Lucene search
K

28 matches found

NVD
NVD
added 2026/02/19 9:16 a.m.2 views

CVE-2026-25000

Missing Authorization vulnerability in Kraft Plugins Wheel of Life wheel-of-life allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wheel of Life: from n/a through = 1.2.0...

5.3CVSS0.00214EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/19 8:26 a.m.2 views

CVE-2026-25000

Missing Authorization vulnerability in Kraft Plugins Wheel of Life wheel-of-life allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wheel of Life: from n/a through = 1.2.0...

5.5AI score0.00214EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/02/19 12:0 a.m.5 views

PT-2026-20673

Missing Authorization vulnerability in Kraft Plugins Wheel of Life wheel-of-life allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wheel of Life: from n/a through = 1.2.0...

5.5AI score0.00214EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/12/31 11:6 a.m.2 views

CVE-2025-69091

Missing Authorization vulnerability in Kraft Plugins Demo Importer Plus demo-importer-plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Demo Importer Plus: from n/a through = 2.0.8...

4.3CVSS7AI score0.00152EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/30 12:30 p.m.1 views

EUVD-2025-205707

Missing Authorization vulnerability in Kraft Plugins Demo Importer Plus demo-importer-plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Demo Importer Plus: from n/a through = 2.0.8...

6.5AI score0.00152EPSS
Exploits0References2
NVD
NVD
added 2025/12/30 11:16 a.m.1 views

CVE-2025-69091

Missing Authorization vulnerability in Kraft Plugins Demo Importer Plus demo-importer-plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Demo Importer Plus: from n/a through = 2.0.8...

4.3CVSS0.00152EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.10 views

EUVD-2024-1140

Malicious code in bioql PyPI...

7.4CVSS7AI score0.01115EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-42764

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00385EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2024-27309

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - While an Apache Kafka cluster is being migrated from ZooKeeper mode to KRaft mode, in some cases ACLs will not be correctly enforced. Two preconditions are need...

7.4CVSS7AI score0.01115EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 8:57 a.m.5 views

CVE-2024-47311

Missing Authorization vulnerability in Kraft Plugins Wheel of Life wheel-of-life allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wheel of Life: from n/a through = 1.1.8...

9.8CVSS5.9AI score0.00385EPSS
Exploits0References1
NVD
NVD
added 2024/11/01 3:15 p.m.16 views

CVE-2024-47311

Missing Authorization vulnerability in Kraft Plugins Wheel of Life wheel-of-life allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wheel of Life: from n/a through = 1.1.8...

9.8CVSS0.00385EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/01 2:18 p.m.10 views

CVE-2024-47311 WordPress Wheel of Life plugin <= 1.1.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in Kraft Plugins Wheel of Life allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wheel of Life: from n/a through 1.1.8...

5.3CVSS6.9AI score0.00385EPSS
Exploits0References1
CVE
CVE
added 2024/11/01 2:18 p.m.54 views

CVE-2024-47311

CVE-2024-47311 relates to a Broken Access Control/missing authorization vulnerability in WordPress plugin Wheel of Life. Affected versions are

9.8CVSS5.9AI score0.00385EPSS
Exploits0References1Affected Software1
SUSE CVE
SUSE CVE
added 2024/06/13 3:53 a.m.1 views

SUSE CVE-2024-27309

While an Apache Kafka cluster is being migrated from ZooKeeper mode to KRaft mode, in some cases ACLs will not be correctly enforced. Two preconditions are needed to trigger the bug: 1. The administrator decides to remove an ACL 2. The resource associated with the removed ACL continues to have tw...

7.4CVSS8.3AI score0.01115EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2024/06/11 8:54 p.m.21 views

CVE-2024-27309

A flaw was found in Apache Kafka during the migration from ZooKeeper ZK to KRaft mode that affects Access Control List ACL enforcement. Specifically, when an ACL is removed from a resource and the resource retains two or more other ACLs, Kafka may incorrectly treat the resource as having only one...

6.8CVSS7.1AI score0.01115EPSS
Exploits0References3
OSV
OSV
added 2024/04/16 7:20 a.m.37 views

BIT-KAFKA-2024-27309

While an Apache Kafka cluster is being migrated from ZooKeeper mode to KRaft mode, in some cases ACLs will not be correctly enforced.Two preconditions are needed to trigger the bug:1. The administrator decides to remove an ACL2. The resource associated with the removed ACL continues to have two o...

7.4CVSS6.9AI score0.01115EPSS
Exploits0References2
Veracode
Veracode
added 2024/04/15 8:30 a.m.22 views

Incorrect Access Control

Apache Kafka is vulnerable to Incorrect Access Control. The vulnerability is due to an error in ACL management during ZK to KRaft mode migration, specifically when an ACL is removed while two or more other ACLs remain associated with the same resource. This condition results in Kafka treating the...

7.4CVSS7AI score0.01115EPSS
Exploits0References4Affected Software1
Github Security Blog
Github Security Blog
added 2024/04/12 9:33 a.m.37 views

Apache Kafka: Potential incorrect access control during migration from ZK mode to KRaft mode

While an Apache Kafka cluster is being migrated from ZooKeeper mode to KRaft mode, in some cases ACLs will not be correctly enforced. Two preconditions are needed to trigger the bug: 1. The administrator decides to remove an ACL 2. The resource associated with the removed ACL continues to have tw...

7.4CVSS6.9AI score0.01115EPSS
Exploits0References6Affected Software1
OSV
OSV
added 2024/04/12 9:33 a.m.1 views

GHSA-79VV-VP32-GPP7 Apache Kafka: Potential incorrect access control during migration from ZK mode to KRaft mode

While an Apache Kafka cluster is being migrated from ZooKeeper mode to KRaft mode, in some cases ACLs will not be correctly enforced. Two preconditions are needed to trigger the bug: 1. The administrator decides to remove an ACL 2. The resource associated with the removed ACL continues to have tw...

7.6CVSS6.9AI score0.01115EPSS
Exploits0References6
OSV
OSV
added 2024/04/12 7:15 a.m.6 views

CVE-2024-27309

While an Apache Kafka cluster is being migrated from ZooKeeper mode to KRaft mode, in some cases ACLs will not be correctly enforced. Two preconditions are needed to trigger the bug: 1. The administrator decides to remove an ACL 2. The resource associated with the removed ACL continues to have tw...

7.4CVSS9.6AI score
Exploits0References3
Rows per page
Query Builder