184900 matches found
CVE-2026-81279: Missing Authorization
Subscriber Broken Access Control in Push Notification for Post and BuddyPress = 3.20 versions...
CVE-2026-81274: Missing Authorization
Subscriber Broken Access Control in Ditty = 3.1.67 versions...
EUVD-2026-67257
Incorrect access control in /vfm-admin/ajax/sendfiles.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to send emails from the configured SMPT server on the application via making a POST request to the endpoint with needed parameters and header...
PT-2026-82469
Editor Broken Access Control in FluentPlayer Pro = 1.3.2 versions...
CVE-2026-37072: Improper Access Control
Veno File Manager Project Veno File Manager Project 4.4.9 is vulnerable to Incorrect Access Control in admin-head-updates.php...
PT-2026-82474
Subscriber Broken Access Control in Push Notification for Post and BuddyPress = 3.20 versions...
CVE-2026-77034: Improper Access Control
Joomla Extension - joomlaeventmanager.net - Unauthenticated article overwrite and force-publish in Joomla Event Manager 5.0.1 - Any visitor holding their own session token can republish and overwrite an article associated with an event...
PT-2026-82386
The Document Embedder WordPress plugin before 2.3.1 does not check a document's status before issuing a download token and streaming the file, allowing unauthenticated attackers to download arbitrary Document Embedder WordPress plugin before 2.3.1 documents, including private and draft ones, by...
CVE-2026-81573: Improper Access Control
If CodeMeter Runtime before 8.41a or 9.10 is configured as a server, the configuration command handler does not enforce network- origin restrictions. Commands intended only for local or same-network clients can therefore be executed by arbitrary remote peers. An attacker can read potentially...
CVE-2026-37073
Incorrect access control in /vfm-admin/ajax/sendfiles.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to send emails from the configured SMPT server on the application via making a POST request to the endpoint with needed parameters and header...
CVE-2026-37070
Incorrect access control in /vfm-admin/ajax/streamvid.php in Veno File Manager Project in 4.4.9 allows an authenticated attacker to read any uploaded files by other users as long as it knows the path and filename via a specially crafted GET request to the affected endpoint...
PT-2026-82471
Subscriber Broken Access Control in Ditty = 3.1.67 versions...
PT-2026-82626
Name of the Vulnerable Software and Affected Versions Flowintel version 3.3.0 Description An authorization flaw exists where the '/my assignment/user' API endpoint is accessible to any authenticated API user. The endpoint utilizes a user id parameter to identify the user whose assignments are...
CVE-2026-37072
The Veno File Manager Project version 4.4.9 is vulnerable to Incorrect Access Control in the admin-head-updates.php file. An unauthenticated attacker can exploit a Local File Inclusion (LFI) vulnerability via the lang GET parameter. By sending a specially crafted POST request with the correct fil...
The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform allows a perpetrator to gain access to add, delete, modify, and read data, as well as to cause service interruptions.
The vulnerability of the Imperative Web Server component of the Oracle libraries in the Oracle Fusion Middleware software suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data, as well as to...
The vulnerability of the Imperative Web Server component of the Oracle Helidon library in the Oracle Fusion Middleware software platform allows a perpetrator to gain access to add, delete, modify, and read data.
The vulnerability of the Imperative Web Server component of the Oracle libraries in the Oracle Fusion Middleware software suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data...
The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform allows a perpetrator to gain access to add, delete, modify, and read data, as well as to cause service interruptions.
The vulnerability of the Imperative Web Server component of the Oracle Helidon library in the Oracle Fusion Middleware software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data, as wel...
The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform allows a perpetrator to gain access to add, delete, modify, and read data, as well as to cause service interruptions.
The vulnerability of the Imperative Web Server component of the Oracle Helidon library in the Oracle Fusion Middleware software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data, as wel...
The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform allows a perpetrator to gain access to add, delete, modify, and read data, as well as to cause service interruptions.
The vulnerability of the Imperative Web Server component of the Oracle Helidon library in the Oracle Fusion Middleware software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data, as wel...
The vulnerability of the Imperative Web Server component of the Oracle Helidon library in the Oracle Fusion Middleware software platform allows a perpetrator to gain access to add, delete, modify, and read data.
The vulnerability of the Imperative Web Server component of the Oracle libraries in the Oracle Fusion Middleware software suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data...