CVE-2025-27649

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.893 Application 20.0.2140 allows Incorrect Access Control: PHP V-2023-016...

PHPGurukul Pre-School Enrollment System 安全漏洞

PHPGurukul Pre-School Enrollment System is a web-based preschool enrollment system from PHPGurukul, Inc. A security vulnerability exists in version 1.0 of the PHPGurukul Pre-School Enrollment System that stems from improper manipulation of the add-subadmin.php file in the Sub Admin Handler...

CVE-2025-25381

Incorrect access control in the KSRTC AWATAR app of Karnataka State Road Transport Corporation v1.3.0 allows to view sensitive information such as usernames and passwords...

CVE-2024-56195 Apache Traffic Server: Intercept plugins are not access controlled

Improper Access Control vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.8, from 10.0.0 through 10.0.3. Users are recommended to upgrade to version 9.2.9 or 10.0.4, which fixes the issue...

CVE-2024-56195

Apache Traffic Server is affected by an Improper Access Control vulnerability (CVE-2024-56195) impacting versions 9.2.0 through 9.2.8 and 10.0.0 through 10.0.3 . This flaw can result in incomplete dropping of privileges . To remediate this issue, users are recommended to upgrade to version 9.2.9 ...

CVE-2024-56195 Apache Traffic Server: Intercept plugins are not access controlled

Improper Access Control vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.8, from 10.0.0 through 10.0.3. Users are recommended to upgrade to version 9.2.9 or 10.0.4, which fixes the issue...

CVE-2024-56196 Apache Traffic Server: ACL is not fully compatible with older versions

Improper Access Control vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 10.0.0 through 10.0.3. Users are recommended to upgrade to version 10.0.4, which fixes the issue...

CVE-2024-56196

Improper Access Control vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 10.0.0 through 10.0.3. Users are recommended to upgrade to version 10.0.4, which fixes the issue...

CVE-2024-56196 Apache Traffic Server: ACL is not fully compatible with older versions

Improper Access Control vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 10.0.0 through 10.0.3. Users are recommended to upgrade to version 10.0.4, which fixes the issue...

CVE-2024-56196

Apache Traffic Server versions 10.0.0 through 10.0.3 are affected by an improper access control vulnerability. The root cause involves incompatible ACL behavior and deficiencies in access control lists (ACLs), which may allow a malicious actor to compromise the confidentiality, integrity, and acc...

CVE-2025-20923

Improper access control in Galaxy Wearable prior to version 2.2.61.24112961 allows local attackers to launch arbitrary activity with Galaxy Wearable privilege...

CVE-2025-20924

CVE-2025-20924 affects Samsung Notes prior to version 4.4.26.71. The issue is an improper access control bug that allows a physical attacker to access data across multiple user profiles on affected devices. Root cause is access-control failure within Samsung Notes’ multi-profile handling, enablin...

CVE-2025-25381

The KSRTC AWATAR app, an online bus ticket booking application by the Karnataka State Road Transport Corporation, suffers from a critical Incorrect Access Control and Insecure Data Storage vulnerability. Affected versions include v1.3.0 , v1.4.2 , and v1.4.3 . The root cause is the insecure stora...

Apache Traffic Server 访问控制错误漏洞

Apache Traffic Server ATS is a suite of scalable HTTP proxy and caching servers from the Apache Foundation in the United States. A security vulnerability exists in Apache Traffic Server versions 9.2.0 through 9.2.8 and 10.0.0 through 10.0.3 that stems from improper access control...

Linux Distros Unpatched Vulnerability : CVE-2024-50279

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm cache: fix out-of-bounds access to the dirty bitset when resizing dm-cache checks the dirty bits of the cache blocks to be dropped when shrinking the fast...

CVE-2025-23613

Missing Authorization vulnerability in mediabeta WP Journal wpjournal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Journal: from n/a through = 1.1...

CVE-2025-25948

Incorrect access control in the component /rest/staffResource/create of Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR v1.0.118 allows create and modify user accounts, including an Administrator account...

CVE-2025-27649

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.893 Application 20.0.2140 allows Incorrect Access Control: PHP V-2023-016...

CVE-2024-31525

Peppermint Ticket Management 0.4.6 is vulnerable to Incorrect Access Control. A regular registered user is able to elevate his privileges to admin and gain complete access to the system as the authorization mechanism is not validated on the server side and only on the client side. This can result...

The vulnerability of the IBM Security Verify Access access control system, related to errors in privilege management, allows attackers to elevate their privileges.

The vulnerability of the IBM Security Verify Access access control system is related to errors in privilege management. Exploiting this vulnerability can allow attackers to enhance their privileges...