Yamcs vulnerable to unauthorized user enumeration via IAM API endpoints

Summary The IAM API endpoints listUsers, getUser, listGroups, and getGroup in yamcs-core do not enforce the required SystemPrivilege.ControlAccess check. As a result, any authenticated user even those with low or no privileges can enumerate all user accounts in the system, including their...

EUVD-2026-30478

OneDev is a Git server with CI/CD, kanban, and packages. Prior to 15.0.2, there is behavior that breaks the expected boundary between repository-controlled LFS metadata and server-local filesystem paths. A repository object can steer raw blob reads to arbitrary local files that the server account...

EUVD-2026-10460

Due to missing authorization check in SAP S/4HANA HCM Portugal and SAP ERP HCM Portugal, a user with high privileges could access sensitive data belonging to another company. This vulnerability has a high impact on confidentiality and does not affect integrity and availability...

CVE-2022-37914

Vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote attacker to bypass authentication. Successful exploitation of these vulnerabilities could allow an attacker to gain administrative privileges leading to a...

CVE-2020-12307

Improper permissions in some IntelR High Definition Audio drivers before version 9.21.00.4561 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-31276

Heap-based buffer overflow in BMC Firmware for the IntelR Server Board S2600WF, IntelR Server Board S2600ST, IntelR Server Board S2600BP, before version 02.01.0017 and IntelR Server Board M50CYP and IntelR Server Board D50TNP before version R01.01.0009 may allow a privileged user to enable...

CVE-1999-0135

admintool in Solaris allows a local user to write to arbitrary files and gain root access...

EUVD-2020-4588

Malware in sbrugna...

EUVD-2015-0213

Malware in sbrugna...

EUVD-2006-6996

Malware in sbrugna...

EUVD-2019-8086

Malware in sbrugna...

EUVD-2004-1504

Malware in sbrugna...

EUVD-2019-2802

Malware in sbrugna...

EUVD-2018-1348

Malware in sbrugna...

EUVD-2018-9807

Malware in sbrugna...

EUVD-2011-2460

Malware in sbrugna...

EUVD-2014-2010

Malware in sbrugna...

EUVD-2009-2843

Malware in sbrugna...

EUVD-2015-4131

Malware in sbrugna...

EUVD-2001-0894

Malware in sbrugna...