190773 matches found
CVE-2026-81274: Missing Authorization
Subscriber Broken Access Control in Ditty = 3.1.67 versions...
CVE-2026-27330: Missing Authorization
Unauthenticated Broken Access Control in Mobile App for WooCommerce = 0.4.62 versions...
CVE-2026-37073
Incorrect access control in /vfm-admin/ajax/sendfiles.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to send emails from the configured SMPT server on the application via making a POST request to the endpoint with needed parameters and header...
PT-2026-82441
Name of the Vulnerable Software and Affected Versions Mobile App for WooCommerce versions prior to 0.4.63 Description An unauthenticated broken access control issue exists, allowing unauthorized users to bypass security restrictions within the application. Recommendations Update to a version newe...
PT-2026-82474
Subscriber Broken Access Control in Push Notification for Post and BuddyPress = 3.20 versions...
CVE-2026-37073
An incorrect access control vulnerability exists in the Veno File Manager Project 4.4.9 at the /vfm-admin/ajax/sendfiles.php endpoint. This flaw allows an unauthenticated attacker to send emails from the application's configured SMTP server by making a POST request with the required parameters an...
CVE-2026-37072
The Veno File Manager Project version 4.4.9 is vulnerable to Incorrect Access Control in the admin-head-updates.php file. An unauthenticated attacker can exploit a Local File Inclusion (LFI) vulnerability via the lang GET parameter. By sending a specially crafted POST request with the correct fil...
CVE-2026-37067
Incorrect access control in /vfm-admin/admin-panel/view/save-cvs.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to extract all application logs from a desired date forwards via a specially crafted POST request...
The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform allows a perpetrator to cause a service failure.
The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause service interruptions...
The vulnerability of the Imperative Web Server component of the Oracle Helidon library in the Oracle Fusion Middleware software platform allows a perpetrator to gain access to add, delete, modify, and read data.
The vulnerability of the Imperative Web Server component of the Oracle libraries in the Oracle Fusion Middleware software suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data...
The vulnerability of the Imperative Web Server component of the Oracle Helidon library in the Oracle Fusion Middleware software platform allows a perpetrator to gain access to add, delete, modify, and read data.
The vulnerability of the Imperative Web Server component of the Oracle libraries in the Oracle Fusion Middleware software suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data...
The vulnerability of the Imperative Web Server component of the Oracle Helidon library in the Oracle Fusion Middleware software platform allows a perpetrator to gain access to add, delete, modify, and read data.
The vulnerability of the Imperative Web Server component of the Oracle libraries in the Oracle Fusion Middleware software suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data...
The vulnerability of the Imperative Web Server component of the Oracle Helidon library in the Oracle Fusion Middleware software platform allows a perpetrator to gain access to add, delete, modify, and read data.
The vulnerability of the Imperative Web Server component of the Oracle libraries in the Oracle Fusion Middleware software suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data...
The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform allows a perpetrator to cause a service failure.
The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause service interruptions...
The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform allows a perpetrator to cause a service failure.
The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause service interruptions...
The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform allows a perpetrator to cause a service failure and gain unauthorized access to protected information.
The vulnerability of the Imperative Web Server component of the Oracle Helidon library in the Oracle Fusion Middleware software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause service interruptions and gain unauthorized access ...
The vulnerability of the Imperative Web Server component of the Oracle Helidon library in the Oracle Fusion Middleware software platform allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Imperative Web Server component of the Oracle Fusion Middleware library set is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform allows a perpetrator to gain access to add, delete, and modify data.
The vulnerability of the Imperative Web Server component of the Oracle Fusion Middleware library set is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to gain access to add, delete, and modify data...
The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform allows a perpetrator to gain access to add, delete, modify, and read data, as well as to cause service interruptions.
The vulnerability of the Imperative Web Server component of the Oracle Helidon library in the Oracle Fusion Middleware software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data, as wel...
The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform allows a perpetrator to gain access to add, delete, modify, and read data, as well as to cause service interruptions.
The vulnerability of the Imperative Web Server component of the Oracle Helidon library in the Oracle Fusion Middleware software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data, as wel...