SenseLive X3050 访问控制错误漏洞

The SenseLive X3050 is a data collection and environmental monitoring device designed for IoT scenarios by SenseLive Corporation. The SenseLive X3050 has a access control vulnerability, which stems from the exposure of management protocols via the discovery function. This vulnerability could allo...

deskflow 访问控制错误漏洞

Deskflow is an open-source tool for sharing keyboards and mice across devices. Versions of Deskflow such as 1.20.0, 1.26.0.134, and earlier had access control vulnerabilities. These vulnerabilities stemmed from the Deskflow daemon running as the SYSTEM account, exposing IPC named pipes that have...

SenseLive X3050 访问控制错误漏洞

The SenseLive X3050 is a data collection and environmental monitoring device designed for IoT scenarios by SenseLive Corporation. The SenseLive X3050 has a access control vulnerability. This vulnerability stems from the Web management interface, which allows modification of critical configuration...

ClassroomIO.com 访问控制错误漏洞

ClassroomIO.com is an educational platform developed by ClassroomIO as open source. Version 0.1.13 of ClassroomIO.com contains a vulnerability related to access control. This vulnerability arises from ineffective access control, allowing low-privilege student users who are authenticated to access...

Microsoft Partner Center Access Control Vulnerability

Microsoft Partner Center is a Microsoft partner management platform for partners to manage customers, subscriptions and billing. An access control vulnerability exists in Microsoft Partner Center. The vulnerability stems from a failure to properly validate user privileges, resulting in improper...

Microsoft Partner Center 访问控制错误漏洞

Microsoft Partner Center is a Microsoft partner management platform for partners to manage customers, subscriptions and billing. An access control vulnerability exists in Microsoft Partner Center. The vulnerability stems from a failure to properly validate user privileges, resulting in improper...

EUVD-2026-24235

Horilla is a free and open source Human Resource Management System HRMS. In 1.5.0, a broken access control vulnerability in the helpdesk attachment viewer allows any authenticated user to view attachments from other tickets by changing the attachment ID. This can expose sensitive support files an...

NVIDIA KAI Scheduler 访问控制错误漏洞

NVIDIA KAI Scheduler is an AI-based computing task scheduling system developed by NVIDIA Corporation. NVIDIA KAI Scheduler has a vulnerability related to access control, which stems from unauthorized access to API endpoints, potentially leading to information leakage...

CVE-2026-40730

Missing Authorization vulnerability in ThemeGrill ThemeGrill Demo Importer themegrill-demo-importer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ThemeGrill Demo Importer: from n/a through = 2.0.0.6...

CVE-2025-40897

An access control vulnerability was discovered in the Threat Intelligence functionality due to a specific access restriction not being properly enforced for users with view-only privileges. An authenticated user with view-only privileges for the Threat Intelligence functionality can perform...

WordPress plugin ThemeGrill Demo Importer 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

PT-2026-33014

An access control vulnerability was discovered in the Threat Intelligence functionality due to a specific access restriction not being properly enforced for users with view-only privileges. An authenticated user with view-only privileges for the Threat Intelligence functionality can perform...

Microsoft Windows Remote Desktop Licensing Service 访问控制错误漏洞

The Microsoft Windows Remote Desktop Licensing Service is a service provided by Microsoft that manages and verifies licenses for remote desktop connections. There is an access control vulnerability in the Microsoft Windows Remote Desktop Licensing Service. Attackers can exploit this vulnerability...

WordPress plugin Eventin – Events Calendar, Event Booking, Ticket & Registration 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

Microsoft Windows Remote Desktop Licensing Service 访问控制错误漏洞

The Microsoft Windows Remote Desktop Licensing Service is a service provided by Microsoft that manages and verifies licenses for remote desktop connections. There is an access control vulnerability in the Microsoft Windows Remote Desktop Licensing Service. Attackers can exploit this vulnerability...

Microsoft Windows Virtualization-Based Security Enclave 访问控制错误漏洞

The Microsoft Windows Virtualization-Based Security Enclave is a software-based trusted execution environment within the host application address space provided by Microsoft. There is an access control vulnerability associated with the Microsoft Windows Virtualization-Based Security Enclave...

Microsoft Management Console 访问控制错误漏洞

Microsoft Management Console is a general-purpose management console framework developed by Microsoft Corporation. It is used to host and manage various system management tools, known as console plugins or management units. There is an access control error vulnerability in Microsoft Management...

EUVD-2026-21802

Access control vulnerability in the memo module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...

PT-2026-32236

Access control vulnerability in the memo module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...

CVE-2026-35647

OpenClaw before 2026.3.25 contains an access control flaw: verification notices bypass DM policy checks and reply to unpaired peers due to insufficient access validation before transmission. This could allow sending verification notices to users outside allowed direct message policies. Root cause...