The vulnerability of the FOQUZ platform, related to deficiencies in the authentication process, allows unauthorized users to gain access to protected information.

The vulnerability of the FOQUZ platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the FOQUZ platform, related to deficiencies in the authentication process, allows unauthorized users to gain access to protected information.

The vulnerability of the FOQUZ platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the iFlightDoc onboard documentation system, related to incorrect restrictions on the path name to the catalog, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the iFlightDoc onboard documentation system is related to an incorrect limitation on the name of the path to the catalog h. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the protected information...

The vulnerability of the FOQUZ platform, related to deficiencies in the authentication process, allows unauthorized users to gain access to protected information.

The vulnerability of the FOQUZ platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the FOQUZ platform, related to deficiencies in the authentication process, allows unauthorized users to gain access to protected information.

The vulnerability of the FOQUZ platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the FOQUZ platform, related to deficiencies in the authentication process, allows unauthorized users to gain access to protected information.

The vulnerability of the FOQUZ platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Enlogic SCADA system’s virtual controller “ENTEK”, related to the transmission of data in an open manner, allows a intruder to gain unauthorized access to protected information by intercepting network traffic.

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information by intercepting network traffic...

The vulnerability of the MmMapIoSpace() function in the ThrottleBlood.sys driver allows a hacker to escalate their privileges, execute arbitrary code, or cause a service failure.

The vulnerability of the MmMapIoSpace function in the ThrottleBlood.sys driver, as part of the ThrottleStop utility, is related to open IOCTLs with insufficient access control. Exploiting this vulnerability could allow an attacker to enhance their privileges, execute arbitrary code, or cause...

The vulnerability of the Directum RX ECM system, related to deficiencies in access control, allows a perpetrator to compromise data integrity.

The vulnerability of the Directum RX ECM system is related to deficiencies in access control. Exploiting this vulnerability could allow a remote attacker to compromise data integrity...

The vulnerability of the CrocoTime employee attendance system, related to deficiencies in the authorization process, allows a violator to gain unauthorized access to protected information.

The vulnerability of the CrocoTime employee time management system is related to deficiencies in the authorization process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2026-108865

The AmoyLab Unla software (versions through 0.10.0 ) contains an OAuth2 authentication bypass vulnerability. The flaw exists because the OAuth2 server fails to authenticate a resource owner, allowing unauthenticated attackers to register a client and request an authorization code via the /authori...

EUVD-2026-97016

AmoyLab Unla through 0.10.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain valid access tokens because the OAuth2 server never authenticates a resource owner. Attackers can register a client, request a code from /authorize, and exchange it at /toke...

CVE-2026-108747 Lightdash through 2.556.0 Authorization Bypass via Personal Access Token Deletion

Lightdash through 2.556.0 contains an authorization bypass vulnerability that allows authenticated organization members to delete other users' personal access tokens by supplying their UUID. Attackers can send DELETE requests to the personal-access-tokens route with a victim's token UUID, even...

CVE-2026-108747

Lightdash versions through 2.556.0 are vulnerable to an authorization bypass (CWE-639) that allows authenticated organization members to delete other users' personal access tokens . By sending a DELETE request to the personal-access-tokens route with a victim's token UUID, an attacker can revoke ...

EUVD-2026-96912

Lightdash through 2.556.0 contains an authorization bypass vulnerability that allows authenticated organization members to delete other users' personal access tokens by supplying their UUID. Attackers can send DELETE requests to the personal-access-tokens route with a victim's token UUID, even...

CVE-2026-108740

GoatCounter versions through 2.7.0 are vulnerable to a mass assignment privilege escalation flaw in the userPrefSave handler. This vulnerability allows authenticated users to modify protected account fields via form-encoded requests to the /user/pref endpoint. Specifically, an attacker with read-...

CVE-2026-108729 Corteza through 2024.9.10 Unauthenticated Attachment Access via Compose Attachment Endpoints

Corteza through 2024.9.10 contains an incorrect authorization vulnerability in compose attachment endpoints that allows unauthenticated attackers to download private attachments by setting the URL kind segment to page, icon, or namespace. Attackers who know a private record or module attachment i...

CVE-2026-108729

Versions of Corteza up to 2024.9.10 are vulnerable to an incorrect authorization flaw in the compose attachment endpoints . This vulnerability allows unauthenticated attackers to download private attachments by manipulating the URL kind segment to values such as page, icon, or namespace. If an at...

CVE-2026-108728

Flyte versions 2.0.1 through 2.0.51 are vulnerable to a cleartext secret exposure vulnerability within the embedded secret manager webhook . The root cause is that the webhook writes base64-encoded FILE-mounted secret values into the SECRETS environment variable . This allows users with Pod read ...

EUVD-2026-96894

Flyte 2.0.1 through 2.0.51 contains a cleartext secret storage vulnerability that allows users with Pod read access to obtain secrets by reading init container environment variables. The embedded secret manager webhook writes base64-encoded FILE-mounted secret values into the SECRETS environment...