191864 matches found
ROS-20260908-73-0017
The vulnerability in Java-25-openJDK is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
CVE-2026-79571
Incorrect access control in the SellerAuthorizeAspect component of springboot-project v1.0.0 allows unauthenticated attackers to access all seller management interfaces and list all products/orders, put products on/off sale, finish/cancel orders, and modify categories without authentication...
PT-2026-86997
Missing Authorization vulnerability in Unbounce Unbounce Landing Pages unbounce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Unbounce Landing Pages: from n/a through 1.1.4...
ROS-20260908-73-0016
The vulnerability in Java-21-openjdk is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
PT-2026-88175
Incorrect Authorization CWE-863 in the Kibana machine learning feature can lead to unauthorized resource consumption via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180. An authenticated user could invoke machine learning functionality beyond their authorization scope,...
PT-2026-87316
Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
PT-2026-87936
Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description Improper access control allows an authorized attacker to elevate privileges over a network, which enables them to affect the system. Recommendations At the moment, there is no information...
PT-2026-87947
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network...
JWT Refresh Token Handler File Privilege Escalation
The vulnerability of the /api/connections file of the JWT Refresh Token Handler component of the software platform for automated file exchange in Cleo Harmony is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to enhance their privileges and gain...
Security Updates for Microsoft SharePoint Server Subscription Edition (September 2026)
The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
PT-2026-86970
Name of the Vulnerable Software and Affected Versions Armoury Crate affected versions not specified Description Insufficient access control in the Armoury Crate driver exposes an IOCTL Input/Output Control mechanism. This allows a local user to bypass driver verification and perform arbitrary rea...
PT-2026-88502
Impact A log streaming event destination may reference a generic HTTP credential, and the destination resolved and decrypted whichever credential it named without checking that the caller had access to it. A user holding a custom global role scoped to Log Streaming operations could therefore name...
PT-2026-86976
Name of the Vulnerable Software and Affected Versions ASUS Armoury Crate affected versions not specified Description Insufficient access control in an exposed IOCTL Input/Output Control allows a local user to bypass driver authentication. This enables the user to read from and write to the PCIe...
PT-2026-87562
Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description Missing authorization in Windows Hyper-V allows an authorized attacker to elevate privileges over a network, which can lead to an elevation-of-privilege that affects the system...
PT-2026-87329
Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
PT-2026-88307
ColdFusion is affected by an Improper Access Control vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction...
PT-2026-87100
Incorrect access control in the SellerAuthorizeAspect component of springboot-project v1.0.0 allows unauthenticated attackers to access all seller management interfaces and list all products/orders, put products on/off sale, finish/cancel orders, and modify categories without authentication...
PT-2026-87071
An access control vulnerability was discovered in the Credentials Manager functionality due to insufficient validation of user privileges. A remote authenticated user with limited privileges can view a limited subset of the available entries in the Credentials Manager. The actual credential value...
PT-2026-87315
Insufficient granularity of access control in Windows Connected User Experiences and Telemetry allows an authorized attacker to disclose information locally...
EUVD-2026-72849
Incorrect access control in the SellerAuthorizeAspect component of springboot-project v1.0.0 allows unauthenticated attackers to access all seller management interfaces and list all products/orders, put products on/off sale, finish/cancel orders, and modify categories without authentication...