717264 matches found
HeyCyan permission and access control issues vulnerability
The HeyCyan 1.0.103 version contains a vulnerability related to permission and access control issues. This flaw stems from improper access control in the FileProvider component, potentially allowing remote attackers to gain unauthorized access...
Apple iOS security vulnerabilities
Security vulnerabilities exist in Apple iOS versions prior to 26.7 and 27.2, Apple iPadOS versions prior to 26.7 and 27.2, Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, Apple macOS Tahoe versions prior to 26.7.2, Apple tvOS versions prior to 27.2, a...
Apple iOS security vulnerabilities
A security vulnerability exists in Apple iOS versions prior to 27.2 and Apple iPadOS versions prior to 27.2. This vulnerability stems from an authorization issue and may allow remote attackers to access sensitive user data...
DataTransfer Component Protected Information Access
The vulnerability in the DataTransfer component of Google Chrome and Microsoft Edge web browsers is related to improper authorization. Exploiting this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...
Apple iOS security vulnerabilities
A security vulnerability exists in Apple iOS versions prior to 27.2, Apple iPadOS versions prior to 27.2, Apple macOS Golden Gate versions prior to 27.2, and Apple visionOS versions prior to 27.2. This vulnerability stems from authorization issues and improper state management, potentially allowi...
DataTransfer Component Protected Information Access
The vulnerability in the DataTransfer component of Google Chrome and Microsoft Edge web browsers is related to insufficient validation of the state of shared resources. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted...
DataTransfer Component Protected Information Access
The vulnerability in the DataTransfer component of Google Chrome and Microsoft Edge web browsers is related to a flaw in the source verification mechanism. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...
PT-2026-123152
A security vulnerability has been detected in HeyCyan App 1.0.103 on Android. Affected by this vulnerability is an unknown functionality of the component FileProvider. The manipulation leads to improper access controls. The attack may be initiated remotely. The vendor was contacted early about th...
PT-2026-123164
Electronic delivery item Inspection Support System provided by Japan's Ministry of Land, Infrastructure, Transport and Tourism contains an improper file access permission vulnerability. Files in the installation folder of the application may be tampered with, resulting in arbitrary code execution...
PT-2026-123241
Missing Authorization vulnerability in WP Discussion Board WP Discussion Board wp-discussion-board allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Discussion Board: from n/a through 2.6.0...
PT-2026-123200
Missing Authorization vulnerability in VillaTheme DEPART depart-deposit-and-part-payment-for-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DEPART: from n/a through 1.0.10...
PT-2026-123284
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Innotim Software, Telecommunications, and Consulting Co. Ltd. Logsign SIEM allows Path Traversal. This issue affects Logsign SIEM: from 6.4.120 before 6.4.122...
PT-2026-123279
Name of the Vulnerable Software and Affected Versions Mendix SAML Mendix 10 compatible versions prior to 4.2.4 Mendix SAML Mendix 11 compatible versions prior to 4.2.4 Mendix SAML Mendix 9 compatible versions prior to 3.6.29 Description The module fails to properly protect against SAML assertion...
PT-2026-123262
Missing Authorization vulnerability in Supsystic Contact Form by Supsystic contact-form-by-supsystic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form by Supsystic: from n/a through 1.10.7...
PT-2026-123248
Missing Authorization vulnerability in VillaTheme Bopo – WooCommerce Product Bundle Builder bopo-woo-product-bundle-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bopo – WooCommerce Product Bundle Builder: from n/a through 1.2.3...
PT-2026-123253
Missing Authorization vulnerability in Magepeople inc. Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking and Rental Manager: from n/a through 2.8.2...
PT-2026-123254
Missing Authorization vulnerability in WP Smart Widgets Better Post & Filter Widgets for Elementor better-post-filter-widgets-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Better Post & Filter Widgets for Elementor: from n/a through 1.9.1...
ROS-20261026-73-0006
The vulnerability in openssh is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...