33 matches found
BIT-JOOMLA-2026-73371 Joomla! Core - [20260808] - Improper ACL checks for batch copy actions in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2
Joomla! Core - 20260808 - Improper ACL checks for batch copy actions in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper access check allows unauthorized users to perform copy batch operations on uneditable items...
BIT-JOOMLA-2026-72531 Joomla! Core - [20260804] - Improper ACL checks for custom fields webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2
Joomla! Core - 20260804 - Improper ACL checks for custom fields webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper access check allows unauthorized users to create fields for inaccessible components...
PT-2026-84385
Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description Incorrect authorization in Kibana Entity Analytics allows an authenticated user with only read-level Security feature access and no Elasticsearch privileges to stop the recurring Privilege...
CVE-2026-19616
Missing Authorization vulnerability in TBC Technology Inc. KitLogistic allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects KitLogistic: before v2.2.2...
CVE-2026-72531
Joomla! Core - 20260804 - Improper ACL checks for custom fields webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper access check allows unauthorized users to create fields for inaccessible components...
CVE-2026-73371
Joomla! Core - 20260808 - Improper ACL checks for batch copy actions in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper access check allows unauthorized users to perform copy batch operations on uneditable items...
CVE-2026-72532
Joomla! Core - 20260806 - Improper ACL checks for category webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper access check allows unauthorized users to create categories via webservices endpoints...
CVE-2026-72532
Joomla! Core - 20260806 - Improper ACL checks for category webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper access check allows unauthorized users to create categories via webservices endpoints...
PT-2026-77199
Name of the Vulnerable Software and Affected Versions Joomla! Core versions 5.1.0 through 5.4.7 Joomla! Core versions 6.0.0 through 6.1.2 Description An improper access control check allows the injection of contact information for inaccessible contact items into schema.org snippets. Access Contro...
CVE-2026-72673 Incorrect Authorization in Kibana Leading to Unauthorized Deletion of Synthetics Private Locations
Incorrect Authorization CWE-863 in Kibana can lead to unauthorized deletion of Synthetics private locations via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. Synthetics private locations can be shared with more than one space, and deleting one removes it from every space it is...
CVE-2026-67284 Joomla Extension - tabaoca.org - Improper ACL checks allow file operations in Cotton Cloud < 2.0.2
Joomla Extension - tabaoca.org - Improper ACL implementation allows file operations in Cotton Cloud 2.0.3 - Authenticated users could perform various file-related operations read, delete, overwrite, re-assign permissions on files owned by other users...
CVE-2026-67284
CVE-2026-67284 affects the Joomla extension from tabaoca.org, with an improper ACL implementation that allows authenticated users to perform file operations (read, delete, overwrite, re-assign permissions) on files owned by other users in Cotton Cloud versions older than 2.0.3. The incident is do...
CVE-2026-67283 Joomla Extension - tabaoca.org - Improper ACL implementation allows allow file operations in Cotton Cloud < 2.0.2
Joomla Extension - tabaoca.org - Improper ACL implementation allows file operations in Cotton Cloud 2.0.2 - Unauthenticated users could perform various file-related operations read, delete, overwrite, re-assign permissions on every file managed within the extension...
CVE-2026-67283
Joomla Extension - tabaoca.org - Improper ACL implementation allows file operations in Cotton Cloud 2.0.2 - Unauthenticated users could perform various file-related operations read, delete, overwrite, re-assign permissions on every file managed within the extension...
GHSA-9MR8-PWPW-3J2W Microsoft Security Advisory CVE-2026-62909 – .NET Elevation of Privilege Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET diagnostics IPC. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A missing error check in .NET causes an...
[20260809] - Core - Improper ACL checks when injection schema.org contact data
An improper access check injects contact information for unaccessible contact items into schema.org snippets...
EUVD-2022-27295
Malicious code in bioql PyPI...
EUVD-2022-27289
Malicious code in bioql PyPI...