9586 matches found
PT-2026-79331
Name of the Vulnerable Software and Affected Versions Apache CloudStack versions 4.15.0.0 through 4.20.3.0 Apache CloudStack versions 4.21.0.0 through 4.22.1.0 Description Improper authorization exists for CRUD Create, Read, Update, Delete operations on Project Roles and Project Role permissions...
GHSA-H54R-XQ46-QWQM Wagtail: Improper restriction handling on Documents and Images chosen endpoints
Impact The Documents and Images chooser's chosen endpoint incorrectly listed items for which the user has not been granted choose permission. A user with access to the Wagtail admin could see the filename and name and URLs of documents and images in those collections. The vulnerability is not...
CVE-2026-66001 Frappe: Improper Authorization in OAuth2 Consent Endpoint
Frappe is a full-stack web application framework. Prior to 15.114.0 and 16.26.0, the approve and authorize functions in frappe/integrations/oauth2.py allow the OAuth2 consent flow to proceed without restricting approve to POST, without a csrftoken in...
CVE-2026-66001 Frappe: Improper Authorization in OAuth2 Consent Endpoint
Frappe is a full-stack web application framework. Prior to 15.114.0 and 16.26.0, the approve and authorize functions in frappe/integrations/oauth2.py allow the OAuth2 consent flow to proceed without restricting approve to POST, without a csrftoken in...
CVE-2026-77036
A vulnerability was found in elunez eladmin up to 2.7. The impacted element is the function EmailController/AliPayController/GeneratorController/GenConfigController. The manipulation results in improper authorization. The attack can be launched remotely. The exploit has been made public and could...
CVE-2026-77036 elunez eladmin GenConfigController improper authorization
A vulnerability was found in elunez eladmin up to 2.7. The impacted element is the function EmailController/AliPayController/GeneratorController/GenConfigController. The manipulation results in improper authorization. The attack can be launched remotely. The exploit has been made public and could...
CVE-2026-77036 elunez eladmin GenConfigController improper authorization
A vulnerability was found in elunez eladmin up to 2.7. The impacted element is the function EmailController/AliPayController/GeneratorController/GenConfigController. The manipulation results in improper authorization. The attack can be launched remotely. The exploit has been made public and could...
CVE-2026-77036 elunez eladmin GenConfigController improper authorization
A vulnerability was found in elunez eladmin up to 2.7. The impacted element is the function EmailController/AliPayController/GeneratorController/GenConfigController. The manipulation results in improper authorization. The attack can be launched remotely. The exploit has been made public and could...
EUVD-2026-63491
A vulnerability was found in elunez eladmin up to 2.7. The impacted element is the function EmailController/AliPayController/GeneratorController/GenConfigController. The manipulation results in improper authorization. The attack can be launched remotely. The exploit has been made public and could...
CVE-2026-77036
elunez eladmin up to version 2.7 is affected by an improper authorization vulnerability in the EmailController , AliPayController , GeneratorController , and GenConfigController functions. A remote attacker with low privileges can exploit this over the network without user interaction, resulting ...
CVE-2026-76999
A vulnerability was detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This affects the function addgrade of the file /index.php. Performing a manipulation of the argument studentid results in improper authorization. The attack can be initiated remotely...
CVE-2026-76999
SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0 is affected by an improper authorization vulnerability in the add_grade function of /index.php. Manipulating the student_id argument allows a remote, low-privilege attacker to bypass authorization controls, resulting in ...
EUVD-2026-63401
A vulnerability was detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This affects the function addgrade of the file /index.php. Performing a manipulation of the argument studentid results in improper authorization. The attack can be initiated remotely...
CVE-2026-76999 SourceCodester CET Automated Grading System with AI Predictive Analytics index.php add_grade improper authorization
A vulnerability was detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This affects the function addgrade of the file /index.php. Performing a manipulation of the argument studentid results in improper authorization. The attack can be initiated remotely...
CVE-2026-76999 SourceCodester CET Automated Grading System with AI Predictive Analytics index.php add_grade improper authorization
A vulnerability was detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This affects the function addgrade of the file /index.php. Performing a manipulation of the argument studentid results in improper authorization. The attack can be initiated remotely...
CVE-2026-16925
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to achieve privilege escalation due to improper authorization...
CVE-2026-16925 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to achieve privilege escalation due to improper authorization...
CVE-2026-16925
CVE-2026-16925 is a privilege escalation vulnerability in IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 , caused by improper authorization . A local attacker with low privileges can escalate to higher privileges, resulting in high impact on integrity and availability (CVSS 3.1: 7.1 HIGH ). CISA SSVC ...