4 matches found
CVE-2026-54551: Improper Authorization
WireGuard Portal, or wg-portal, is a web-based configuration portal for WireGuard server management. From 2.2.0 until 2.3.0, the authenticated GET /api/v0/ws statistics WebSocket in internal/app/api/v0/handlers/endpointwebsocket.go subscribes to TopicPeerStatsUpdated and TopicInterfaceStatsUpdate...
WS-2022-0307
Pageflow has a membership edit feature which allows users to edit the roles of user memberships associated with an account that they have the manager role to including their own. While the Entity dropdown select field is greyed out in the UI, an attacker can use tools which allow sending arbitrar...
WS-2022-0306
Pageflow has a membership edit feature which allows users to edit the roles of user memberships associated with an account that they have the "manager" role to including their own. While the "Entity" dropdown select field is greyed out in the UI, an attacker can use tools which allow sending...
Important: Red Hat Security Advisory: mariadb:10.3 security, bug fix, and enhancement update
An update for the mariadb:10.3 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...