CVE-2026-55146

The LORIS (Longitudinal Online Research and Imaging System) web application contains an incorrect access check in its issue_tracker backend. Specifically, in versions 16.0.0 to 27.0.3 and 28.0.0 to 28.0.1 , the backend fails to verify edit permissions even though the frontend restricts them. This...

CVE-2026-55147

The LORIS (Longitudinal Online Research and Imaging System) web application contains a security flaw where the API for the imaging_browser module fails to verify frontend permissions. This missing authorization allows an authenticated API caller to modify imaging data without the necessary privil...

EUVD-2013-2401

Malware in sbrugna...

CVE-2025-7106 Authorization Bypass due to Incorrect Access Control in danny-avila/librechat

danny-avila/librechat is affected by an authorization bypass vulnerability due to improper access control checks. The checkAccess function in api/server/middleware/roles/access.js uses permissions.some to validate permissions, which incorrectly grants access if only one of multiple required...

SUSE CVE-2018-16539

In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use incorrect access checking in temp file handling to disclose contents of files on the system otherwise not readable...

RHEL 8 : java-1.8.0-openjdk (RHSA-2022:0304)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0304 advisory. The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security...

RHEL 7 : java-11-openjdk (RHSA-2022:0204)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0204 advisory. The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Security Fixe...