Workers Component Protected Information Access

The vulnerability of the Workers component in Google Chrome and Microsoft Edge is related to lack of access control. Exploiting this vulnerability can allow a malicious actor to gain access to protected information through a specially created HTML page...

EUVD-2026-94786

A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0. The HTTPS service fails to properly enforce authentication or access control checks on incoming requests. An unauthenticated attacker with network access can issue control commands, alter cluster states,...

Gitea RSS Atom Disclosure

The vulnerability of RSS and Atom feed handlers in the Git repository management system Gitea is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to disclose protected information...

Gitea Path Traversal

The vulnerability of the Git repository management system Gitea’s path/owner/repo is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to expose the protected information...

CVE-2026-82932

mH-DEVELOPER smart home module does not load any firewall rules at startup. This leaves all listening services, including SSH, HTTP, WebSocket, and Node-RED, fully exposed on the LAN without access control. Any client on the same network can reach every service. This issue was fixed in...

ROS-20260925-73-0183

The vulnerability of the Linux operating system’s kernel is related to lack of access control. Exploiting this vulnerability can allow an attacker to cause a service failure...

Enterprise Infrastructure Security Full Control

The vulnerability of the Enterprise Infrastructure Security component of the JD Edwards EnterpriseOne Tools management system is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to gain full control over the application...

EUVD-2025-6862

Malicious code in bioql PyPI...

CVE-2022-24972

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n 5553 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which...

CVE-2025-48695: Incorrect Privilege Assignment

An issue was discovered in CyberDAVA before 1.1.20. A privilege escalation vulnerability allows a low-privileged user to escalate their privilege by abusing the following API due to the lack of access control: /api/v2/users/user/ /role/ROLE/ admin access can be achieved...

CVE-2024-57698

An issue in modernwms v.1.0 allows an attacker view the MD5 hash of the administrator password and other attributes without authentication, even after initial configuration and password change. This happens due to excessive exposure of information and the lack of adequate access control on the...

CVE-2024-2292

Due to a lack of access control, unauthorized users are able to view and modify information pertaining to other users...

PT-2025-12259

Name of the Vulnerable Software and Affected Versions lunary-ai/lunary versions prior to 1.4.26 Description The issue concerns a lack of access control in the checklists.post endpoint, allowing users to create or modify checklists without proper permission checks. This enables unauthorized users ...

PT-2024-12194

Name of the Vulnerable Software and Affected Versions Enel X Waybox versions prior to the fixed version Description The issue is related to a lack of access control in the web management application, allowing system logs to be accessed. An attacker can obtain sensitive information, including Wi-F...

CVE-2023-29114: Exposure of Sensitive Information to an Unauthorized Actor

System logs could be accessed through web management application due to a lack of access control. An attacker can obtain the following sensitive information: • Wi-Fi access point credentials to which the EV charger can connect. • APN web address and credentials. • IPSEC credentials...

Fullscreen Component Google Chrome Microsoft Edge Unauthorized Access

The vulnerability of the Fullscreen component in Google Chrome and Microsoft Edge is related to lack of access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to limited functionality...

CVE-2023-41965: Storage of Sensitive Data in a Mechanism without Access Control

Sending some requests in the web application of the vulnerable device allows information to be obtained due to the lack of security in the authentication process...

Makves DCAP Access Control Bypass

The vulnerability of the Makves DCAP software is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

CVE-2023-2665

Storage of Sensitive Data in a Mechanism without Access Control in GitHub repository francoisjacquet/rosariosis prior to 11.0...

Design/Logic Flaw

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n 5553 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which...