CVE-2026-46461

Dell Server Hardware Manager, versions prior to 3.2.2, contains an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

7.8CVSS5.9AI score0.00137EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/06/19 7:46 a.m.32 views

EUVD-2026-37997

Dell Server Hardware Manager, versions prior to 3.2.2, contains an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

7.8CVSS5.9AI score0.00137EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2026/06/19 1:56 a.m.10 views

SUSE CVE-2026-12528

A flaw was found in 389 Directory Server in the aclpnormalizeacltxt function of aclparse.c. A malformed ACI Access Control Instruction string can trigger heap-buffer-overflow writes and reads during ACI parsing. The function fails to validate that the ACI keyword has sufficient length after...

5.4CVSS5.8AI score0.00226EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/06/19 12:31 a.m.28 views

EUVD-2026-37947

Improper access control in Microsoft Dynamics 365 allows an authorized attacker to elevate privileges over a network...

9.9CVSS5.3AI score0.00778EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/06/19 12:00 a.m.35 views

PT-2026-51005

Name of the Vulnerable Software and Affected Versions Statamic versions prior to 5.73.23 Statamic versions prior to 6.20.0 Description An authenticated Control Panel user can view metadata and content for resources they lack permission to access. This includes entries, assets, users, roles, group...

4.3CVSS5.9AI score0.0027EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/06/19 12:00 a.m.30 views

PT-2026-50882

Name of the Vulnerable Software and Affected Versions FlexNet Manager Suite 2025 R1 FlexNet Manager Suite 2025 R2 Description Insufficient access control in the software could allow unauthorized access to attachment files. Recommendations At the moment, there is no information about a newer versi...

7.1CVSS5.8AI score0.00351EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/06/19 12:00 a.m.10 views

CVE-2026-51845

Tenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform/AdvSetMacMtuWan interface via the mac parameter...

6.2AI score0.00555EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2026/06/19 12:00 a.m.28 views

PT-2026-50883

Name of the Vulnerable Software and Affected Versions Apache APISIX versions 1.2.0 through 3.16.0 Description A Use of Less Trusted Source issue exists where an attacker can leverage the wolf-rbac plugin under default configuration. This allows for the potential pollution of logs with spoofed...

5.8CVSS5.9AI score0.00475EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2026/06/19 12:00 a.m.9 views

The vulnerability of the WebRender component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to escalate their privileges.

The vulnerability of the WebRender component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

10CVSS5.7AI score0.00483EPSS
SaveExploits0References13Affected Software4
Positive Technologies
Positive Technologies
added 2026/06/19 12:00 a.m.36 views

PT-2026-51109

This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20260723T184607 2026-07-23T18:46:07Z jscPED-11136. Go CVE Numbering Authority IDs added or updated with aliases: GO-2026-4730 CVE-2026-33022 GHSA-cv4x-93xx-wgfj GO-2026-4761 CVE-2026-33211 GHSA-j5q5-j9gm-2w5c...

9.9CVSS7.2AI score0.03082EPSS
SaveExploits11
Positive Technologies
Positive Technologies
added 2026/06/19 12:00 a.m.47 views

PT-2026-50850

Name of the Vulnerable Software and Affected Versions Dell Server Hardware Manager versions prior to 3.2.2 Description Improper Access Control allows a low privileged attacker with local access to potentially achieve Elevation of privileges, which is the act of gaining higher-level permissions th...

7.8CVSS5.9AI score0.00137EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
added 2026/06/19 12:00 a.m.9 views

The vulnerability of the form autofill function in Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of Form Autofill functions in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to deficiencies in access control for personal information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.3CVSS5.5AI score0.00215EPSS
SaveExploits1References13Affected Software4
Tenable Nessus
Tenable Nessus
added 2026/06/19 12:00 a.m.12 views

Lexmark Printers Missing Authentication for Critical Function (CVE-2019-9934)

Various Lexmark products have Incorrect Access Control issue 1 of 2. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505493; scriptversion"1.4";...

5.3CVSS5.9AI score0.00832EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/06/19 12:00 a.m.15 views

Lexmark Printers Improper Access Control (CVE-2019-10058)

Various Lexmark products have Incorrect Access Control. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505497; scriptversion"1.4";...

9.1CVSS7.8AI score0.01091EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/06/19 12:00 a.m.17 views

EUVD-2026-38051

Tenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform/AdvSetMacMtuWan interface via the mac parameter...

6.2AI score0.00555EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2026/06/19 12:00 a.m.17 views

PT-2026-56607

Name of the Vulnerable Software and Affected Versions Parse Server versions prior to 9.9.1-alpha.13 Parse Server versions prior to 8.6.83 Description A LiveQuery subscriber may receive object field values they are not authorized to read. This occurs when a single save operation simultaneously...

2.3CVSS6.1AI score0.00527EPSS
SaveExploits0References15
Rows per page
Query Builder