CVE-2025-62972 WordPress WebinarPress plugin <= 1.33.28 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WebinarPress: from n/a through = 1.33.28...

CVE-2025-62927

CVE-2025-62927 : Missing Authorization vulnerability in WordPress plugin Nelio Content (nelio-content) affecting versions up to and including 4.0.5. Connected sources confirm an issue with “Incorrectly Configured Access Control Security Levels” leading to a broken/Missing Authorization exposure i...

CVE-2025-62054 WordPress Houzez Theme - Functionality plugin <= 4.1.8 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in favethemes Houzez Theme - Functionality houzez-theme-functionality.This issue affects Houzez Theme - Functionality: from n/a through = 4.1.8...

CVE-2025-53424 WordPress WooCommerce Orders & Customers Exporter plugin <= 5.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in vanquish WooCommerce Orders & Customers Exporter woocommerce-orders-ei allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Orders & Customers Exporter: from n/a through = 5.4...

CVE-2025-30944 WordPress Tablesome Table Premium <= 1.1.23 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Essekia Tablesome Table Premium tablesome-premium allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Tablesome Table Premium: from n/a through = 1.1.23...

EUVD-2025-35215

Incorrect Default Permissions vulnerability in The Wikimedia Foundation Mediawiki - Thanks Extension, Mediawiki - Growth Experiments Extension allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Mediawiki - Thanks Extension, Mediawiki - Growth Experiments Extension:...

EUVD-2025-35053

An arbitrary code execution vulnerability exists in the git functionality of Truffle Security Co. TruffleHog 3.90.2. A specially crafted repository can lead to a arbitrary code execution. An attacker can provide a malicious respository to trigger this vulnerability...

CVE-2025-62648

The Restaurant Brands International RBI assistant platform through 2025-09-06 allows remote attackers to adjust Drive Thru speaker audio volume...

CVE-2025-9955 Improper Access Control in WSO2 Enterprise Integrator Product via SOAP Admin Services for Logs and User-Store Configuration

An improper access control vulnerability exists in WSO2 Enterprise Integrator product due to insufficient permission restrictions on internal SOAP admin services related to system logs and user-store configuration. A low-privileged user can access log data and user-store configuration details tha...

HCL Unica Platform 安全漏洞

HCL Unica Platform is a state-of-the-art enterprise automated marketing platform from HCL India. No manual effort is required to handle routine marketing tasks and capture the most effective leads. HCL Unica Platform suffers from a security vulnerability that stems from improper access control an...

CVE-2025-58285

Permission control vulnerability in the media module. Successful exploitation of this vulnerability may affect service confidentiality...

EUVD-2025-33809

Permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-58285

Permission control vulnerability in the media module. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-58285

Permission control vulnerability in the media module. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-58284

Huawei HarmonyOS exposes a privilege control vulnerability in the network module (privilege control issue) that can affect service confidentiality. CVE-2025-58284 is described with local attack vector and low attack complexity; exploitation requires low privileges and may require user interaction...

CVE-2025-58284

Permission control vulnerability in the network module. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-58283

Permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-54654

CVE-2025-54654 concerns Huawei HarmonyOS’ Gallery module with a privilege-control vulnerability that can impact service confidentiality. Connected sources indicate the flaw resides in the Gallery component and can be exploited locally to access confidential data, though no direct exploit details,...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A privilege control vulnerability exists in the Huawei HarmonyOS Gallery module, which can be exploited by an attacker to compromise service confidentiality...

PT-2025-41637

Name of the Vulnerable Software and Affected Versions versions prior to 2025 affected versions not specified Description A permission control issue exists in the media module. Successful exploitation could impact the confidentiality of the service. Recommendations At the moment, there is no...