61808 matches found
CVE-2025-0274 HCL BigFix Modern Client Management (MCM) 3.3 and earlier is affected by improper access control
HCL BigFix Modern Client Management MCM 3.3 and earlier is affected by improper access control. Unauthorized users can access a small subset of endpoint actions, potentially allowing access to select internal functions...
HCL BigFix Mobile 安全漏洞
HCL BigFix Mobile is a Mobile Device Management MDM solution offered by HCL India. It is designed to help businesses and organizations effectively manage and secure mobile devices, including smartphones, tablets and other mobile devices. A security vulnerability exists in HCL BigFix Mobile 3.3 an...
PT-2025-42463
Name of the Vulnerable Software and Affected Versions WSO2 products affected versions not specified Description An improper access control issue exists in multiple WSO2 products due to insufficient permission enforcement in internal SOAP Admin Services and System REST APIs. This allows a...
CVE-2025-25004
Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally...
CVE-2025-59199
Improper access control in Software Protection Platform SPP allows an authorized attacker to elevate privileges locally...
CVE-2025-59494
Improper access control in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...
CVE-2025-55694
Improper access control in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
Information Disclosure
Apache Airflow is vulnerable to Information Disclosure. The vulnerability is due to improper access control in handling sensitive connection fields, allowing users with read permissions to view sensitive data through the API and UI...
Improper Access Control
vite is vulnerable to improper access control. The vulnerability is due to files starting with the same name as those in the public directory being served while bypassing the server.fs settings, which allows an attacker to access restricted files when the Vite dev server is exposed to the network...
Improper Access Control
Vite is vulnerable to Improper Access Control. The vulnerability is due to the dev and preview servers serving any HTML files on the machine regardless of the server.fs settings, which allows an attacker to access unintended files when the Vite server is exposed to the network, potentially leadin...
EUVD-2025-34357
Improper access control in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...
EUVD-2025-34394
Improper access control in Software Protection Platform SPP allows an authorized attacker to elevate privileges locally...
EUVD-2025-34318
Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally...
EUVD-2025-34321
Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...
EUVD-2025-34316
Improper access control in Windows SMB Server allows an authorized attacker to elevate privileges over a network...
EUVD-2025-34347
Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally...
EUVD-2025-34431
Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally...
CVE-2025-59253
Improper access control in Microsoft Windows Search Component allows an authorized attacker to deny service locally...
