3646 matches found
Fortinet FortiSwitchAXFixed 访问控制错误漏洞
The Fortinet FortiSwitchAXFixed is a network switch device developed by the American company Fortinet. There was an access control vulnerability in the Fortinet FortiSwitchAXFixed version 1.0.0 to 1.0.1. This vulnerability stemmed from improper access control, allowing authenticated administrator...
Microsoft Windows Ancillary Function Driver for WinSock 访问控制错误漏洞
The Microsoft Windows Ancillary Function Driver for WinSock is a accessibility driver developed by Microsoft for Winsock. There is an access control vulnerability present in the Microsoft Windows Ancillary Function Driver for WinSock. Attackers can exploit this vulnerability to gain elevated...
Siemens Heliox EV Chargers Access Control Vulnerability
The Heliox Flex 180 kW EV Charging Station is a modular DC fast charging device in the Heliox series from Siemens.Heliox Mobile DC 40 kW EV Charging Station is a portable, plug-and-play fast charging device for electric vehicles from the Heliox brand of Siemens. The Heliox Mobile DC 40 kW EV...
Microsoft Azure Portal 访问控制错误漏洞
Microsoft Azure Portal is a web-based unified management console of Microsoft Corporation. There is an access control vulnerability in Microsoft Azure Portal. Attackers can exploit this vulnerability to gain higher privileges...
PT-2026-24098
An incorrect access control vulnerability exists in Tenda W15E V02.03.01.26 cn. An unauthenticated attacker can access the /cgi-bin/DownloadCfg/RouterCfm.jpg endpoint to download the configuration file containing plaintext administrator credentials, leading to sensitive information disclosure and...
QiAnXin QAX Virus Removal 访问控制错误漏洞
QiAnXin QAX Virus Removal is a malware and virus removal tool developed by QiAnXin Corporation. Versions of QiAnXin QAX Virus Removal released on or before October 22, 2025, have a vulnerability related to access control. This vulnerability stems from incorrect operations on the function...
CVE-2026-28800
Natro Macro is an open-source Bee Swarm Simulator macro written in AutoHotkey. Prior to version 1.1.0, anyone with Discord Remote Control set up in a non-private channel gives access to any user with the permission to send message in said channel access to do anything on their computer. This...
Mobiliti 访问控制错误漏洞
Mobiliti is an electric vehicle charging station system developed by the Hungarian company Mobiliti. Mobiliti has a security access control vulnerability, which stems from the lack of proper authentication mechanisms for WebSocket endpoints. This vulnerability could allow unauthorized sites to...
CVE-2026-21422
Dell PowerScale OneFS, versions 9.10.0.0 through 9.10.1.5 and versions 9.11.0.0 through 9.12.0.1, contains an external control of system or configuration setting vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to protection mechani...
EUVD-2026-9802
Permission control vulnerability in the cellulardata module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-28541
Permission control vulnerability in the cellulardata module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-28541
CVE-2026-28541 describes a permission control vulnerability in the cellular_data module. The CVSS 3.1 vector indicates LOCAL attack, low complexity, no privileges required, and an availability impact (BASE score 4.0, MEDIUM). The description provides impact on availability but does not include co...
EUVD-2026-9643
Missing Authorization vulnerability in e-plugins Directory Pro directory-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Directory Pro: from n/a through = 2.5.6...
EUVD-2026-9562
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Elated-Themes Helvig helvig allows PHP Local File Inclusion.This issue affects Helvig: from n/a through = 1.0...
EUVD-2026-9536
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Mikado-Themes Holmes holmes allows PHP Local File Inclusion.This issue affects Holmes: from n/a through = 1.7...
CVE-2026-28119
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Axiomthemes Nirvana allows PHP Local File Inclusion.This issue affects Nirvana: from n/a through 2.6...
CVE-2026-28090 WordPress Gamezone theme <= 1.1.11 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Gamezone gamezone allows PHP Local File Inclusion.This issue affects Gamezone: from n/a through = 1.1.11...
CVE-2026-28069
CVE-2026-28069 is a Local File Inclusion vulnerability in the WordPress theme Le Truffe (≤ 1.1.7) stemming from improper control of filename for include/require statements in PHP. The issue allows PHP Local File Inclusion and has a high overall impact (CVSS v3.1: 8.1, High; network attack vector,...
CVE-2026-28059
CVE-2026-28059 is a Local File Inclusion (LFI) vulnerability in the WordPress theme “Dermatology Clinic” by ThemeREX, affecting versions up to and including 1.4.3. The issue arises from Improper Control of Filename for Include/Require statements in PHP, enabling an attacker to potentially include...