PT-2025-43230

Name of the Vulnerable Software and Affected Versions Wikimedia Foundation Wikipedia Preview versions through 1.15.0 Description An authorization issue exists in Wikimedia Foundation Wikipedia Preview. The issue involves incorrectly configured access control security levels, potentially allowing...

PT-2025-43173

Name of the Vulnerable Software and Affected Versions bdthemes ZoloBlocks versions through 2.3.11 Description An authorization issue exists in bdthemes ZoloBlocks that allows exploiting incorrectly configured access control security levels. Recommendations Update to a version later than 2.3.11...

Atlassian Jira Align 安全漏洞

Atlassian Jira Align is a strategic-grade agile management platform from Atlassian Australia. A security vulnerability exists in Atlassian Jira Align that stems from an authorization issue that could lead to the disclosure of sensitive information...

PT-2025-43201

Name of the Vulnerable Software and Affected Versions Smash Balloon Social Post Feed versions through 4.3.2 Description An authorization issue exists in Syed Balkhi Smash Balloon Social Post Feed custom-facebook-feed. This allows exploitation of incorrectly configured access control security...

PT-2025-43158

Name of the Vulnerable Software and Affected Versions FRESHFACE Custom CSS versions through 1.4.0 Description An authorization issue exists in the FRESHFACE Custom CSS custom-css-editor, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update...

Atlassian Jira Align 安全漏洞

Atlassian Jira Align is a strategic-grade agile management platform from Atlassian Australia. A security vulnerability exists in Atlassian Jira Align that stems from an authorization issue that could lead to the disclosure of sensitive information...

PT-2025-44360

Name of the Vulnerable Software and Affected Versions Drupal CivicTheme Design System versions prior to 1.12.0 Description An incorrect authorization issue exists in the CivicTheme Design System that allows for forceful browsing. This occurs due to insufficient access controls, potentially allowi...

Atlassian Jira Align 安全漏洞

Atlassian Jira Align is a strategic level agile management platform from Atlassian Australia. A security vulnerability exists in Atlassian Jira Align that stems from an authorization issue that could lead to elevated privileges...

Atlassian Jira Align 安全漏洞

Atlassian Jira Align is a strategic-grade agile management platform from Atlassian Australia. A security vulnerability exists in Atlassian Jira Align that stems from an authorization issue that could lead to the disclosure of sensitive information...

PT-2025-43180

Name of the Vulnerable Software and Affected Versions CoSchedule versions through 3.4.0 Description An authorization issue exists in CoSchedule. The problem involves incorrectly configured access control security levels, potentially allowing unauthorized access. Recommendations Update to a versio...

PT-2025-43389

Name of the Vulnerable Software and Affected Versions Jira Align affected versions not specified Description Jira Align is subject to an authorization issue that allows a low-privilege user to access unexpected API endpoints. This access can lead to the disclosure of a limited amount of sensitive...

PT-2025-43384

Name of the Vulnerable Software and Affected Versions Jira Align affected versions not specified Description Jira Align is subject to an authorization issue. A user with limited privileges may be able to perform actions they are not authorized to do by including a state-related parameter belongin...

PT-2025-43390

Name of the Vulnerable Software and Affected Versions Jira Align affected versions not specified Description Jira Align is subject to an authorization issue that allows a low-privilege user to access unexpected API endpoints, potentially disclosing a limited amount of sensitive information. An...

PT-2025-43382

Name of the Vulnerable Software and Affected Versions Jira Align affected versions not specified Description Jira Align is subject to an authorization issue that allows a low-privilege user to access unexpected API endpoints. This access can lead to the disclosure of a limited amount of sensitive...

PT-2025-43386

Name of the Vulnerable Software and Affected Versions Jira Align affected versions not specified Description Jira Align is subject to an authorization issue that allows a low-privilege user to access unexpected API endpoints, potentially disclosing a limited amount of sensitive information. An...

PT-2025-43392

Name of the Vulnerable Software and Affected Versions Jira Align affected versions not specified Description Jira Align is subject to an authorization issue that allows a low-privilege user to access unexpected API endpoints. This access can lead to the disclosure of a limited amount of sensitive...

PT-2025-43385

Name of the Vulnerable Software and Affected Versions Jira Align affected versions not specified Description Jira Align is subject to an authorization issue that allows a user with limited privileges to modify the private checklists belonging to other users. Recommendations At the moment, there i...

WordPress plugin FileBird 授权问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. An authorizati...

The vulnerability of SAP NetWeaver Application Server ABAP and ABAP Platform software integration platforms, related to incorrect authorization, allows attackers to execute arbitrary code.

The vulnerability of SAP NetWeaver Application Server ABAP and ABAP Platform integration platforms is related to incorrect authorization. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Microsoft Windows SMB Client 授权问题漏洞

Microsoft Windows SMB Client is a Microsoft application. An SMB client. Microsoft Windows SMB Client has a security vulnerability that can be exploited by attackers to tamper with information...