6193 matches found
GitLab Enterprise Edition（EE） 安全漏洞
GitLab Enterprise Edition EE is a content management system provided by the American company GitLab. Versions of GitLab EE prior to 15.5, 18.10.8, 18.11.5, and 19.0.2 contained security vulnerabilities. These vulnerabilities were caused by improper authorization in the Group SAML identity...
CVE-2026-47298
Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2026-42902
Improper authorization in Microsoft PowerToys allows an authorized attacker to elevate privileges locally...
CVE-2026-45490
A flaw was found in the .NET SDK dotnet.exe workload command on Windows. Insufficient access controls on a named pipe could allow a local attacker to perform arbitrary file creation or truncation operations with the privileges of another local user. This issue may lead to privilege escalation and...
Improper Authorization
fuxa-server is vulnerable to Improper Authorization. The vulnerability is due to missing or insufficient authorization checks on scheduled action management operations, which allows an authenticated non-admin attacker to create or modify actions that should be restricted to administrators...
The vulnerability of the AI agent OpenClaw (formerly known as ClawdBot or MoltBot) arises from an improper authorization process based on a list of permitted senders. This allows attackers to bypass existing security mechanisms.
The vulnerability of the AI agent OpenClaw formerly known as ClawdBot or MoltBot is related to an incorrect authorization process based on a list of permitted senders. Exploiting this vulnerability could allow a hacker to bypass existing security mechanisms...
QNAP Systems File Station 6 安全漏洞
QNAP Systems File Station 6 is a file management software developed by QNAP Systems, a company based in Taiwan, China. QNAP Systems File Station 6 has a security vulnerability that stems from improper authorization. This vulnerability could allow remote attackers to bypass intended access...
EUVD-2026-35505
Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
EUVD-2026-35674
Improper authorization in .NET allows an authorized attacker to elevate privileges locally...
EUVD-2026-35679
Improper authorization in Microsoft Exchange Server allows an authorized attacker to disclose information over a network...
EUVD-2026-35659
Improper authorization in Microsoft PowerToys allows an authorized attacker to elevate privileges locally...
CVE-2026-47298
Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2026-45490
Improper authorization in .NET allows an authorized attacker to elevate privileges locally...
CVE-2026-45490
Improper authorization in .NET allows an authorized attacker to elevate privileges locally...
CVE-2026-42902
Improper authorization in Microsoft PowerToys allows an authorized attacker to elevate privileges locally...
CVE-2026-42902
Improper authorization in Microsoft PowerToys allows an authorized attacker to elevate privileges locally...
UBUNTU-CVE-2026-45490
Improper authorization in .NET allows an authorized attacker to elevate privileges locally...
CVE-2026-47298
CVE-2026-47298 constrains Microsoft Office SharePoint, where improper authorization allows an attacker with network access to execute code on vulnerable systems. The vulnerability is described as a remote code execution issue with a high impact on confidentiality, integrity, and availability (CVE...
