71515 matches found
CVE-2022-45451
Introducción Especificaciones del sistema: Windows 10 1809 x64 EN Objetivo: Acronis Home Cyber Protect Acronis Cyber Protect Descripción de la vulnerabilidad El controlador de escaneo antimalware "ngscan" de Acronis sufre de un control de acceso incorrecto / inadecuado aplicado al puerto de...
CVE-2023-23752
CVE-2023-23752 Joomla Unauthorized Access Vulnerability CVE-2023-23752 Vulnerability Description Joomla is an open-source content management system CMS, written in PHP, supporting multiple database systems such as MySQL, MSSQL, and PostgreSQL. Improper access restrictions lead to unauthorized...
Webmin-CVE-2022-0824-revshell
Webmin-CVE-2022-0824-revshell Descripción de la Vulnerabilidad Webmin 1.984 y anteriores - Exploit de privilegios del Administrador de Archivos CVE-2022-0824 y CVE-2022-0829 Usuarios de Webmin con menos privilegios que no tengan restricciones configuradas en el módulo del Administrador de Archivo...
CVE-2021-24006-Fortimanager-Exploit
CVE-2021-24006 – FortiManager Control de Acceso Inadecuado Exploit PoC PoC Prueba de Concepto - Solo para uso educativo Exploit de acceso indebido al SD-WAN Orchestrator en FortiManager, explotando falla de control de acceso CWE-284. Descripción La vulnerabilidad CVE-2021-24006 afecta a...
CVE-2026-102795
Improper Access Control vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fixes the issue. This CVE supersedes CVE-2026-41920, whose record...
CVE-2026-102795
Improper Access Control vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fixes the issue. This CVE supersedes CVE-2026-41920, whose record...
CVE-2026-102795 Apache Traffic Server: SNI to Host header matching policy is not properly enforced
Improper Access Control vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fixes the issue. This CVE supersedes CVE-2026-41920, whose record...
CVE-2026-102795 Apache Traffic Server: SNI to Host header matching policy is not properly enforced
Improper Access Control vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fixes the issue. This CVE supersedes CVE-2026-41920, whose record...
EUVD-2026-91766
Improper Access Control vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fixes the issue. This CVE supersedes CVE-2026-41920, whose record...
CVE-2026-51904
SuperAGI up to v0.0.14 contains an improper access control vulnerability in the agent execution controller. In affected source snapshots, createagentexecution and createagentrun in superagi/controllers/agentexecution.py accept a caller-supplied agentid and fail to verify that the referenced agent...
EUVD-2026-91717
MISP contains an improper access control vulnerability in its attribute search and paginated attribute view endpoints. When a user queries for soft-deleted attributes e.g., via the deleted-attributes search or the paginated attribute listing, the application returned soft-deleted attributes...
CVE-2022-24924
Vulnerabilidad de control de acceso inadecuado en LiveWallpaperService CVE-2022-24924SVE-2021-24089 Versión de Windows probada: Windows 10 20H2 Build 19042.1348 64bit Versión de Live Wallpaper: 3.0.9.0 o anterior Existe un LiveWallpaperService que funciona por defecto en los portátiles Samsung,...
CVE-2024-6782
CVE-2024-6782 Calibre ejecución remota de código CVE-2024-6782. El control de acceso inadecuado en Calibre 6.9.0 7.14.0 permite a atacantes no autenticados lograr la ejecución remota de código...
CVE-2026-25049
🚨 CVE-2026-25049 – Divulgación de configuración no autenticada en n8n 📌 Resumen ID CVE: CVE-2026-25049 Software afectado: n8n Gravedad: Crítica Categoría: Control de acceso inadecuado / Divulgación de información Esta vulnerabilidad permite acceso no autenticado a datos de configuración internos ...
CVE-2026-21140
Improper access control in ManagedProvisioning prior to SMR Sep-2026 Release 1 allows local attackers to install arbitrary applications...
Adobe Connect < 12.1.5 - Local File Disclosure
Adobe Connect versions 11.4.5 and earlier, 12.1.5 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the integrity of a minor feature. Exploitation of this issue does not...
VMware vRealize Log Insight - Improper Access Control to RCE
The vRealize Log Insight contains a broken access control vulnerability. An unauthenticated malicious actor can remotely inject code into sensitive files of an impacted appliance which can result in remote code execution. id: CVE-2022-31704 info: name: VMware vRealize Log Insight - Improper Acces...
CVE-2026-21140
Improper access control in ManagedProvisioning prior to SMR Sep-2026 Release 1 allows local attackers to install arbitrary applications...