10 matches found
EUVD-2026-49332
phpMyFAQ before 4.1.6 contains a privilege escalation vulnerability in GroupController::updateMembers that allows administrators with only group-management permissions to join privileged groups without verification of required rights. Attackers can add themselves to pre-existing groups holding...
CVE-2026-57995
phpMyFAQ
SAP Business One Access Verification Unauthorized Access
The vulnerability of the SAP Business One resource management system is related to the lack of a mechanism for verifying the source of information. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...
VideoGrace Insufficient Access Control
The vulnerability of VideoGrace video conferencing software is related to insufficient verification of access rights. Exploiting this vulnerability allows a malicious actor to create a user account on the server by sending a specially crafted POST request...
SUSE CVE-2013-2625
An Access Bypass issue exists in OTRS Help Desk before 3.2.4, 3.1.14, and 3.0.19, OTRS ITSM before 3.2.3, 3.1.8, and 3.0.7, and FAQ before 2.2.3, 2.1.4, and 2.0.8. Access rights by the object linking mechanism is not verified...
SINEMA Remote Connect Server Access Control Bypass
The vulnerability of the SINEMA Remote Connect server software is related to insufficient verification of access rights. Exploiting this vulnerability could allow a malicious actor to gain access to system resources through certain URL addresses, bypassing the authentication mechanism...
CVE-2017-1422
IBM MaaS360 DTM all versions up to 3.81 does not perform proper verification for user rights of certain applications which could disclose sensitive information. IBM X-Force ID: 127412...
CVE-2017-1422
IBM MaaS360 DTM all versions up to 3.81 does not perform proper verification for user rights of certain applications which could disclose sensitive information. IBM X-Force ID: 127412...
CVE-2017-1422: Exposure of Sensitive Information to an Unauthorized Actor
IBM MaaS360 DTM all versions up to 3.81 does not perform proper verification for user rights of certain applications which could disclose sensitive information. IBM X-Force ID: 127412...
