Flowise Access Control Error Vulnerability

Flowise is a FlowiseAI open source tool for easily building LLM applications. An Access Control Error vulnerability exists in Flowise 3.0.5 and prior versions, which stems from the forgot-password endpoint returning a password reset token without authentication, and can be exploited by an attacke...

Cisco IOS XR Access Control Error Vulnerability (CNVD-2025-21251)

Cisco IOS XR is a set of operating systems developed by the American company Cisco Cisco for its network equipment. Cisco IOS XR suffers from an Access Control Error vulnerability that stems from improper access control of the management interface ACL, which can be exploited by an attacker to cau...

Wavlink WL-WN578W2 访问控制错误漏洞

The Wavlink WL-WN578W2 is a wireless repeater from China's Wavlink. An access control error vulnerability exists in the Wavlink WL-WN578W2 version 221110, which originates from an incorrect access control in the file /liveonline.shtml, which can be exploited by an attacker to cause information...

NewType Infortech NUP Portal 访问控制错误漏洞

NewType Infortech NUP Portal is a portal management and collaborative office software system from NewType Infortech Taiwan, China. An access control error vulnerability exists in NewType Infortech NUP Portal, which stems from a lack of authentication and could allow an unauthenticated remote...

Cisco IOS XR 访问控制错误漏洞

Cisco IOS XR is a set of operating systems developed by the American company Cisco Cisco for its network equipment. Cisco IOS XR suffers from an Access Control Error vulnerability that stems from improper access control of the management interface ACL, which can be exploited by an attacker to cau...

Microsoft Azure 访问控制错误漏洞

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Azure. An attacker can exploit the vulnerability to elevate privileges...

Calix GigaCenter ONT Series 访问控制错误漏洞

The Calix GigaCenter ONT Series is a series of optical network terminals from Calix USA. An access control error vulnerability exists in the Calix GigaCenter ONT Series that originates from unauthenticated Telnet access and could result in gaining root privileges...

i-Educar 访问控制错误漏洞

i-Educar is a free educational software from Portábilis Open Source. An access control error vulnerability exists in i-Educar version 2.10 and earlier, which stems from improper access control in the file /cancelar-enturmacao-em-lote/...

Portábilis i-Educar 访问控制错误漏洞

Portábilis i-Educar is an application from Portábilis. It can easily help you with basic and technical education. An access control error vulnerability exists in Portábilis i-Educar version 2.10 and earlier, which stems from improper access control in the file /matricula/IDSTUDENT/enturmar/...

i-Educar 访问控制错误漏洞

i-Educar is a free educational software from Portábilis Open Source. An access control error vulnerability exists in i-Educar version 2.10 and earlier, which stems from improper access control in the file /enturmacao-em-lote/...

FOG 访问控制错误漏洞

FOG is an open source computer cloning and management system open-sourced by the FOG Project. An access control error vulnerability exists in FOG 1.5.10.1673 and prior versions, which stems from an authentication bypass that could allow an attacker to unauthenticatedly dump a full SQL database...

Microsoft Azure Networking 访问控制错误漏洞

Microsoft Azure Networking is a collection of network-related service features from Microsoft Corporation in the United States. An access control error vulnerability exists in Microsoft Azure Networking that stems from a potential elevation of privilege...

Microsoft Dynamics 365 FastTrack Implementation 访问控制错误漏洞

Microsoft Dynamics 365 FastTrack Implementation is a program software from Microsoft Corporation USA that helps in the successful implementation of large and complex Dynamics 365 projects. An access control error vulnerability exists in Microsoft Dynamics 365 FastTrack Implementation that stems...

Das Parking Management System 访问控制错误漏洞

Das Parking Management System is a parking management system from China-based Das Associates Das. An access control error vulnerability exists in Das Parking Management System version 6.2.0, which originates from an incorrect operation of File/Operator/FindAll that results in information disclosu...

Das Parking Management System 访问控制错误漏洞

Das Parking Management System is a parking management system from China-based Das Associates Das. An access control error vulnerability exists in Das Parking Management System version 6.2.0, which originates from an incorrect operation of File/Operator/Search that results in information disclosur...

Mitsubishi Electric MELSEC iQ-F Series CPU 访问控制错误漏洞

The Mitsubishi Electric MELSEC iQ-F Series CPUs are a series of CPU modules from Mitsubishi Electric Corporation Mitsubishi Electric, Japan. An access control error vulnerability exists in the Mitsubishi Electric MELSEC iQ-F Series CPUs, which stems from a lack of authentication of a critical...

Changing TSA 访问控制错误漏洞

Changing TSA is a timestamp server from Panorama Changing Corporation in Taiwan, China. Changing TSA suffers from an Access Control Error vulnerability that stems from a lack of authentication, which could allow an unauthenticated, remote attacker to read, modify, and delete database contents...

CGM CLININET Access Control Error Vulnerability (CNVD-2025-19813)

CGM CLININET is a hospital information management system from CGM Germany. CGM CLININET suffers from an Access Control Error vulnerability that originates from improper access control in the serverConfig endpoint, which can be exploited by an attacker to gain unauthorized access to sensitive...

CGM CLININET Access Control Error Vulnerability (CNVD-2025-19807)

CGM CLININET is a hospital information management system from CGM Germany. CGM CLININET suffers from an access control error vulnerability that originates from improper access control in /cgi-bin/CliniNET.prd/GetActiveSessions.pl, which can be exploited by an attacker to gain unauthorized access ...

CGM CLININET Access Control Error Vulnerability (CNVD-2025-19816)

CGM CLININET is a hospital information management system from CGM Germany. CGM CLININET suffers from an Access Control Error vulnerability that originates from improper access control in /cgi-bin/CliniNET.prd/utils/userlogxls.pl, which can be exploited by an attacker to gain unauthorized access t...