32 matches found
CVE-2026-85435
MOOS-IvP uFldNodeBroker (through version 24.8.1) fails to validate the source of TRY_SHORE_HOST messages on the vehicle bus. This allows any publisher to enroll attacker-controlled shore routes, enabling an attacker to receive bridged vehicle traffic including sensor data and control information ...
Missing Authorization
Overview org.jenkins-ci.plugins:git-parameter is a plugin that allows you to assign git branch, tag, pull request or revision number as parameter in your builds. Affected versions of this package are vulnerable to Missing Authorization due to a missing permission check in the process. An attacker...
Linux kernel 安全漏洞
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from an incorrect assumption during mode switching that the CID Control Information Device is owned by...
CVE-2025-68240
The CVE-2025-68240 entry concerns the Linux kernel nilfs2 subsystem. The described vulnerability arose because a sc_timer could remain active when freeing sci, caused by kthread_stop not reliably stopping sc_task (returning -EINTR), leaving the timer improperly closed. The remediation uses timer_...
Jenkins MCP Server Plugin does not perform permission checks in multiple MCP tools
Jenkins MCP Server Plugin 0.84.v50ca24ef83f2 and earlier does not perform permission checks in several MCP tools. This allows to do the following: - Attackers with Item/Read permission can obtain information about the configured SCM in a job despite lacking Item/Extended Read permission getJobScm...
EUVD-2021-10296
Malware in sbrugna...
EUVD-2011-2871
Malware in sbrugna...
EUVD-2016-6288
Malware in sbrugna...
Exploit for Improper Access Control in Joomla Joomla\!
PoCs This repo contains proof of concept exploits for vulnera...
CVE-2024-28215
nGrinder before 3.5.9 allows an attacker to create or update webhook configuration due to lack of access control, which could be the cause of information disclosure and limited Server-Side Request Forgery...
CVE-2023-32279
Improper access control in user mode driver for some IntelR Connectivity Performance Suite before version 2.1123.214.2 may allow unauthenticated user to potentially enable information disclosure via network access...
CVE-2023-46662
Sielco PolyEco1000 is vulnerable to an information disclosure vulnerability due to improper access control enforcement. An unauthenticated remote attacker can exploit this via a specially crafted request to gain access to sensitive information...
CVE-2021-23188
Improper access control for some IntelR PROSet/Wireless WiFi and KillerTM WiFi products may allow an authenticated user to potentially enable information disclosure via local access...
CVE-2019-19837
Incorrect access control in the web interface in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote information disclosure of bin/web.conf via HTTP requests...
PT-2025-21005 · Microsoft · Visual Studio
Name of the Vulnerable Software and Affected Versions: Visual Studio affected versions not specified Description: The issue is related to insufficient granularity of access control, allowing an authorized attacker to disclose information locally. There is no information provided about the estimat...
CVE-2023-32609
Improper access control in the Intel UniteR android application before version 4.2.3504 may allow an authenticated user to potentially enable information disclosure via local access...
SUSE CVE-2011-2898
net/packet/afpacket.c in the Linux kernel before 2.6.39.3 does not properly restrict user-space access to certain packet data structures associated with VLAN Tag Control Information, which allows local users to obtain potentially sensitive information via a crafted application...
CVE-2022-46530
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the mac parameter at /goform/GetParentControlInfo...
