1556 matches found
CVE-2024-45371
Improper access control for some IntelR Arc™ & IrisR Xe graphics software before version 32.0.101.6077 may allow an authenticated user to potentially enable denial of service via local access...
CVE-2025-20100
Improper access control in the memory controller configurations for some IntelR XeonR 6 processor with E-cores may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2025-47580 WordPress Front End Users plugin <= 3.2.35 - Broken Access Control vulnerability
Missing Authorization vulnerability in Rustaurius Front End Users front-end-only-users allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Front End Users: from n/a through = 3.2.35...
CVE-2025-47580 WordPress Front End Users plugin <= 3.2.32 - Sensitive Data Exposure vulnerability
Missing Authorization vulnerability in Rustaurius Front End Users allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Front End Users: from n/a through 3.2.32...
CVE-2025-2527 Improper access control to group information
Mattermost versions 10.5.x = 10.5.2, 9.11.x = 9.11.11 failed to properly verify a user's permissions when accessing groups, which allows an attacker to view group information via an API request...
Google Chrome Security Bypass Vulnerability (CNVD-2025-10055)
Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome prior to version 136.0.7103.59, which stems from an improper implementation in DevTools, and can be exploited by an attacker to cause an access control bypass...
CVE-2025-22844
Improper access control for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow an unauthenticated user to potentially enable information disclosure via adjacent access...
CVE-2024-43101
Improper access control for some IntelR Data Center GPU Flex Series for Windows driver software before version 31.0.101.4255 may allow an authenticated user to potentially enable denial of service via local access...
PT-2025-21057 · Intel · Intel Arc +1
Name of the Vulnerable Software and Affected Versions: IntelR Arc™ and IrisR Xe graphics software versions prior to 32.0.101.6077 Description: The issue is related to improper access control for some IntelR Arc™ and IrisR Xe graphics software. This may allow an authenticated user to potentially...
PT-2025-21112 · Intel · Intel Tiber Edge Platform Edge Orchestrator
Name of the Vulnerable Software and Affected Versions: IntelR Tiber™ Edge Platform Edge Orchestrator software affected versions not specified Description: The issue is related to improper access control in the Edge Orchestrator software for IntelR Tiber™ Edge Platform. This may allow an...
PT-2025-21055 · Intel · Intel Data Center Gpu Flex Series
Name of the Vulnerable Software and Affected Versions: IntelR Data Center GPU Flex Series for Windows versions prior to 31.0.101.4255 Description: The issue is related to improper access control in the IntelR Data Center GPU Flex Series for Windows driver software. This may allow an authenticated...
PT-2025-21053 · Intel · Intel Arc & Iris Xe Graphics
Name of the Vulnerable Software and Affected Versions: IntelR Arc™ & IrisR Xe graphics software versions prior to 31.0.101.4032 Description: The issue is related to improper access control in some IntelR Arc™ & IrisR Xe graphics software, which may allow an authenticated user to potentially enabl...
CVE-2025-1278 Insufficient Granularity of Access Control in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions from 12.0 before 17.9.8, 17.10 before 17.10.6, and 17.11 before 17.11.2. Under certain conditions users could bypass IP access restrictions and view sensitive information...
CVE-2025-1278
GitLab CE/EE contains CVE-2025-1278: an issue in which, under certain conditions, users could bypass IP access restrictions and view sensitive information. Affected versions are GitLab from 12.0 up to 17.9.8 (pre-17.9.8), 17.10 up to 17.10.6 (pre-17.10.6), and 17.11 up to 17.11.2 (pre-17.11.2). T...
CVE-2025-20968
Improper access control in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13, and 15.5.04.5 in Android 14 allows remote attackers to access data and perform internal operations within Samsung Gallery...
LibreOffice Improper Access Control vulnerability (May 2025) - Windows
LibreOffice is prone to an improper access control vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2025-47602
Missing Authorization vulnerability in ammarahmad786 Calculate Prices based on Distance For WooCommerce calculate-prices-based-on-distance-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Calculate Prices based on Distance For WooCommerce:...
CVE-2025-47526
Missing Authorization vulnerability in GS Plugins GS Variation Swatches for WooCommerce gs-woo-variation-swatches allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GS Variation Swatches for WooCommerce: from n/a through = 3.0.4...
CVE-2025-47494
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Ashan Perera EventON eventon-lite allows PHP Local File Inclusion.This issue affects EventON: from n/a through = 2.4.1...