CVE-2026-87025

Tanium Comply is affected by an improper access controls vulnerability, assigned CVE-2026-87025 . The flaw allows a network-based attacker with low privileges and no user interaction to achieve low integrity and low availability impact, but no confidentiality impact (CVSS 3.1 base score 5.4, MEDI...

EUVD-2026-74550

Tanium addressed an improper access controls vulnerability in Comply...

CVE-2026-87075 Tanium addressed an improper access controls vulnerability in Comply.

Tanium addressed an improper access controls vulnerability in Comply...

CVE-2026-87075

Tanium Comply contains an improper access controls vulnerability that the vendor has addressed. The flaw carries a CVSS 3.1 score of 8.1 (HIGH) , with a network attack vector, low complexity, and low privileges required. Successful exploitation results in high integrity and high availability impa...

CVE-2026-87047

Tanium Comply is affected by an improper access controls vulnerability, assigned CVSS 3.1 score of 6.3 (Medium) with a network attack vector, low complexity, and low required privileges, resulting in low impacts to confidentiality, integrity, and availability. The vulnerability has been addressed...

CVE-2026-87047 Tanium addressed an improper access controls vulnerability in Comply.

Tanium addressed an improper access controls vulnerability in Comply...

CVE-2026-87019

Tanium Comply is affected by an improper access controls vulnerability, as reported by Tanium in advisory TAN-2026-035 . The issue was addressed by the vendor. The CVSS 3.1 score is 4.3 (MEDIUM) , with a network attack vector, low complexity, and low privileges required; the impact is limited to ...

CVE-2026-87475

A missing authorization flaw was found in the Omnibox component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=507225626...

CVE-2019-19550

CVE-2019-19550 Description Remote Authentication Bypass in Senior Rubiweb 6.2.34.28 and 6.2.34.37 allows admin access to sensitive information of affected users using vulnerable versions. The attacker only needs to provide the correct URL. Important Dates Announcement to Vendor: 2019-12-02 Public...

CVE-2026-73318

CVE-2026-73318 XenForo before 2.3.13 lets any ACP administrator trigger site-wide privacy-policy and terms re-agreement. What happens The ACP navigation entries are limited to administrators with the option permission, but ForceAgreementController does not enforce that permission. Direct requests...

CVE-2020-24030

CVE-2020-24030 Descripción ForLogic Qualiex v1 y v3 tienen una caducidad de token débil. Esto permite la escalada de privilegios remota no autenticada y el acceso a datos sensibles mediante la reutilización de tokens. Fechas importantes Anuncio al proveedor: 2020-07-12 Fecha de divulgación públic...

CVE-2020-24029

CVE-2020-24029 Description Because of unauthenticated password changes in ForLogic Qualiex v1 and v3, customer and admin permissions and data can be accessed via a simple request. Important Dates Announcement to Vendor: 2020-07-12 Public disclosure date: 2020-08-31 Vulnerability Type Incorrect...

CVE-2026-87595

Server-side request forgery in Mobile in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

DEBIAN-CVE-2026-87556

Missing authorization in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

cve-2023-22515-1

🛡️ CVE-2023-22515: Confluence 権限昇格脆弱性 詳細分析 !IMPORTANT 緊急セキュリティ警告 : この脆弱性はCVSSスコア10.0 Criticalの最高リスク脆弱性です。影響を受けるバージョンを使用している場合は、即座にパッチを適用する必要があります。 1. 概要 Overview CVE-2023-22515 は、Atlassian Confluence Data CenterおよびServerで発見された致命的なBroken Access Control...

commvault-cve2025-34028-check

infra-monitor infra-monitor es un script NSE de Nmap ligero para probar silenciosamente la consistencia de respuestas en rutas de infraestructura web. Ayuda a detectar anomalías en el control de acceso, discrepancias de configuración o posibles inconsistencias en cómo responden los diferentes...

CVE-2025-57489

CVE-2025-57489 Descripción Del blog del desarrollador: Cuando el candado de SuperDuper está desbloqueado para permitir la ejecución sin tener que introducir una contraseña de administrador, un programa de terceros podría utilizar nuestra autorización para ejecutar algo que no sea una copia de...

CVE-2024-3400-Check

Descripción 1. Realiza una solicitud POST al endpoint /ssl-vpn/hipreport.esp. 2. Realiza una solicitud GET a /global-protect/portal/images/sxy.txt para comprobar si la explotación permite el acceso al archivo, lo que normalmente estaría prohibido estado 403 Forbidden. Requisitos previos Necesitas...

CVE-2026-82074

MongoDB Server contains an incorrect authorization vulnerability in th...

Security Advisory 0164

Security Advisory 0164 PDF Date: September 9, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release The CVE-ID tracking this issue: CVE-2026-73439 CVSSv3.1 Base Score: 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVSSv4.0 Base Score: 7.7...