EUVD-2026-44906

HCL DFXServer is affected by a Missing Access Control vulnerability. This vulnerability states that certain endpoints are accessible without any form of authentication in another browser. This allows any network user to invoke these APIs and interact with the application without verification of...

CVE-2026-49190: Improper Neutralization of Special Elements used in an OS Command

The system fails to evaluate instructional permissions over multiple internal operation codes opcodes, permitting unauthorized application installations or command executions...

NVIDIA KAI Scheduler 访问控制错误漏洞

NVIDIA KAI Scheduler is an AI-based computing task scheduling system developed by NVIDIA Corporation. NVIDIA KAI Scheduler has a vulnerability related to access control, which stems from unauthorized access to API endpoints, potentially leading to information leakage...

CVE-2026-40196 HomeBox has Unauthorized API Access via Retained defaultGroup ID After Group Access Revocation

HomeBox is a home inventory and organization system. Versions prior to 0.25.0 contain a vulnerability where the defaultGroup ID remained permanently assigned to a user after being invited to a group, even after their access to that group was revoked. While the web interface correctly enforced the...

EUVD-2022-39152

Malicious code in bioql PyPI...

CVE-2025-22442: Concurrent Execution using Shared Resource with Improper Synchronization

In multiple functions of DevicePolicyManagerService.java, there is a possible way to install unauthorized applications into a newly created work profile due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is no...

CVE-2025-54943: Missing Authorization

A missing authorization vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to perform unauthorized application deployment due to the absence of proper access control checks...

CVE-2022-36442

An issue was discovered in Zebra Enterprise Home Screen 4.1.19. By using the embedded Google Chrome application, it is possible to install an unauthorized application via a downloaded APK...

ASB-A-382064697

Bulletin has no description...

Vulnerabilities fixed in GitLab CE/EE

GitLab has fixed vulnerabilities in GitLab CE/EE Specifically for versions 16.0 to 17.5.2. The vulnerabilities are in multiple versions of GitLab CE/EE and allow malicious actors to gain unauthorized full API access via the Device OAuth flow. This can lead to serious implications for organization...

Leap Apps Group Blue Light Filter 安全漏洞

Leap Apps Group Blue Light Filter is a blue light filter application from Leap Apps Group, Inc. A security vulnerability exists in Leap Apps Group Blue Light Filter version v.1.5.5 that originates from an unauthorized application that causes privilege escalation through manipulation of the...

Facemoji Emoji Keyboard 安全漏洞

Facemoji Emoji Keyboard is a free AI smart chatgbt Cool custom keyboard font from Facemoji. A security vulnerability exists in Facemoji Emoji Keyboard version v.2.9.1.2, which originates from an unauthorized application that causes privilege escalation by manipulating certain components...

Glitter Unicorn Wallpaper 安全漏洞

Glitter unicorn wallpaper is a wallpaper application. A security vulnerability exists in Glitter Unicorn Wallpaper versions 7.0 through 8.0, which stems from a vulnerability that allows an unauthorized application to actively request permissions to insert data into a database, which could allow a...

CVE-2022-36442

An issue was discovered in Zebra Enterprise Home Screen 4.1.19. By using the embedded Google Chrome application, it is possible to install an unauthorized application via a downloaded APK...

Code injection

An issue was discovered in Zebra Enterprise Home Screen 4.1.19. By using the embedded Google Chrome application, it is possible to install an unauthorized application via a downloaded APK...

CVE-2022-36442

An issue was discovered in Zebra Enterprise Home Screen 4.1.19. By using the embedded Google Chrome application, it is possible to install an unauthorized application via a downloaded APK...

CVE-2022-36442

CVE-2022-36442 affects Zebra Enterprise Home Screen 4.1.19. The issue arises from the embedded Google Chrome component, enabling installation of unauthorized applications via a downloaded APK. Root cause: abuse of the embedded Chrome within the Zebra app to install software without authorization....

CVE-2022-36442: Improper Access Control

An issue was discovered in Zebra Enterprise Home Screen 4.1.19. By using the embedded Google Chrome application, it is possible to install an unauthorized application via a downloaded APK...

CVE-2022-36442

An issue was discovered in Zebra Enterprise Home Screen 4.1.19. By using the embedded Google Chrome application, it is possible to install an unauthorized application via a downloaded APK...

Samsung Wear Os Access Control Error Vulnerability

Samsung Wear Os is a version of the Android operating system from Samsung South Korea, designed for wearable computer devices such as smartwatches. Designed for wearable computer devices such as smartwatches, an access control error vulnerability exists in StRetailModeReceiver in Samsung Wear Os ...