CVE-2025-64312

Permission control vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-55469

Incorrect access control in youlai-boot v2.21.1 allows attackers to escalate privileges and access the Administrator backend...

CVE-2025-58294

Huawei HarmonyOS contains a privilege control vulnerability in the printing module caused by improper privilege control. The issue can affect service confidentiality. Affected component is HarmonyOS’ printing/print module; root cause stated as privilege-control weaknesses. External exploitation d...

CVE-2025-64311

Summary: CVE-2025-64311 is a privilege control vulnerability described across multiple sources as affecting Huawei HarmonyOS, specifically arising from improper privilege control in the Notepad module. The issue is reported to potentially allow confidentiality impact if exploited. The NVD entry i...

CVE-2025-58315

Permission control vulnerability in the Wi-Fi module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-46175

Ruoyi v4.8.0 is vulnerable to Incorrect Access Control. There is a missing checkUserDataScope permission check in the authRole method of SysUserController.java...

CVE-2025-55469

Incorrect access control in youlai-boot v2.21.1 allows attackers to escalate privileges and access the Administrator backend...

CVE-2025-55471

Incorrect access control in the getUserFormData function of youlai-boot v2.21.1 allows attackers to access sensitive information for other users...

CVE-2025-65239

Incorrect access control in the /aux1/ocussd/trace endpoint of OpenCode Systems USSD Gateway OC Release:5, version 6.13.11 allows attackers with low-level privileges to read server logs...

CVE-2025-55471

Incorrect access control in the getUserFormData function of youlai-boot v2.21.1 allows attackers to access sensitive information for other users...

CVE-2025-65238

OpenCode Systems USSD Gateway OC is affected by CVE-2025-65238. The issue is an incorrect access control in the getSubUsersByProvider function, in OC Release 5 Version 6.13.11, which could allow attackers with low privileges to dump user records and access sensitive information. The available con...

CVE-2025-66063

Missing Authorization vulnerability in jgwhite33 WP Google Review Slider wp-google-places-review-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Google Review Slider: from n/a through = 17.4...

EUVD-2025-198447

Missing Authorization vulnerability in Scott Paterson Subscriptions & Memberships for PayPal subscriptions-memberships-for-paypal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Subscriptions & Memberships for PayPal: from n/a through = 1.1.7...

CVE-2025-66114

CVE-2025-66114 refers to a Missing Authorization / Broken Access Control in the WordPress plugin Show Variations as Single Products Woocommerce (plugin <= 2.0). The vulnerability enables access control bypass for variations data; exploitation details, affected versions (

CVE-2025-66110

CVE-2025-66110 affects the WordPress plugin TikTok Feed (b-tiktok-feed) up to version 1.0.22, labeled as a Missing Authorization / Broken Access Control vulnerability. The issue arises from misconfigured access control security levels, enabling unauthorized access per the CVE description. Public ...

CVE-2025-66108

CVE-2025-66108 concerns the WordPress plugin Merlot Digital TNC Toolbox: Web Performance (versions

PT-2025-47755

Missing Authorization vulnerability in Cozy Vision SMS Alert Order Notifications sms-alert allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SMS Alert Order Notifications: from n/a through = 3.8.8...

WordPress plugin Gutenverse 安全漏洞

The WordPress Gutenverse plugin is a plugin built specifically for WordPress sites, designed to enhance the Gutenberg editor and provide a richer page design and editing experience. WordPress Gutenverse plugin suffers from a missing authorization vulnerability that can be exploited by attackers t...

PT-2025-47740

Missing Authorization vulnerability in Jegstudio Gutenverse gutenverse allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gutenverse: from n/a through = 3.2.1...

CVE-2025-13315

Twonky Server 8.5.2 on Linux and Windows is vulnerable to an access control flaw. An unauthenticated attacker can bypass web service API authentication controls to leak a log file and read the administrator's username and encrypted password...