VMware vCenter Server LDAP Broken Access Control

Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Services Controller PSC, does not correctly implement access controls. id: CVE-2020-3952 info: name: VMware vCenter Server LDAP Broken Access Control author: 0xAkoko severity: critic...

SimpleHelp <= 5.5.7 - Privilege Escalation

SimpleHelp remote support software v5.5.7 and before contains a privilege escalation caused by insufficient access controls in API key creation, letting low-privileges technicians escalate privileges to server admin, exploit requires low-privileges technician access. id: CVE-2024-57726 info: name...

CVE-2026-87681

An Access Control Bypass vulnerability exists in the Role-Based Access Control RBAC validation engine of Brocade Fabric OS versions before 10.0.1. When processing certain management protocol operations, the RBAC engine incorrectly categorizes non-standard action opcodes during permission checks...

EUVD-2026-94655

An Access Control Bypass vulnerability exists in the Role-Based Access Control RBAC validation engine of Brocade Fabric OS versions before 10.0.1. When processing certain management protocol operations, the RBAC engine incorrectly categorizes non-standard action opcodes during permission checks...

CVE-2026-87681

An Access Control Bypass vulnerability exists in the Role-Based Access Control (RBAC) validation engine of Brocade Fabric OS versions before 10.0.1 . The flaw occurs because the RBAC engine incorrectly categorizes non-standard action opcodes during permission checks while processing specific mana...

CVE-2026-87681

An Access Control Bypass vulnerability exists in the Role-Based Access Control RBAC validation engine of Brocade Fabric OS versions before 10.0.1. When processing certain management protocol operations, the RBAC engine incorrectly categorizes non-standard action opcodes during permission checks...

CVE-2026-87681

An Access Control Bypass vulnerability exists in the Role-Based Access Control RBAC validation engine of Brocade Fabric OS versions before 10.0.1. When processing certain management protocol operations, the RBAC engine incorrectly categorizes non-standard action opcodes during permission checks...

CLEANSTART-2026-UG48995 undici's cache interceptor mishandles optional whitespace placed around the equals sign of a qualified no-cache or private Cache-Control directive

CVE-2026-14643 affects multiple packages. undici's cache interceptor mishandles optional whitespace placed around the equals sign of a qualified no-cache or private Cache-Control directive. See references for individual vulnerability details...

CLEANSTART-2026-CD82080 undici's cache interceptor mishandles malformed Cache-Control private directives

Security vulnerability affects the langfuse-worker package. undici's cache interceptor mishandles malformed Cache-Control private directives...

PT-2026-107909

Name of the Vulnerable Software and Affected Versions AKINSOFT WOLVOX Control Panel versions 26.02.25 through 26.02.25 Description An issue exists where sensitive information is inserted into sent data, allowing the pulling of data from system resources. Recommendations Update AKINSOFT WOLVOX...

VulnCheck KEV: CVE-2015-3306

ProFTPD contains an improper access control vulnerability that could allow remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands...

PT-2026-107801

A race condition and thread-safety vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. When handling user authentication requests across a multi-threaded execution pool, this race condition causes PAM modules to process stale or incorrect client IP...

EulerOS 2.0 SP15 : unbound (EulerOS-SA-2026-4021)

According to the versions of the unbound packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, the 'viewlocaldata' and 'viewlocaldatas' commands of 'unbound-control' create a bare loca...

PT-2026-107726

An Access Control Bypass vulnerability exists in the Role-Based Access Control RBAC validation engine of Brocade Fabric OS versions before 10.0.1. When processing certain management protocol operations, the RBAC engine incorrectly categorizes non-standard action opcodes during permission checks...

PT-2026-108181

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2.2 Description Sensitive credential material is exposed during the rotation processing of SECRET and API KEY. The edge-controller and edge-manager components log this information at the INFO level. An...

PT-2026-107852

A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0. The HTTPS service fails to properly enforce authentication or access control checks on incoming requests. An unauthenticated attacker with network access can issue control commands, alter cluster states,...

PT-2026-107929

Name of the Vulnerable Software and Affected Versions Visual Composer Website Builder versions prior to 45.16.3 Description An issue exists in the Visual Composer Website Builder where missing authorization allows the exploitation of incorrectly configured access control security levels...

PT-2026-107777

An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabric OS versions before 10.0.1. The web dispatcher routine evaluates internal management VLAN trust decisions using the client-supplied HTTP host header instead of the actual socke...

EulerOS 2.0 SP15 : unbound (EulerOS-SA-2026-3955)

According to the versions of the unbound packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, the 'viewlocaldata' and 'viewlocaldatas' commands of 'unbound-control' create a bare loca...

PT-2026-108312

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The HTTP/2 server incorrectly refunds connection-level flow control twice for the same data. This occurs when a client resets a stream, refunding data for the...