8333 matches found
CVE-2026-2009
A flaw has been found in SourceCodester Gas Agency Management System 1.0. This issue affects some unknown processing of the file /gasmark/phpaction/createUser.php. Executing a manipulation can lead to improper access controls. It is possible to launch the attack remotely. The exploit has been...
EUVD-2026-5682
Access control settings for forum post custom fields are not applied to the JSON output type, leading to an ACL violation vector an information disclosure...
EUVD-2026-5691
A flaw has been found in SourceCodester Gas Agency Management System 1.0. This issue affects some unknown processing of the file /gasmark/phpaction/createUser.php. Executing a manipulation can lead to improper access controls. It is possible to launch the attack remotely. The exploit has been...
Tanium Server 7.6.2.x < 7.6.2.1327 / 7.6.4.x < 7.6.4.2160 / 7.7.3.x < 7.7.3.8231 Improper Access Controls (CVE-2025-15322)
The version of Tanium Server installed on the remote host is 7.6.2.x prior to 7.6.2.1327, 7.6.4.x prior to 7.6.4.2160, or 7.7.3.x prior to 7.7.3.8231. It is, therefore, affected by an improper access controls vulnerability as referenced in the TAN-2025-028 advisory. - Tanium addressed an improper...
Johnson Controls iSTAR Configuration Utility < 6.9.8 Stack-based Buffer Overflow
The version of Johnson Controls iSTAR Configuration Utility ICU installed on the remote Windows host is prior to 6.9.8. It is, therefore, affected by a stack-based buffer overflow vulnerability that could result in failure within the operating system of the machine hosting the ICU tool. Note that...
CVE-2026-1964
A vulnerability was determined in WeKan up to 8.20. This impacts an unknown function of the file models/boards.js of the component REST Endpoint. This manipulation causes improper access controls. Remote exploitation of the attack is possible. Upgrading to version 8.21 will fix this issue. Patch...
CVE-2026-1963 WeKan Attachment Storage attachments.js MoveStorageBleed access control
A vulnerability was found in WeKan up to 8.20. This affects an unknown function of the file models/attachments.js of the component Attachment Storage. The manipulation results in improper access controls. The attack may be launched remotely. Upgrading to version 8.21 mitigates this issue. The pat...
CVE-2026-1963
A vulnerability was found in WeKan up to 8.20. This affects an unknown function of the file models/attachments.js of the component Attachment Storage. The manipulation results in improper access controls. The attack may be launched remotely. Upgrading to version 8.21 mitigates this issue. The pat...
CVE-2026-1962 WeKan Attachment Migration attachmentMigration.js AttachmentMigrationBleed access control
A vulnerability has been found in WeKan up to 8.20. The impacted element is an unknown function of the file server/attachmentMigration.js of the component Attachment Migration. The manipulation leads to improper access controls. The attack may be initiated remotely. Upgrading to version 8.21 is...
CVE-2025-15342
Tanium addressed an improper access controls vulnerability in Reputation...
CVE-2025-15342
Tanium addressed an improper access controls vulnerability in Reputation...
CVE-2025-15327
Tanium addressed an improper access controls vulnerability in Deploy...
CVE-2025-15327
Tanium addressed an improper access controls vulnerability in Deploy...
CVE-2025-15326
Tanium addressed an improper access controls vulnerability in Patch...
CVE-2025-15326
Tanium addressed an improper access controls vulnerability in Patch...
CVE-2025-15289
Tanium addressed an improper access controls vulnerability in Interact...
CVE-2025-15289
Tanium addressed an improper access controls vulnerability in Interact...
CVE-2025-15327 Tanium addressed an improper access controls vulnerability in Deploy.
Tanium addressed an improper access controls vulnerability in Deploy...