12 matches found
EUVD-2026-65332
The frontend management plugin attributed a newly created event to the submitting user's organizer record only when the request supplied no organizer of its own. The accompanying permission check confirmed only that the submitting user held any organizer role. A user with frontend event managemen...
CVE-2026-77144 Broken Access Control in extension "Events 2" (events2)
The frontend management plugin attributed a newly created event to the submitting user's organizer record only when the request supplied no organizer of its own. The accompanying permission check confirmed only that the submitting user held any organizer role. A user with frontend event managemen...
CVE-2026-77144 Broken Access Control in extension "Events 2" (events2)
The frontend management plugin attributed a newly created event to the submitting user's organizer record only when the request supplied no organizer of its own. The accompanying permission check confirmed only that the submitting user held any organizer role. A user with frontend event managemen...
CVE-2026-77145 Broken Access Control in extension "Events 2" (events2)
The permission check for the frontend management update flow verified a different event than the one the request went on to modify. A user with frontend event management access could therefore modify events belonging to other organizers...
CVE-2026-77145 Broken Access Control in extension "Events 2" (events2)
The permission check for the frontend management update flow verified a different event than the one the request went on to modify. A user with frontend event management access could therefore modify events belonging to other organizers...
CVE-2026-77145
CVE-2026-77145 is a broken access control vulnerability in the TYPO3 extension Events 2 (events2) . The root cause is a flawed permission check in the frontend management update flow: it verified a different event than the one the request actually modified. As a result, a user with frontend event...
CVE-2026-77144: Improperly Controlled Modification of Dynamically-Determined Object Attributes
The frontend management plugin attributed a newly created event to the submitting user's organizer record only when the request supplied no organizer of its own. The accompanying permission check confirmed only that the submitting user held any organizer role. A user with frontend event managemen...
PT-2026-81245
Name of the Vulnerable Software and Affected Versions Events 2 affected versions not specified Description Broken access control exists in the frontend management update flow. The system verifies a different event than the one actually being modified, allowing a user with frontend event managemen...
CVE-2026-77145: Authorization Bypass Through User-Controlled Key
The permission check for the frontend management update flow verified a different event than the one the request went on to modify. A user with frontend event management access could therefore modify events belonging to other organizers...
CVE-2017-16648
The dvb frontend management subsystem in the Linux kernel contains a use-after-free which can allow a malicious user to write to memory that may be assigned to another kernel structure. This could create memory corruption, panic, or possibly other side affects...
kernel: Use-after-free in drivers/media/dvb-core/dvb_frontend.c
The dvb frontend management subsystem in the Linux kernel contains a use-after-free which can allow a malicious user to write to memory that may be assigned to another kernel structure. This could create memory corruption, panic, or possibly other side affects...
