Lucene search
+L

2292 matches found

CNNVD
CNNVD
•added 2026/03/21 12:00 a.m.•24 views

OpenClaw 访问控制错误漏洞

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw suffers from an Access Control Error vulnerability that stems from the BlueBubbles webhook handler containing a passwordless fallback authentication path, which can be exploited by an attacker to cause an...

6.5CVSS5.9AI score0.0043EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/03/19 12:00 a.m.•25 views

OpenClaw 访问控制错误漏洞

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw suffers from an Access Control Error vulnerability that is caused by a failure to properly handle authentication boot errors during startup. An attacker can exploit the vulnerability to cause a local process or...

7.8CVSS5.9AI score0.00167EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/03/18 12:00 a.m.•24 views

OpenClaw 访问控制错误漏洞

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw suffers from an Access Control Error vulnerability that can be exploited by an attacker to cause a local process to capture a gateway authentication token...

6.8CVSS6.7AI score0.00126EPSS
SaveExploits0References3
CNVD
CNVD
•added 2026/03/17 12:00 a.m.•21 views

Dell Alienware Command Center Access Control Error Vulnerability

Dell Alienware Command Center is a package manager from Dell USA. An access control error vulnerability exists in Dell Alienware Command Center versions prior to 6.12.24.0. The vulnerability stems from improper access control and can be exploited by an attacker to cause a denial of service...

5.5CVSS5.4AI score0.00078EPSS
SaveExploits0
CNNVD
CNNVD
•added 2026/03/13 12:00 a.m.•26 views

OpenClaw 访问控制错误漏洞

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw suffers from an Access Control Error vulnerability that stems from a browser-initiated WebSocket connection that can bypass origin authentication under certain configurations, which can be exploited by an attacker ...

8.1CVSS5.8AI score0.00237EPSS
SaveExploits0References3
CNVD
CNVD
•added 2026/03/12 12:00 a.m.•45 views

OpenClaw Access Control Error Vulnerability (CNVD-2026-13595)

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw suffers from an Access Control Error vulnerability that stems from the gateway WebSocket connection handshake allowing device identity checks to be skipped when auth.token is present but not verified, which can be...

9.8CVSS5.8AI score0.00654EPSS
SaveExploits0References1
CNVD
CNVD
•added 2026/03/10 12:00 a.m.•34 views

NocoDB Access Control Error Vulnerability

NocoDB is nocodb open source an Airtable alternative . Convert any MySql, PostgreSql, Sql Server, Sqlite and MariaDb to a smart spreadsheet . An access control error vulnerability exists in versions prior to NocoDB 0.301.3. The vulnerability stems from the password reset process not undoing an...

7.1CVSS5.9AI score0.00323EPSS
SaveExploits0References1
CNVD
CNVD
•added 2026/03/09 12:00 a.m.•27 views

Microsoft Payment Orchestrator Service Access Control Error Vulnerability

Microsoft Payment Orchestrator Service is a Microsoft feature that provides cloud-native payment process automation and orchestration for the financial services industry. An Access Control Error vulnerability exists in Microsoft Payment Orchestrator Service, which stems from improper authenticati...

9.8CVSS5.9AI score0.01126EPSS
SaveExploits0References1
CNVD
CNVD
•added 2026/03/09 12:00 a.m.•39 views

Discourse Access Control Error Vulnerability (CNVD-2026-17484)

Discourse is Discourse open source set of open source community discussion platform. The platform includes features such as community , e-mail and chat rooms . Discourse suffers from an Access Control Error vulnerability that stems from a Chat::AddUsersToChannel add member that bypasses private...

5.3CVSS5.8AI score0.00268EPSS
SaveExploits0
CNVD
CNVD
•added 2026/03/09 12:00 a.m.•39 views

Discourse Access Control Error Vulnerability (CNVD-2026-17485)

Discourse is Discourse open source set of open source community discussion platform. The platform includes features such as community , e-mail and chat rooms . Discourse suffers from an Access Control Error vulnerability that stems from an open Access Control Failure in the Data Explorer plugin,...

5.4CVSS5.9AI score0.00256EPSS
SaveExploits0
CNVD
CNVD
•added 2026/03/06 12:00 a.m.•29 views

Microsoft Azure Arc Access Control Error Vulnerability

Microsoft Azure Arc is a storage system from Microsoft USA. that extends the Azure platform into your environment. Microsoft Azure Arc has an Access Control Error vulnerability that can be exploited by an attacker to elevate privileges...

9.8CVSS5.8AI score0.0152EPSS
SaveExploits0References1
CNVD
CNVD
•added 2026/03/06 12:00 a.m.•29 views

Microsoft Azure Front Door Access Control Error Vulnerability

Microsoft Azure Front Door is a cloud-based content delivery network from Microsoft Corporation in the United States. An access control error vulnerability exists in Microsoft Azure Front Door, which can be exploited by an attacker to elevate privileges...

9.8CVSS5.9AI score0.01247EPSS
SaveExploits0References1
CNVD
CNVD
•added 2026/03/06 12:00 a.m.•25 views

IBM Cloud Pak System Access Control Error Vulnerability

IBM Cloud Pak System is a full-stack, converged infrastructure with configurable, pre-integrated software from International Business Machines IBM. The product supports deploying, managing and moving application environments across hybrid clouds. An access control error vulnerability exists in IB...

4.3CVSS5.8AI score0.0022EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/03/05 12:00 a.m.•20 views

Microsoft Payment Orchestrator Service 访问控制错误漏洞

Microsoft Payment Orchestrator Service is a Microsoft feature that provides cloud-native payment process automation and orchestration for the financial services industry. An Access Control Error vulnerability exists in Microsoft Payment Orchestrator Service, which stems from improper authenticati...

9.8CVSS5.9AI score0.01126EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/03/05 12:00 a.m.•28 views

OpenClaw 访问控制错误漏洞

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw suffers from an Access Control Error vulnerability that stems from the fact that Browser Relay's /cdp WebSocket endpoint does not require an authentication token, which can be exploited by an attacker to connect in...

8.1CVSS5.9AI score0.00454EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/03/05 12:00 a.m.•21 views

OpenClaw 访问控制错误漏洞

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw suffers from an Access Control Error vulnerability that stems from the gateway WebSocket connection handshake allowing device identity checks to be skipped when auth.token is present but not verified, which can be...

9.8CVSS5.8AI score0.00654EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/03/05 12:00 a.m.•28 views

OpenClaw 访问控制错误漏洞

OpenClaw is openclaw open source an intelligent artificial assistant. OpenClaw suffers from an Access Control Error vulnerability that stems from the BlueBubbles Webhook handler authenticating based only on the loopback remoteAddress, which can be exploited by an attacker to cause bypass of the...

8.2CVSS6AI score0.00627EPSS
SaveExploits0References4
CNVD
CNVD
•added 2026/03/04 12:00 a.m.•26 views

Microsoft Teams Access Control Error Vulnerability

Microsoft Teams is an American Microsoft Microsoft software for online meetings, chat, and cloud storage capabilities. Microsoft Teams suffers from an Access Control Error vulnerability that stems from improper access control and can be exploited by an attacker to cause an unauthorized attacker t...

9.8CVSS6.6AI score0.01177EPSS
SaveExploits1References1
CNVD
CNVD
•added 2026/03/02 12:00 a.m.•26 views

Microsoft Hyper-V Access Control Error Vulnerability

Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. An access control error vulnerability exists in Microsoft Hyper-V. The vulnerability stems from a flaw in the access control mechanism and can be...

8.8CVSS7.6AI score0.0038EPSS
SaveExploits0References1
CNVD
CNVD
•added 2026/03/02 12:00 a.m.•35 views

OpenClaw Access Control Error Vulnerability (CNVD-2026-13392)

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw suffers from an Access Control Error vulnerability that can be exploited by an attacker to cause session content disclosure in a multi-user environment...

6.9CVSS5.8AI score0.00115EPSS
SaveExploits0References1
Rows per page
Query Builder