61870 matches found
CVE-2026-68448
In the Linux kernel, the following vulnerability has been resolved: ovl: check access to copyfilerange source with src mounter creds Commit 5dae222a5ff0c "vfs: allow copyfilerange to copy across devices" allowed filesystems that implement the copyfilerange fop to decide if they want to access...
CVE-2026-71848 vulnerabilities
Vulnerabilities for packages: langfuse...
CVE-2026-66804
Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-56727
Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally...
EUVD-2026-56595
Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-56509
Improper access control in the firmware for some in Alias Checking Trusted Module for some IntelR XeonR processors may allow an escalation of privilege. Startup code and SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may...
CVE-2026-20789
CVE-2026-20789 describes an improper access control vulnerability in Intel(R) PROSet/Wireless WiFi Software for Windows, specifically within Ring 2: Device Drivers. The issue could let an unprivileged, unauthenticated local attacker achieve local code execution with no user interaction, via a low...
EUVD-2026-56483
Improper access control for some IntelR PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via...
CVE-2026-20716
CVE-2026-20716 involves improper access control affecting some Intel processors in Ring 3 (user applications). The issue could allow an escalation of privilege via a local attack by a simple hardware adversary who has an authenticated user and can perform a high-complexity attack with no user int...
CVE-2026-20716
Improper access control for some IntelR Processors within Ring 3: User Applications may allow an escalation of privilege. Simple hardware adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local...
Dapr Dashboard 0.1.0-0.10.0 - Improper Access Control
Dapr Dashboard 0.1.0 through 0.10.0 is susceptible to improper access control. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2022-38817 info: name: Dapr Dashboard 0.1.0-0.10.0 - Improper Access Control author: For3stCo1d...
vCenter Server - Improper Access Control
Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to bypass proxy leading to internal endpoints being accessed. id: CVE-2021-22017 info: name:...
WAVLINK WN530HG4 - Improper Access Control
WAVLINK WN530HG4 M30HG4.V5030.191116 is susceptible to improper access control. It contains a hardcoded encryption/decryption key for its configuration files at /etcro/lighttpd/www/cgi-bin/ExportAllSettings.sh. An attacker can possibly obtain sensitive information, modify data, and/or execute...
WordPress WPQA <5.5 - Improper Access Control
WordPress WPQA plugin before 5.5 is susceptible to improper access control. The plugin lacks authentication in a REST API endpoint. An attacker can potentially discover private questions sent between users on the site. id: CVE-2022-1598 info: name: WordPress WPQA 5.5 - Improper Access Control...
WAVLINK WN535 G3 - Improper Access Control
WAVLINK WN535 G3 M35G3R.V5030.180927 is susceptible to improper access control. A vulnerability in /cgi-bin/ExportAllSettings.sh allows an attacker to execute arbitrary code via a crafted POST request and thereby possibly obtain sensitive information, modify data, and/or execute unauthorized...
CVE-2026-21084
Improper access control in SmartThings prior to version 1.8.47.24 allows local attackers to access sensitive information...
CVE-2026-21064
Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers to cause device inoperability...
EUVD-2026-55109
Improper access control in SmartThings prior to version 1.8.47.24 allows local attackers to access sensitive information...
CVE-2026-21084
CVE-2026-21084 affects Samsung SmartThings prior to version 1.8.47.24, with improper access control that allows local attackers to access sensitive information. The description and connected records confirm a local attack vector with low privileges required and no user interaction, resulting in c...