277931 matches found
Microsoft Windows: CVE-2026-102202: Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability
Improper access control in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to elevate privileges locally...
PT-2026-111850
Name of the Vulnerable Software and Affected Versions QloApps versions prior to 1.7.1 Description Broken access control allows back-office employees restricted to a specific hotel to create room types for other hotels. This is achieved by providing an arbitrary id hotel value. Attackers can...
PT-2026-112311
Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper access control allows an authorized attacker to disclose information over a network. Recommendations At the moment, there is no information about a newer version...
UBUNTU-CVE-2026-96237
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-70216: Windows Mobile Device Management Tampering Vulnerability
Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally...
PT-2026-112428
Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...
CVE-2026-96218: External Control of System or Configuration Setting
Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally...
CVE-2026-83662: Improper Neutralization of Input During Web Page Generation
Adobe Experience Manager is affected by a reflected Cross-Site Scripting XSS vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue...
ROS-20261013-73-0153
The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...
Microsoft Windows: CVE-2026-105733: Windows Hyper-V Remote Code Execution Vulnerability
Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally...
CVE-2026-70216: Insufficient Granularity of Access Control
Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally...
PT-2026-111330
Missing Authorization vulnerability in WP ManageNinja LLC FluentBoards fluent-boards allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentBoards: from n/a through 2.1.0...
CVE-2026-108496: Missing Authorization
Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Manager: from n/a through 2.9.24...
VulnCheck KEV: CVE-2026-57812
Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simply Schedule Appointments: from n/a through = 1.6.12.4...
CVE-2024-34320
The ProPhoenix Law RMS software, specifically version v2022.2403.3.101 , is affected by an incorrect access control issue. This vulnerability exists within sensitive API endpoints , potentially allowing unauthorized access to restricted data or functions. The CVSS 3.1 score for this vulnerability...
CVE-2026-17484: Exposure of Sensitive Information to an Unauthorized Actor
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to cause a denial of service due to improper access control...
CVE-2026-110226: Authorization Bypass Through User-Controlled Key
QloApps through 1.7.0 contains a broken access control vulnerability that allows hotel-restricted back-office employees to create room types under unassigned hotels by supplying an arbitrary idhotel. Attackers can enumerate all hotels via the unfiltered room type form selector and post foreign...
ROS-20261013-73-0204
A vulnerability in kernel-lt related to an incorrect control flow implementation. Exploitation of this vulnerability could allow an attacker to cause a denial of service...
CVE-2026-110229: Missing Authorization
QloApps through 1.7.0 contains an improper access control vulnerability in AdminSlipController that allows hotel-restricted back-office employees to access credit slips of all hotels. Attackers can list, export as PDF, mark as redeemed, and generate store-credit vouchers from other hotels' refund...