Directum RX Data Compromise

The vulnerability of the Directum RX ECM system is related to deficiencies in access control. Exploiting this vulnerability could allow a remote attacker to compromise data integrity...

Windows Event Logging Service Code Execution

The vulnerability of the Windows Event Logging service in operating systems is related to deficiencies in access control mechanisms. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

ROS-20260714-73-0072

The vulnerability in Gitea is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges...

Core component of the DoS

The vulnerability of the Core component of the Oracle Enterprise Command Center Framework is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause partial service interruptions or gain read, modify, or delete privileges on data...

Core Component Full Control

The vulnerability of the Core component of the Oracle Enterprise Command Center Framework is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full control over the application using the HTTP network protocol...

Router Oracle MySQL Proxy Server Full Control

Vulnerability of the Router component: The general proxy server, MySQL Router of the Oracle Database Management System, is associated with access control deficiencies. Exploiting this vulnerability can allow an attacker, operating remotely, to gain full control over the application using the HTTP...

Oracle Enterprise Manager Extensibility Framework Full Control

The vulnerability of the Extensibility Framework component of the Oracle Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain full control over the application...

Mozilla Firefox Networking Privilege Escalation

The vulnerability of the Networking module of Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

CVE-2026-6211 Arbitrary File Upload in Global IT's WEOLL

Unrestricted upload of file with dangerous type vulnerability in Global IT Informatics Services Inc. WEOLL allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects WEOLL: from 2.0.9 before 3.2.45.33...

HTTP.sys DoS

The vulnerability of the HTTP.sys driver on Windows operating systems is related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Link Preview Bypass Security Restrictions

The vulnerability of the Link Preview function in Google Chrome and Microsoft Edge browsers is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to bypass security restrictions remotely...

CVE-2022-41656

Missing Authorization vulnerability in Bizswoop Account Manager for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Account Manager for WooCommerce: from n/a through 2.1.2...

Yordam Library Automation System security vulnerabilities

Yordam Library Automation System is an application developed by Yordam Corporation. Versions of the Yordam Library Automation System from v.19.5 to v.22.1 contained security vulnerabilities. These vulnerabilities were caused by incorrect authorization settings, which could lead to exploitation of...

APPYAP Yaay Social Media App has a security vulnerability

APPYAP Yaay Social Media App is a mobile social application developed by the Turkish company APPYAP. It supports sharing short videos and social interactions. There are security vulnerabilities in the version 3.8.0 to 24102025 of the APPYAP Yaay Social Media App. These vulnerabilities stem from...

WordPress plugin Preschool and Kindergarten security vulnerabilities

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There ar...

Secure Encrypted Virtualization SEV Data Compromise

The vulnerability of the Secure Encrypted Virtualization SEV technology of AMD microprocessors is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to compromise the confidentiality of the protected information...

UEFI DMA Attack

The vulnerability of UEFI microprogramming on ASUS motherboard based on Intel B460, B560, B660, B760, H410, H510, H610, H470, Z590, Z690, Z790, W480, and W680 chipsets is related to access control deficiencies. Exploiting this vulnerability allows an attacker to perform DMA attacks and circumvent...

WordPress plugin TaxCloud for WooCommerce has security vulnerabilities

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be added to a...

PT-2026-4216

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Curly curly allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Curly: from n/a through = 3.3...

pgai Library Access Control RCE

The vulnerability of the pgai library is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...