Lucene search
+L

230675 matches found

EUVD
EUVD
added 2026/09/15 12:31 a.m.3 views

EUVD-2026-78167

ZFile through 5.0.5 fails to validate requested file paths against a share link's allowed entries on the download endpoint. Attackers holding a share link can supply arbitrary file paths as query parameters to download any file under the shared base directory, bypassing the intended access...

8.7CVSS
SaveExploits0References5
EUVD
EUVD
added 2026/09/15 12:31 a.m.4 views

EUVD-2026-78213

A race condition during supplicant re-authentication may leave a stale ACL entry that persists in the system. If the AclAgent subsequently restarts, this stale entry may be applied to new supplicants, resulting in incorrect access control enforcement. User interaction an AclAgent restart by an...

5.6CVSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2026/09/14 11:42 p.m.26 views

The vulnerability of the control console of the MaxPatrol EDR detection and response system allows a perpetrator to trigger a service failure.

The vulnerability of the control console of the MaxPatrol EDR detection and response system is related to access control errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...

3.5CVSS5.5AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/09/14 11:42 p.m.20 views

The vulnerability of the CommuniGate Pro mail server arises from insufficient access control checks when processing specially crafted requests, allowing a malicious actor to perform unauthorized modifications to the server’s data.

The vulnerability of the CommuniGate Pro mail server arises from insufficient access control checks when processing specially crafted requests. Exploiting this vulnerability allows a malicious actor to perform unauthorized modifications to the server’s data remotely...

8.5CVSS6.2AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/09/14 11:42 p.m.22 views

The vulnerability affects the embedded energy-independent single-write eFUSE memory module in Realtek RTL8762C, a highly integrated wireless system on chip (SoC). This module allows a hacker to circumvent existing security restrictions and expose sensitive information.

The vulnerability of the embedded energy-independent single-write eFUSE memory in the highly integrated wireless system on chip SoC Realtek RTL8762C is related to the fact that power is turned on before the access control mechanism is activated. Exploiting this vulnerability can allow a hacker to...

7.6CVSS5.5AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2026/09/14 11:41 p.m.45 views

The vulnerability of the Directum RX ECM system, related to deficiencies in access control, allows a perpetrator to compromise data integrity.

The vulnerability of the Directum RX ECM system is related to deficiencies in access control. Exploiting this vulnerability could allow a remote attacker to compromise data integrity...

5CVSS5.8AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/09/14 11:41 p.m.39 views

The vulnerability of the MmMapIoSpace() function in the ThrottleBlood.sys driver allows a hacker to escalate their privileges, execute arbitrary code, or cause a service failure.

The vulnerability of the MmMapIoSpace function in the ThrottleBlood.sys driver, as part of the ThrottleStop utility, is related to open IOCTLs with insufficient access control. Exploiting this vulnerability could allow an attacker to enhance their privileges, execute arbitrary code, or cause...

7.5CVSS6AI score0.07121EPSS
SaveExploits9References3Affected Software1
NVD
NVD
added 2026/09/14 11:18 p.m.1 views

CVE-2026-75944

A race condition during supplicant re-authentication may leave a stale ACL entry that persists in the system. If the AclAgent subsequently restarts, this stale entry may be applied to new supplicants, resulting in incorrect access control enforcement. User interaction an AclAgent restart by an...

5.6CVSS
SaveExploits0References1
CVE
CVE
added 2026/09/14 10:19 p.m.21 views

CVE-2026-75944

CVE-2026-75944 is a race condition in Arista EOS 802.1X supplicant re-authentication that may leave a stale ACL entry in the system. If the AclAgent subsequently restarts, the stale entry can be applied to new supplicants, causing incorrect access control enforcement. The vulnerability requires 8...

5.6CVSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/14 10:19 p.m.9 views

CVE-2026-75944 A race condition during supplicant re-authentication may leave a stale ACL entry that persists in the system. If the AclAgent subsequently restarts, this stale entry may be applied to new supplicants, resulting in incorrect access control enforcement. User

A race condition during supplicant re-authentication may leave a stale ACL entry that persists in the system. If the AclAgent subsequently restarts, this stale entry may be applied to new supplicants, resulting in incorrect access control enforcement. User interaction an AclAgent restart by an...

5.6CVSS
SaveExploits0References1
NVD
NVD
added 2026/09/14 10:16 p.m.5 views

CVE-2026-76081

ZITADEL is an open source identity management platform. Prior to version 4.16.0, a bug in how ZITADEL updates permissions when multiple project roles are deleted at the same time can cause some user permissions to be missed. This issue specifically affects User Grants on Granted Projects projects...

5.5CVSS
SaveExploits0References3
EUVD
EUVD
added 2026/09/14 9:30 p.m.6 views

EUVD-2026-78163

ZITADEL is an open source identity management platform. Prior to version 4.16.0, a bug in how ZITADEL updates permissions when multiple project roles are deleted at the same time can cause some user permissions to be missed. This issue specifically affects User Grants on Granted Projects projects...

5.5CVSS
SaveExploits0References3
CVE
CVE
added 2026/09/14 9:04 p.m.17 views

CVE-2026-19273

CVE-2026-19273 affects the Dashboard of IBM Sterling B2B Integrator and IBM Sterling File Gateway (Standard Edition), versions 6.2.0.0 through 6.2.0.6_2, 6.2.1.0–6.2.1.2, and 6.2.2.0–6.2.2.1. The root cause is improper authentication (CWE-287), which allows a remote authenticated attacker to bypa...

5.4CVSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/14 8:57 p.m.6 views

EUVD-2026-78141

IBM Sterling File Gateway 6.2.0.0 through 6.2.0.61, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 could allow a remote attacker to obtain sensitive information due to improper access control...

7.5CVSS
SaveExploits0References1
CVE
CVE
added 2026/09/14 8:57 p.m.16 views

CVE-2026-19290

IBM Sterling File Gateway is affected by an improper access control flaw (CWE-284) that allows a remote, unauthenticated attacker to obtain sensitive information over the network. The vulnerability impacts versions 6.2.0.0 through 6.2.0.6_1, 6.2.1.0 through 6.2.1.2, and 6.2.2.0 through 6.2.2.1 , ...

7.5CVSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/14 8:51 p.m.2 views

EUVD-2026-78115

An authorization issue was addressed with improved access control. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8. An app may be able to access sensitive user data...

SaveExploits0References2
CVE
CVE
added 2026/09/14 8:51 p.m.3 views

CVE-2026-84555

An authorization issue in macOS allowed an app to potentially access sensitive user data. The flaw was addressed with improved access control in macOS Golden Gate 27 and macOS Sequoia 15.8 . The exact component or API at fault is not specified in the provided documents. No exploitation details or...

SaveExploits0References2
CVE
CVE
added 2026/09/14 8:50 p.m.25 views

CVE-2026-65403

CVE-2026-65403 is an Apple vulnerability affecting multiple platforms including iOS, iPadOS, macOS, visionOS, and watchOS . The root cause is described only as a lack of sufficient checks, with Apple stating the issue was "addressed with improved checks" without further component-level detail. Th...

SaveExploits0References7
CVE
CVE
added 2026/09/14 8:50 p.m.3 views

CVE-2026-84621

CVE-2026-84621 is an authorization issue in Apple platforms, resolved through improved access control . The vulnerability allows an app to potentially access sensitive user data . It affects iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7 ....

SaveExploits0References5
EUVD
EUVD
added 2026/09/14 8:50 p.m.4 views

EUVD-2026-77910

An authorization issue was addressed with improved access control. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data...

SaveExploits0References5
Rows per page
Query Builder