229535 matches found
CVE-2026-16471 Broken Access Control in Dolusoft Software's Sonlogger
Missing Authorization vulnerability in Dolusoft Software Technologies Sonlogger allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Sonlogger: from v6.6.6 before 6.7.4.8...
389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser
A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote attacker to crash the LDAP server when the system is under memory pressure...
CVE-2026-16467 Broken Access Control in Dolusoft Software's Fortilogger
Missing Authorization vulnerability in Dolusoft Software Technologies Fortilogger allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Fortilogger: before 6.1.5.9...
CVE-2026-16467 Broken Access Control in Dolusoft Software's Fortilogger
Missing Authorization vulnerability in Dolusoft Software Technologies Fortilogger allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Fortilogger: before 6.1.5.9...
CVE-2026-16467
FortiLogger versions before 6.1.5.9 have a broken access control flaw allowing unauthenticated remote attackers to access restricted functionality, exposing sensitive log data. CVSS 7.5 HIGH. Exploitation status is not provided. Upgrade to 6.1.5.9 or later. Reference: https://siberguvenlik.gov.tr...
PCP: PCP pmproxy: Unauthenticated access to /store endpoint allows bypassing pmcd access rules
An unauthenticated remote attacker can bypass access controls by sending crafted requests to the PCP pmproxy /store endpoint. This allows the attacker to overwrite any PMDA metric, leading to arbitrary code execution and system takeover...
CVE-2026-49308
Permission control vulnerability in the clipboard module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2026-49303
Permission control vulnerability in the notification module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-49302
Permission control vulnerability in the notification service module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2026-49305
Permission control vulnerability in the Wi-Fi enhancement module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-49304
Permission control vulnerability in the device key management module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-49307
Permission control vulnerability in the multi-mode input module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2026-49301
Permission control vulnerability in the Gallery module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
EUVD-2026-60076
Permission control vulnerability in the notification module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-49303
The CVE-2026-49303 entry describes a permission control vulnerability in the Huawei notification module. The issue is rated CVSS v3.1: 5.1 (Medium) with a LOCAL attack vector, no privileges required , and no user interaction , potentially impacting availability. Connected documents reiterate the ...
CVE-2026-49303
Permission control vulnerability in the notification module. Impact: Successful exploitation of this vulnerability may affect availability...
EUVD-2026-60075
Permission control vulnerability in the Gallery module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2026-49301
Technical details beyond the basic description are not publicly available in the provided documents. Monitor for updates from Huawei CVE coverage and the CVE/CVE-List records.