Lucene search
+L

6040 matches found

CVE
CVE
added 2026/01/19 11:2 p.m.34 views

CVE-2026-1193

Summary of CVE-2026-1193 (MineAdmin) : MineAdmin 1.x/2.x is affected by an improper authorization issue in an unknown function of the file /system/cache/view within the View Interface component. The root cause suggests misimplementation of access controls, enabling remote exploitation. Multiple s...

8.8CVSS5.1AI score0.0032EPSS
SaveExploits1References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/19 11:2 p.m.6 views

CVE-2026-1193

A vulnerability was identified in MineAdmin 1.x/2.x. The impacted element is an unknown function of the file /system/cache/view of the component View Interface. The manipulation leads to improper authorization. The attack is possible to be carried out remotely. The exploit is publicly available a...

8.8CVSS5AI score0.0032EPSS
SaveExploits1References4
OSV
OSV
added 2026/01/19 7:16 a.m.9 views

CVE-2026-1141

A vulnerability was identified in PHPGurukul News Portal 1.0. The affected element is an unknown function of the file /admin/add-subadmins.php of the component Add Sub-Admin Page. Such manipulation leads to improper authorization. The attack can be launched remotely. The exploit is publicly...

8.8CVSS5.4AI score0.003EPSS
SaveExploits1References6
ATTACKERKB
ATTACKERKB
added 2026/01/19 6:2 a.m.2 views

CVE-2026-1141

A vulnerability was identified in PHPGurukul News Portal 1.0. The affected element is an unknown function of the file /admin/add-subadmins.php of the component Add Sub-Admin Page. Such manipulation leads to improper authorization. The attack can be launched remotely. The exploit is publicly...

8.8CVSS5AI score0.003EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/19 6:2 a.m.5 views

CVE-2026-1141 PHPGurukul News Portal Add Sub-Admin add-subadmins.php improper authorization

A vulnerability was identified in PHPGurukul News Portal 1.0. The affected element is an unknown function of the file /admin/add-subadmins.php of the component Add Sub-Admin Page. Such manipulation leads to improper authorization. The attack can be launched remotely. The exploit is publicly...

6.5CVSS5.2AI score0.003EPSS
SaveExploits1References6
CVE
CVE
added 2026/01/19 6:2 a.m.27 views

CVE-2026-1141

CVE-2026-1141 affects PHPGurukul News Portal 1.0, specifically the file /admin/add-subadmins.php where an unknown function allows improper authorization. The vulnerability enables remote attacks and has publicly available exploits. Multiple sources confirm the issue and reference the same compone...

8.8CVSS6.4AI score0.003EPSS
SaveExploits1References6Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/19 12:22 a.m.15 views

CVE-2026-1106

A security flaw has been discovered in Chamilo LMS up to 2.0.0 Beta 1. This issue affects the function deleteLegal of the file src/CoreBundle/Controller/SocialController.php of the component Legal Consent Handler. Performing a manipulation of the argument userId results in improper authorization...

5.5CVSS6.4AI score0.00393EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/19 12:0 a.m.19 views

PT-2026-3514

Name of the Vulnerable Software and Affected Versions MineAdmin versions 1.x and 2.x Description A security issue exists in MineAdmin that allows for improper authorization. The issue is related to an unknown function within the /system/cache/view file of the View Interface component. This issue ...

6.5CVSS6.4AI score0.0032EPSS
SaveExploits1References7
Vulnrichment
Vulnrichment
added 2026/01/18 6:2 a.m.5 views

CVE-2026-1112 Sanluan PublicCMS Trade Address Deletion Endpoint TradeAddressController.java delete improper authorization

A vulnerability was found in Sanluan PublicCMS up to 5.202506.d. Affected is the function delete of the file publiccms-trade/src/main/java/com/publiccms/controller/web/trade/TradeAddressController.java of the component Trade Address Deletion Endpoint. Performing a manipulation of the argument ids...

5.5CVSS5.2AI score0.00394EPSS
SaveExploits1References4
CVE
CVE
added 2026/01/18 6:2 a.m.33 views

CVE-2026-1112

Sanluan PublicCMS (versions up to 5.202506.d) is affected in the Trade Address Deletion Endpoint. The vulnerability lies in the delete function of TradeAddressController.java, where manipulation of the ids argument enables improper authorization, allowing a remote attack. The exploit has been pub...

8.1CVSS6.4AI score0.00394EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2026/01/18 6:2 a.m.35 views

CVE-2026-1112 Sanluan PublicCMS Trade Address Deletion Endpoint TradeAddressController.java delete improper authorization

A vulnerability was found in Sanluan PublicCMS up to 5.202506.d. Affected is the function delete of the file publiccms-trade/src/main/java/com/publiccms/controller/web/trade/TradeAddressController.java of the component Trade Address Deletion Endpoint. Performing a manipulation of the argument ids...

5.5CVSS0.00394EPSS
SaveExploits1References4
NVD
NVD
added 2026/01/18 1:15 a.m.10 views

CVE-2026-1106

A security flaw has been discovered in Chamilo LMS up to 2.0.0 Beta 1. This issue affects the function deleteLegal of the file src/CoreBundle/Controller/SocialController.php of the component Legal Consent Handler. Performing a manipulation of the argument userId results in improper authorization...

5.5CVSS0.00393EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/01/18 12:2 a.m.29 views

CVE-2026-1106 Chamilo LMS Legal Consent SocialController.php deleteLegal improper authorization

A security flaw has been discovered in Chamilo LMS up to 2.0.0 Beta 1. This issue affects the function deleteLegal of the file src/CoreBundle/Controller/SocialController.php of the component Legal Consent Handler. Performing a manipulation of the argument userId results in improper authorization...

5.5CVSS0.00393EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/01/18 12:2 a.m.9 views

CVE-2026-1106

A security flaw has been discovered in Chamilo LMS up to 2.0.0 Beta 1. This issue affects the function deleteLegal of the file src/CoreBundle/Controller/SocialController.php of the component Legal Consent Handler. Performing a manipulation of the argument userId results in improper authorization...

5.5CVSS5.1AI score0.00393EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/01/18 12:2 a.m.6 views

CVE-2026-1106 Chamilo LMS Legal Consent SocialController.php deleteLegal improper authorization

A security flaw has been discovered in Chamilo LMS up to 2.0.0 Beta 1. This issue affects the function deleteLegal of the file src/CoreBundle/Controller/SocialController.php of the component Legal Consent Handler. Performing a manipulation of the argument userId results in improper authorization...

5.5CVSS5.2AI score0.00393EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/01/18 12:0 a.m.25 views

PT-2026-3374

A security flaw has been discovered in Chamilo LMS up to 2.0.0 Beta 1. This issue affects the function deleteLegal of the file src/CoreBundle/Controller/SocialController.php of the component Legal Consent Handler. Performing a manipulation of the argument userId results in improper authorization...

5.5CVSS6.5AI score0.00393EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/01/18 12:0 a.m.16 views

PT-2026-3381

Name of the Vulnerable Software and Affected Versions Sanluan PublicCMS versions up to 5.202506.d Description A flaw exists in Sanluan PublicCMS that allows for improper authorization. This issue is related to the delete function within the file...

8.1CVSS5.4AI score0.00394EPSS
SaveExploits1References10
RedhatCVE
RedhatCVE
added 2026/01/17 10:29 p.m.7 views

CVE-2026-20960

Improper authorization in Microsoft Power Apps allows an authorized attacker to execute code over a network...

8CVSS7.3AI score0.00467EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/01/17 12:30 a.m.8 views

EUVD-2026-3112

Improper authorization in Microsoft Power Apps allows an authorized attacker to execute code over a network...

8CVSS6.8AI score0.00467EPSS
SaveExploits0References2
OSV
OSV
added 2026/01/16 10:16 p.m.8 views

CVE-2026-20960

Improper authorization in Microsoft Power Apps allows an authorized attacker to execute code over a network...

8CVSS5.9AI score0.00467EPSS
SaveExploits0References1
Rows per page
Query Builder