Agorum core open 安全漏洞

Agorum core open is an enterprise content management system from Agorum Germany. A security vulnerability exists in Agorum core open versions prior to 11.9.2 and prior to 11.10.1, which stems from improper access control of the dynawebservice component and could lead to arbitrary file access...

The vulnerability of the Preferences component of the Oracle CRM system’s customer relationship management module. The Oracle E-Business Suite technical foundation for automating business processes, allowing attackers to gain access to read, modify, and delete information.

The vulnerability of the Preferences component of the Oracle CRM system’s customer relationship management module is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain read, modify, and delete access to information...

PT-2025-29806 · Woocommerce · Nc Wishlist For Woocommerce

Name of the Vulnerable Software and Affected Versions: Wishlist for WooCommerce versions n/a through 3.2.3 Description: The software contains a missing authorization flaw due to incorrectly configured access control security levels. Recommendations: Update Wishlist for WooCommerce to a version...

Fortra GoAnywhere MFT 安全漏洞

Fortra GoAnywhere MFT is a file transfer software from Fortra, Inc. A security vulnerability exists in Fortra GoAnywhere MFT versions prior to 7.8.1 that stems from an access control flaw that could lead to a denial of service attack...

PT-2025-29745 · Smtp2Go · Smtp2Go

Name of the Vulnerable Software and Affected Versions: SMTP2GO versions n/a through 1.12.1 Description: The SMTP2GO software contains a missing authorization flaw that allows exploiting incorrectly configured access control security levels. Recommendations: At the moment, there is no information...

The vulnerability in the virtual graphics adapter VMSVGA of the Oracle VM VirtualBox software allows a hacker to escalate their privileges and execute arbitrary code.

The vulnerability of the Virtual Graphics Adapter VMSVGA in the Oracle VM VirtualBox virtualization software is related to deficiencies in access control due to a numerical overflow condition. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...

Oracle Fusion Middleware 访问控制错误漏洞

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collection, etc. WebLogic Server is one of the application server components for cloud and traditional...

The vulnerability of Microsoft Edge browsers, related to deficiencies in access control, allows attackers to disclose protected information.

The vulnerability of Microsoft Edge relates to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

VulnCheck KEV: CVE-2011-4085

The servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before 5.1.2, SOA Platform before 5.2.0, BRMS Platform before 5.3.0, and Portal Platform before 4.3 CP07 perform access control only for the GET and POST methods, which allow remote attackers to bypass authentication ...

CVE-2025-52963 Junos OS: A low-privileged user can disable an interface

An Improper Access Control vulnerability in the User Interface UI of Juniper Networks Junos OS allows a local, low-privileged attacker to bring down an interface, leading to a Denial-of-Service. Users with "view" permissions can run a specific request interface command which allows the user to sh...

CVE-2025-52963 Junos OS: A low-privileged user can disable an interface

An Improper Access Control vulnerability in the User Interface UI of Juniper Networks Junos OS allows a local, low-privileged attacker to bring down an interface, leading to a Denial-of-Service. Users with "view" permissions can run a specific request interface command which allows the user to sh...

The vulnerability of the AirPlay Handler component in operating systems such as macOS, iPadOS, iOS, tvOS, and visionOS allows attackers to compromise the confidentiality and integrity of protected information.

The vulnerability of the AirPlay Handler component in operating systems such as macOS, iPadOS, iOS, tvOS, and visionOS is related to deficiencies in access control. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality and integrity of protected information...

Siemens TIA Administrator 访问控制错误漏洞

Siemens TIA Administrator is a management program for authorizing and licensing SIMATIC products from Siemens, Germany. An access control error vulnerability exists in Siemens TIA Administrator that can be exploited by an attacker to cause elevation of privilege and arbitrary code execution...

PHOENIX CONTACT CHARX SEC-3xxx 访问控制错误漏洞

PHOENIX CONTACT CHARX SEC-3000 etc. are products of PHOENIX CONTACT, Germany.PHOENIX CONTACT CHARX SEC-3000 is an AC Charge Controller.PHOENIX CONTACT CHARX SEC-3050 is an AC Charge Controller.PHOENIX CONTACT CHARX SEC-3100 is an AC Charge Controller. PHOENIX CONTACT CHARX SEC-3100 is an AC charg...

Siemens SINEC NMS 访问控制错误漏洞

Siemens SINEC NMS is a network management system NMS from Siemens, Germany, that can be used 24/7 to centrally monitor, manage and configure industrial networks with tens of thousands of devices, including safety-related areas. An access control error vulnerability exists in Siemens SINEC NMS,...

CVE-2025-47634 WordPress WC Pickup Store plugin <= 1.8.9 - Settings Change Vulnerability

Missing Authorization vulnerability in Keylor Mendoza WC Pickup Store wc-pickup-store allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WC Pickup Store: from n/a through = 1.8.9...

LinkedIn: Improper Access Control - Access to "Active Hiring" (Premium feature) filter results

An access control vulnerability was identified in LinkedIn's people search functionality that allowed unauthorized access to premium "Active Hiring" filter results. The vulnerability was found in the GraphQL API endpoint where premium feature restrictions were not properly enforced, allowing user...

ifm electronic Smart PLC AC4xxS 访问控制错误漏洞

The ifm electronic Smart PLC AC4xxS is a series of hosts/gateways from ifm electronic Germany. The ifm electronic Smart PLC AC4xxS suffers from an access control error vulnerability that stems from a lack of authentication in endpoint scripts, which could allow an unauthorized, remote attacker to...

VulnCheck KEV: CVE-2024-54763

An access control issue in the component /login/hostinfo.cgi of ipTIME A2004 v12.17.0 allows attackers to obtain sensitive information without authentication...

WordPress plugin iCount Payment Gateway 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...