2292 matches found
The vulnerability of the ImageIO component in the Oracle Java SE software platform, as well as in Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, allows attackers to gain unauthorized access to protected information.
The vulnerability of the ImageIO component in the Oracle Java SE software platform, as well as in Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, is related to access control errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to...
The vulnerability of the JSE component of the Oracle Java SE software platform, as well as the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, allows attackers to trigger a service failure.
The vulnerability of the JSE component of Oracle Java SE software, as well as of the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, is related to access control errors. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
The vulnerability of the Libraries component of the Oracle Java SE software platform, as well as the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, allows attackers to trigger a service failure.
The vulnerability of the Libraries component of the Oracle Java SE software platform, as well as the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, is related to access control errors. Exploiting this vulnerability can allow an attacker to cause service interruptio...
The vulnerability of the JSE component of Oracle Java SE software, as well as of the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, allows attackers to gain unauthorized access to protected information.
The vulnerability of the JSE component of Oracle Java SE software, as well as of the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, is related to access control errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized...
The vulnerability of the 2D software platform Oracle Java SE, as well as the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, allows a attacker to trigger a service failure.
The vulnerability of the Oracle Java SE 2D software platform, as well as the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, is related to access control errors. Exploiting this vulnerability can allow an attacker to cause service interruptions...
The vulnerability of the Security component of Oracle Java SE software, as well as of the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, allows attackers to gain unauthorized access to protected information.
The vulnerability of the Security component of the Oracle Java SE software platform, as well as of the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, is related to access control errors. Exploiting this vulnerability can allow an attacker operating remotely to gain...
The vulnerabilities of the components of the Oracle Java SE software platform, as well as the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, allow attackers to gain unauthorized access to protected information.
The vulnerability of the components of the Oracle Java SE software platform, as well as the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, is related to access control errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to...
The vulnerability of the BI Platform Security component of the Oracle BI Publisher software allows a hacker to gain full control over the application.
The vulnerability of the BI Platform Security component of the Oracle BI Publisher software for creating reports is related to access control errors. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full control over the application using the HTTP protocol...
The vulnerability of Microsoft Configuration Manager software for managing IT infrastructure, related to access control errors, allows attackers to escalate their privileges.
The vulnerability of Microsoft Configuration Manager software for managing IT infrastructure is related to access control errors. Exploiting this vulnerability can allow attackers to enhance their privileges...
CVE-2026-52466
Open Library Foundation VuFind versions v11.0.3 and v4.1 are vulnerable to Incorrect Access Control . The vulnerability exists in the VuFind echt Controller AbstractBase::validateAccessPermission method, where the application fails to terminate processing after identifying that controller-level p...
The vulnerability of the mechanism for checking OAuth2 scopes in the Gitea repository management system allows a hacker to increase their privileges.
The vulnerability of the mechanism for checking the scopes of OAuth2 tokens in the Gitea Git repository management system is related to access control errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
Open WebUI: Forged chat-file link allows cross-user file read and deletion
SummaryOpen WebUI v0.9.5 lets an authenticated user attach arbitrary fileid values to their own chat message without checking whether they own or can read those files. If the attacker then shares that chat and grants themselves read access, hasaccesstofile treats the victim file as accessible...
The vulnerability of the ADF Shared Components component in the Oracle Application Development Framework allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the ADF Shared Components component in the Oracle Application Development Framework is related to access control errors. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...
CVE-2026-50884
Incorrect access control in statping-ng v0.93.0 allows attackers to escalate privileges to Administrator and access sensitive components...
PT-2026-48994
An incorrect visibility condition in the MISP event template builder allowed authenticated non-site-admin users to view galaxies that should not have been visible to their organisation. The custom access-control condition intended to restrict galaxies to those owned by the user’s organisation or...
Apple macOS 访问控制错误漏洞
Apple macOS is a proprietary operating system developed by the American company Apple for Mac computers. Versions of Apple macOS Tahoe 26.1 and earlier contained an access control vulnerability caused by permission issues, which could allow applications to access protected user data...
Apple macOS 访问控制错误漏洞
Apple macOS is a proprietary operating system developed by the American company Apple for Mac computers. Versions of Apple macOS Tahoe 26.1 and earlier contained an access control error vulnerability. This vulnerability stemmed from an access issue that could allow malicious applications to acces...
SourceCodester Indian Invoicing System 访问控制错误漏洞
SourceCodester Indian Invoicing System is a SourceCodester open source Indian invoicing system. An Access Control Error vulnerability exists in SourceCodester Indian Invoicing System version 1.0, which stems from improper access control of the Backend Endpoint component...
PowerDNS Authoritative 访问控制错误漏洞
PowerDNS Authoritative is a DNS server software developed by PowerDNS Corporation. PowerDNS Authoritative has a vulnerability related to access control, which stems from incorrect behavior in the view of TCP PROXY requests...
