Mist 安全漏洞

Mist is an open source multi-cloud management platform from Mist, Inc. in the United States. Mist has a security vulnerability that originates from improper access control in the function createtoken in the file src/mist/api/auth/views.py...

CVE-2025-5390

A vulnerability, which was classified as critical, was found in JeeWMS up to 20250504. This affects the function filedeal of the file /systemController/filedeal.do of the component File Handler. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. Th...

JeeWMS 安全漏洞

JeeWMS is a JAVA-based warehouse management system from China Huayi JeeWMS. A security vulnerability exists in JeeWMS 20250504 and earlier versions, which originates from improper access control in the function filedeal in the file /systemController/filedeal.do...

JeeWMS 安全漏洞

JeeWMS is a JAVA-based warehouse management system from China Huayi JeeWMS. A security vulnerability exists in JeeWMS 20250504 and earlier versions, which originates from improper access control in the function dogenerateOne2Many in the file /generateController.do?dogenerateOne2Many...

CVE-2025-1792

CVE-2025-1792 affects Mattermost Server: 10.7.x <= 10.7.0, 10.5.x <= 10.5.3, 9.11.x

Improper Access Control

Apache Commons BeanUtils is vulnerable to Improper Access Control. The vulnerability is due to insecure property access due to failure to restrict access to the declaredClass property of Java enums, allowing attackers to access the classloader and potentially execute arbitrary code...

WordPress plugin Woo Slider Pro 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

Mattermost 安全漏洞

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an Improper Access Control vulnerability that stems from a failure to properly access control, which can be exploited by an attacker to view metadata about members of a public...

Unauthorized Access

com.ritense.valtimo:object-management and com.ritense.valtimo:objecten-api is vulnerable to Unauthorized Access. The vulnerability is due to improper access control and the lack of enforcement of object-management configurations, allowing unauthorized users to list, view, edit, create, or delete...

The vulnerability of VideoGrace video conferencing software, related to improper access control, allows a intruder to compromise the accessibility of protected information.

The vulnerability of VideoGrace video conferencing software is related to improper access control. Exploiting this vulnerability can allow a remote attacker to compromise the accessibility of protected information...

Apache Commons Improper Access Control vulnerability

Improper Access Control vulnerability in Apache Commons. A special BeanIntrospector class was added in version 1.9.2. This can be used to stop attackers from using the declared class property of Java enum objects to get access to the classloader. However this protection was not enabled by default...

GHSA-WXR5-93PH-8WR9 Apache Commons Improper Access Control vulnerability

Improper Access Control vulnerability in Apache Commons. A special BeanIntrospector class was added in version 1.9.2. This can be used to stop attackers from using the declared class property of Java enum objects to get access to the classloader. However this protection was not enabled by default...

CVE-2025-48734

Improper Access Control vulnerability in Apache Commons. A special BeanIntrospector class was added in version 1.9.2. This can be used to stop attackers from using the declared class property of Java enum objects to get access to the classloader. However this protection was not enabled by default...

Devolutions Server < 2024.3.17 / 2025.1.3 < 2025.1.7 Improper Access Control (DEVO-2025-0007)

The version of Devolutions Server installed on the remote host is prior to 2024.3.17.0 / 2025.1.6.0 and is, therefore, affected by a Improper Access Control vulnerability where improper access control in PAM feature in Devolutions Server allows a PAM user to self approve their PAM requests even i...

PT-2025-23085

Name of the Vulnerable Software and Affected Versions Apache Commons BeanUtils versions 1.x before 1.11.0 Apache Commons BeanUtils versions 2.x before 2.0.0-M2 Description The issue is related to improper access control in Apache Commons BeanUtils, where an attacker can access the enum's class...

Intel Xeon 6 Processor Improper Access Control Vulnerability

The Intel Xeon 6 Processor is a new generation of server processors from Intel aimed at data centers, artificial intelligence AI and high performance computing HPC. The Intel Xeon 6 Processor suffers from an improper access control vulnerability that stems from improper access control of the memo...

M2Soft CROWNIX Report & ERS 安全漏洞

M2Soft CROWNIX Report & ERS is a reporting solution with powerful reporting capabilities from M2Soft Korea. A security vulnerability exists in M2Soft CROWNIX Report & ERS versions 7.4.3.599 and earlier and 8.0.3.79 and earlier, which stems from improper access control and could lead to the takeov...

Intel Data Center GPU Flex Series Access Control Error Vulnerability

Intel Data Center GPU Flex Series is Intel's high-performance GPU solution for data centers, mainly serving cloud gaming, AI visual inference, media processing and other scenarios. The Intel Data Center GPU Flex Series suffers from an Access Control Error vulnerability that stems from improper...

Security Advisory 0119

Security Advisory 0119 . CSAF PDF Date: May 27, 2025 Revision | Date | Changes ---|---|--- 1.0 | May 27, 2025 | Initial release 1.1 | June 4, 2025 | Updated Resolutions Section and Affected EOS Version The CVE-ID tracking this issue: CVE-2025-2796 CVSSv3.1 Base Score: 5.3...

Insecure Direct Object Reference (IDOR)

in2code/femanager is vulnerable to Insecure Direct Object Reference IDOR. The vulnerability is due to improper access control on the user parameter in the newAction method of the newController, allows attackers to manipulate the parameter to access data of other frontend users...