CVE-2025-12954

The Timetable and Event Schedule by MotoPress WordPress plugin before 2.4.16 does not verify a user has access to a specific event when duplicating, leading to arbitrary event disclosure when to users with a role as low as Contributor...

CVE-2025-12954 Timetable and Event Schedule by MotoPress < 2.4.16 - Contributor+ Event Disclosure via IDOR

The Timetable and Event Schedule by MotoPress WordPress plugin before 2.4.16 does not verify a user has access to a specific event when duplicating, leading to arbitrary event disclosure when to users with a role as low as Contributor...

Socomec DIRIS Digiware M-70 Denial of Service Vulnerability (CNVD-2025-30455)

The Socomec DIRIS Digiware M-70 is a communication gateway device that serves as an access point for the DIRIS Digiware system, which combines 24VDC power and communication functions in a single unit. A denial of service vulnerability exists in the Socomec DIRIS Digiware M-70, which stems from th...

CVE-2025-58481

CVE-2025-58481 affects Samsung MotionPhoto/Motion Photo feature with MPRemoteService prior to v4.1.51. The vulnerability arises from improper access control in MPRemoteService, allowing a local attacker with low privileges to start a privileged service. The CVE is documented across multiple feeds...

ROS-20251202-05

A vulnerability in the DevTools component of the Google Chrome browser is related to an access control flaw in an isolated environment. of an isolated environment. Exploitation of the vulnerability could allow an attacker acting remotely to bypass the sandbox protection mechanism. sandbox...

WordPress Stylish Price List plugin <= 7.2.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by daroo in WordPress Plugin Stylish Price List versions = 7.2.2...

CVE-2025-64312

Permission control vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-55469

Incorrect access control in youlai-boot v2.21.1 allows attackers to escalate privileges and access the Administrator backend...

CVE-2025-58294

Huawei HarmonyOS contains a privilege control vulnerability in the printing module caused by improper privilege control. The issue can affect service confidentiality. Affected component is HarmonyOS’ printing/print module; root cause stated as privilege-control weaknesses. External exploitation d...

CVE-2025-64311

Summary: CVE-2025-64311 is a privilege control vulnerability described across multiple sources as affecting Huawei HarmonyOS, specifically arising from improper privilege control in the Notepad module. The issue is reported to potentially allow confidentiality impact if exploited. The NVD entry i...

CVE-2025-58315

Permission control vulnerability in the Wi-Fi module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-46175

Ruoyi v4.8.0 is vulnerable to Incorrect Access Control. There is a missing checkUserDataScope permission check in the authRole method of SysUserController.java...

CVE-2025-55469

Incorrect access control in youlai-boot v2.21.1 allows attackers to escalate privileges and access the Administrator backend...

CVE-2025-55471

Incorrect access control in the getUserFormData function of youlai-boot v2.21.1 allows attackers to access sensitive information for other users...

CVE-2025-65239

Incorrect access control in the /aux1/ocussd/trace endpoint of OpenCode Systems USSD Gateway OC Release:5, version 6.13.11 allows attackers with low-level privileges to read server logs...

CVE-2025-55471

Incorrect access control in the getUserFormData function of youlai-boot v2.21.1 allows attackers to access sensitive information for other users...

CVE-2025-65238

OpenCode Systems USSD Gateway OC is affected by CVE-2025-65238. The issue is an incorrect access control in the getSubUsersByProvider function, in OC Release 5 Version 6.13.11, which could allow attackers with low privileges to dump user records and access sensitive information. The available con...

CVE-2025-66063

Missing Authorization vulnerability in jgwhite33 WP Google Review Slider wp-google-places-review-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Google Review Slider: from n/a through = 17.4...

EUVD-2025-198447

Missing Authorization vulnerability in Scott Paterson Subscriptions & Memberships for PayPal subscriptions-memberships-for-paypal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Subscriptions & Memberships for PayPal: from n/a through = 1.1.7...

CVE-2025-66114

CVE-2025-66114 refers to a Missing Authorization / Broken Access Control in the WordPress plugin Show Variations as Single Products Woocommerce (plugin &lt;= 2.0). The vulnerability enables access control bypass for variations data; exploitation details, affected versions (