CVE-2026-82658

Admidio versions before 5.0.12 contain a broken access control vulnerability in profile_function.php . An authenticated low-privilege user can bypass profile-level authorization by directly calling the reload_future_memberships endpoint with a victim's user UUID, disclosing that user's future rol...

CVE-2026-30966

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.5.2-alpha.7 and 8.6.20, Parse Server's internal tables, which store Relation field mappings such as role memberships, can be directly accessed via the REST API or GraphQL API by any...

IBM Db2 Multiple Security Bypass Vulnerabilities (May 2011)

IBM Db2 is prone to multiple security bypass vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ibm:db2";...

IBM DB2 Multiple Security Bypass Vulnerabilities (May-11)

The host is running IBM DB2 and is prone to multiple security bypass vulnerabilities. OpenVAS Vulnerability Test $Id: gbibmdb2multsecbypassvuln.nasl 7585 2017-10-26 15:03:01Z cfischer $ IBM DB2 Multiple Security Bypass Vulnerabilities May-11 Authors: Antu Sanadi Copyright: Copyright c 2011...