Lucene search
+L

22130 matches found

Cvelist
Cvelist
added 2026/06/15 1:3 p.m.43 views

CVE-2025-64215 WordPress MasterStudy LMS Pro plugin < 4.7.16 - Broken Access Control vulnerability

Missing Authorization vulnerability in StylemixThemes MasterStudy LMS Pro allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects MasterStudy LMS Pro: from n/a before 4.7.16...

6.5CVSS0.00196EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/15 1:3 p.m.12 views

EUVD-2025-210138

Missing Authorization vulnerability in StylemixThemes MasterStudy LMS Pro allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects MasterStudy LMS Pro: from n/a before 4.7.16...

6.5CVSS5.2AI score0.00196EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/06/15 12:23 p.m.44 views

CVE-2026-5230 Improper Access Control in Mia Technologies' Pizzy Library

Improper Access Control, Missing Authorization vulnerability in MIA Technology Inc. Pizzy Library allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Pizzy Library: from 1.0.0.26250 before 1.3.9.26250...

7.1CVSS0.00174EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/15 12:23 p.m.33 views

CVE-2026-5230

CVE-2026-5230 concerns Mia Technologies’ Pizzy Library, with an improper access control vulnerability affecting 1.0.0.26250 through before 1.3.9.26250. The CVSS 3.1 base metrics indicate a Network attack vector, Low attack complexity, Low privileges required, No user interaction, Unchanged scope,...

7.1CVSS5.3AI score0.00174EPSS
SaveExploits0References1
NVD
NVD
added 2026/06/15 12:16 p.m.17 views

CVE-2026-34024

The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains missing authorization checks on multiple web application endpoints. An authenticated attacker with minimal privileges can access endpoints that are not visible in the frontend but remain directly reachable. This allow...

8.6CVSS0.00304EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2026/06/15 10:3 a.m.48 views

CVE-2026-34024 Missing authorization checks in Wertheim SafeController Software allow low-privileged users to access restricted functions

The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains missing authorization checks on multiple web application endpoints. An authenticated attacker with minimal privileges can access endpoints that are not visible in the frontend but remain directly reachable. This allow...

8.6CVSS0.00304EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2026/06/15 10:3 a.m.11 views

CVE-2026-34024 Missing authorization checks in Wertheim SafeController Software allow low-privileged users to access restricted functions

The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains missing authorization checks on multiple web application endpoints. An authenticated attacker with minimal privileges can access endpoints that are not visible in the frontend but remain directly reachable. This allow...

8.6CVSS5.4AI score0.00304EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2026/06/15 12:0 a.m.32 views

PT-2026-49195

Name of the Vulnerable Software and Affected Versions Wertheim SafeController Software version 6.15.8328.28014 Description Missing authorization checks on multiple web application endpoints allow an authenticated attacker with minimal privileges to access hidden endpoints. This enables the...

8.6CVSS5.6AI score0.00304EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2026/06/15 12:0 a.m.24 views

PT-2026-49234

Improper Access Control, Missing Authorization vulnerability in MIA Technology Inc. Pizzy Library allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Pizzy Library: from 1.0.0.26250 before 1.3.9.26250...

7.1CVSS5.2AI score0.00174EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/06/12 11:9 p.m.10 views

Missing Authorization

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Missing Authorization via the trusted-proxy Control UI WebSocket process. An attacker can gain unauthorized administrative privileges by connecting as an unpaired or restricted client and...

8.8CVSS5.9AI score0.00289EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/06/12 8:8 p.m.8 views

Missing Authorization

Overview typo3/cms-form is a Form Library, Plugin and Editor Affected versions of this package are vulnerable to Missing Authorization in the processing of form definition files by the Form Framework. An attacker can gain administrative privileges by uploading and using maliciously crafted files...

8.6CVSS6.1AI score0.00238EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/06/12 8:7 p.m.18 views

EUVD-2026-35392

TYPO3 CMS: Destructive Actions on File Mount Folders...

7.2CVSS5.2AI score0.00238EPSS
SaveExploits0References6
Snyk
Snyk
added 2026/06/12 8:7 p.m.7 views

Missing Authorization

Overview typo3/cms-core is a free open source enterprise content management system. Affected versions of this package are vulnerable to Missing Authorization due to missing authorization checks when handling file mount folders. An attacker can perform unauthorized write operations, such as moving...

7.6CVSS5.3AI score0.00238EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/06/12 7:32 p.m.6 views

Missing Authorization

Overview typo3/cms-core is a free open source enterprise content management system. Affected versions of this package are vulnerable to Missing Authorization via the upload for form definition files with mixed-case extensions. An attacker can escalate privileges by uploading maliciously crafted...

8.8CVSS6AI score0.00253EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/06/12 7:32 p.m.14 views

Missing Authorization

Overview typo3/cms-form is a Form Library, Plugin and Editor Affected versions of this package are vulnerable to Missing Authorization via the upload for form definition files with mixed-case extensions. An attacker can escalate privileges by uploading maliciously crafted files that execute...

8.8CVSS6.1AI score0.00253EPSS
SaveExploits0References3
CVE
CVE
added 2026/06/12 6:21 p.m.37 views

CVE-2026-50244

CVE-2026-50244 affects the Naxclow IoT Platform. The registration endpoint accepts signed requests with a batch prefix and a caller-supplied account identifier without ownership validation, allowing an attacker to mint new sequential device identifiers and read the batch’s current high-water coun...

6.9CVSS5.3AI score0.00221EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/06/12 6:10 p.m.41 views

CVE-2026-50108 Naxclow IoT Platform Missing Authorization

The Naxclow platform API that returns device relay registration details exposes a persistent credential without verifying that the requester is the legitimate device or owner. An actor able to present a platform-valid request signature can retrieve credentials for arbitrary devices and register o...

8.7CVSS0.00306EPSS
SaveExploits0References2
CVE
CVE
added 2026/06/12 6:10 p.m.28 views

CVE-2026-50108

The CVE-2026-50108 entry concerns the Naxclow IoT Platform API where device relay registration details are returned with a persistent credential without verifying the requester’s identity. An actor who can present a platform-valid request signature can retrieve credentials for arbitrary devices a...

8.7CVSS5.5AI score0.00306EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/06/12 6:10 p.m.26 views

CVE-2026-50108 Naxclow IoT Platform Missing Authorization

The Naxclow platform API that returns device relay registration details exposes a persistent credential without verifying that the requester is the legitimate device or owner. An actor able to present a platform-valid request signature can retrieve credentials for arbitrary devices and register o...

8.7CVSS5.5AI score0.00306EPSS
SaveExploits0References2
NVD
NVD
added 2026/06/12 4:16 p.m.17 views

CVE-2026-45830

A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to...

8.8CVSS0.00345EPSS
SaveExploits0References4
Rows per page
Query Builder