Lucene search
+L

166023 matches found

EUVD
EUVD
added 2026/08/23 6:00 a.m.4 views

EUVD-2026-64639

Brave Popup Builder slug: brave-popup-builder has a broken access control issue in versions through 0.8.5. Any logged-in user - Subscriber or WooCommerce Customer is enough — can read popup content they shouldn't have access to by passing a post ID in the URL...

5.4AI score
SaveExploits0References1
CVE
CVE
added 2026/08/23 6:00 a.m.7 views

CVE-2026-77116

Brave Popup Builder (WordPress plugin, slug: brave-popup-builder) is affected by a broken access control vulnerability in versions through 0.8.5 . Any authenticated user with a low-privilege role (Subscriber or WooCommerce Customer) can read unpublished popup content by passing a post ID in the U...

5.4AI score
SaveExploits0References1
EUVD
EUVD
added 2026/08/23 6:00 a.m.5 views

EUVD-2026-64636

The WooCommerce Bookings WordPress plugin before 3.9.0 does not perform a capability check on one of its AJAX actions, and its nonce check can be bypassed by omitting the token, allowing users with Subscriber-level access and above to create draft bookable products...

5.4AI score
SaveExploits0References1
CVE
CVE
added 2026/08/23 6:00 a.m.7 views

CVE-2026-14853

The WooCommerce Bookings WordPress plugin before 3.9.0 is affected by an authorization flaw. A specific AJAX action lacks a capability check , and its nonce check can be bypassed by simply omitting the token. This allows any authenticated user with Subscriber-level access or above to create draft...

5.4AI score
SaveExploits0References1
EUVD
EUVD
added 2026/08/23 12:30 a.m.10 views

EUVD-2026-64603

docker-socket-proxy fails to properly gate read endpoints in the /containers Docker API namespace when the CONTAINERS environment variable is set. Attackers can use GET requests to /containers/id/archive, /containers/id/export, /containers/id/logs, and /containers/id/top to read arbitrary files a...

8.3CVSS5.6AI score
SaveExploits1References7
BDU FSTEC
BDU FSTEC
added 2026/08/22 11:45 p.m.12 views

The vulnerability affects the embedded energy-independent single-write eFUSE memory module in Realtek RTL8762C, a highly integrated wireless system on chip (SoC). This module allows a hacker to circumvent existing security restrictions and expose sensitive information.

The vulnerability of the embedded energy-independent single-write eFUSE memory in the highly integrated wireless system on chip SoC Realtek RTL8762C is related to the fact that power is turned on before the access control mechanism is activated. Exploiting this vulnerability can allow a hacker to...

7.6CVSS5.5AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2026/08/22 11:43 p.m.37 views

The vulnerability of the Directum RX ECM system, related to deficiencies in access control, allows a perpetrator to compromise data integrity.

The vulnerability of the Directum RX ECM system is related to deficiencies in access control. Exploiting this vulnerability could allow a remote attacker to compromise data integrity...

5CVSS5.8AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/08/22 11:43 p.m.29 views

The vulnerability of the MmMapIoSpace() function in the ThrottleBlood.sys driver allows a hacker to escalate their privileges, execute arbitrary code, or cause a service failure.

The vulnerability of the MmMapIoSpace function in the ThrottleBlood.sys driver, as part of the ThrottleStop utility, is related to open IOCTLs with insufficient access control. Exploiting this vulnerability could allow an attacker to enhance their privileges, execute arbitrary code, or cause...

7.5CVSS6AI score0.06835EPSS
SaveExploits9References3Affected Software1
CVE
CVE
added 2026/08/22 11:06 p.m.22 views

CVE-2026-78122

docker-socket-proxy (Tecnativa) through 0.5.0 has an insufficient access control granularity flaw in the /containers Docker API namespace. When the CONTAINERS environment variable is set, read endpoints (/containers/{id}/archive, /export, /logs, /top) are not properly gated, allowing an unauthent...

8.3CVSS5.6AI score
SaveExploits1References6
Cvelist
Cvelist
added 2026/08/22 3:31 p.m.9 views

CVE-2026-74595 fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy()

In the Linux kernel, the following vulnerability has been resolved: fscrypt: use the mount idmap for the owner check in fscryptioctlsetpolicy fscryptioctlsetpolicy calls inodeownerorcapable with &nopmntidmap before allowing an encryption policy to be set, instead of the idmap of the mount the ioc...

SaveExploits0References5
EUVD
EUVD
added 2026/08/22 3:31 p.m.6 views

EUVD-2026-64532

In the Linux kernel, the following vulnerability has been resolved: fscrypt: use the mount idmap for the owner check in fscryptioctlsetpolicy fscryptioctlsetpolicy calls inodeownerorcapable with &nopmntidmap before allowing an encryption policy to be set, instead of the idmap of the mount the ioc...

5.5AI score
SaveExploits0References5
EUVD
EUVD
added 2026/08/22 2:20 p.m.8 views

EUVD-2026-64322

Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik 4.7.2 - The onUpdateComment endpoint did not perform any access checks...

9.5CVSS5.2AI score
SaveExploits0References1
CVE
CVE
added 2026/08/22 2:20 p.m.19 views

CVE-2026-77992

Fabrik (a Joomla extension by fabrikar.com) versions prior to 4.7.2 are affected by a heredoc terminator breakout in the calc element . The root cause is that the onUpdateComment endpoint did not perform any access checks, allowing unauthenticated network-based attacks with low complexity and no ...

9.5CVSS5.2AI score
SaveExploits0References1
EUVD
EUVD
added 2026/08/22 2:15 p.m.6 views

EUVD-2026-64319

Joomla Extension - fabrikar.com - Missing ACL check in download element in Fabrik 4.7.3 - ???...

10CVSS5.1AI score
SaveExploits0References1
EUVD
EUVD
added 2026/08/22 2:15 p.m.6 views

EUVD-2026-64318

Joomla Extension - fabrikar.com - Unauthenticated modification of any comment in Fabrik 4.7.2 - The onUpdateComment endpoint did not perform any access checks...

6.9CVSS5.2AI score
SaveExploits0References1
CVE
CVE
added 2026/08/22 2:15 p.m.12 views

CVE-2026-76609

Fabrik is a Joomla extension that provides form and data management capabilities. In versions prior to 4.7.2 , the onUpdateComment endpoint lacked any access control checks, allowing an unauthenticated attacker over the network to modify any comment. The CVSS 4.0 base score is 6.9 (MEDIUM) , refl...

6.9CVSS5.2AI score
SaveExploits0References1
CVE
CVE
added 2026/08/22 12:26 p.m.11 views

CVE-2026-60083

SiYuan versions before v3.8.0 have an incomplete path blocklist in the MCP file tool that fails to restrict access to sensitive workspace files normally protected by the HTTP API. An authenticated administrator can read plaintext publish-mode passwords from data/.siyuan/publishAccess.json and acc...

6.9CVSS5.4AI score
SaveExploits0References2
Nuclei
Nuclei
added 2026/08/22 12:19 p.m.53 views

WAVLINK WN533A8 - Improper Access Control

WAVLINK WN533A8 M33A8.V5030.190716 is susceptible to improper access control. An attacker can obtain usernames and passwords via view-source:http://IPADDRESS/sysinit.shtml?r=52300 and searching for logincheckuser; and thereby possibly obtain sensitive information, modify data, and/or execute...

7.5CVSS7.6AI score0.20351EPSS
SaveExploits4References5
Nuclei
Nuclei
added 2026/08/22 12:19 p.m.84 views

Oracle Fusion Middleware WebCenter Sites 12.2.1.3.0 - Broken Access Control

Oracle Fusion Middleware WebCenter Sites 12.2.1.3.0 suffers from broken access control. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Sites accessible data. id: CVE-2019-2578 info: name: Oracle Fusion...

8.6CVSS7.9AI score0.72402EPSS
SaveExploits0References5
Nuclei
Nuclei
added 2026/08/22 12:19 p.m.90 views

Lin CMS Spring Boot - Default JWT Token

An access control issue in Lin CMS Spring Boot v0.2.1 allows attackers to access the backend information and functions within the application. id: CVE-2022-32430 info: name: Lin CMS Spring Boot - Default JWT Token author: DhiyaneshDK severity: high description: | An access control issue in Lin CM...

7.5CVSS7.4AI score0.04645EPSS
SaveExploits1References3
Rows per page
Query Builder