117543 matches found
EUVD-2026-90597
Missing authorization in module data retrieval allows unauthorized cross-group access to module history. Affects Pandora FMS from 777 onwards...
BIT-ELK-2026-78582 Missing Authorization in Kibana Leading to Unauthorized Deletion of Data
Missing Authorization CWE-862 in Kibana can lead to unauthorized deletion of data via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180. An authenticated user holding Synthetics privileges scoped to a single Kibana space could permanently delete Synthetics monitors that a...
CVE-2026-103495
In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed reloading of translation catalogs...
CVE-2026-103495
Versions of JetBrains YouTrack prior to 2026.2.19422 are vulnerable to a missing authorisation flaw. This security weakness allows for the unauthorized reloading of translation catalogs . The CVSS 3.1 score is 4.3 (Medium) , with a network attack vector and low complexity. Exploitation details an...
EUVD-2026-90586
In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed reloading of translation catalogs...
CVE-2026-103495
In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed reloading of translation catalogs...
CVE-2026-103488
In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed authenticated users to add themselves to project teams and access restricted issues...
CVE-2026-103488
JetBrains YouTrack versions prior to 2026.2.19422 are vulnerable to a missing authorization flaw. This vulnerability allows authenticated users to perform unauthorized actions by adding themselves to project teams, subsequently granting them access to restricted issues . Exploitation details are ...
EUVD-2026-90579
In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed authenticated users to add themselves to project teams and access restricted issues...
CVE-2026-103488
In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed authenticated users to add themselves to project teams and access restricted issues...
CLEANSTART-2024-BZ87721 Missing Authorization in GitHub repository gogs/gogs prior to 0
Security vulnerability affects the gogs package. Missing Authorization in GitHub repository gogs/gogs prior to 0...
WordPress Redux Framework plugin <= 4.5.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Deletion vulnerability
Missing Authorization to Authenticated Subscriber+ Arbitrary Attachment Deletion vulnerability discovered by Eunho Kim in WordPress Plugin Redux Framework versions = 4.5.14...
WordPress Simply Schedule Appointments plugin <= 1.6.12.32 - Missing Authorization to Unauthenticated Sensitive Information Exposure and Arbitrary Appointment Deletion vulnerability
Missing Authorization to Unauthenticated Sensitive Information Exposure and Arbitrary Appointment Deletion vulnerability discovered by Md. Moniruzzaman Prodhan NomanProdhan in WordPress Plugin Simply Schedule Appointments versions = 1.6.12.32...
CVE-2026-82825
Hitachi Coding Software Suite contains a vulnerability related to Missing Authentication for Critical Function. This allows an unauthenticated attacker to invoke a critical API, potentially leading to unauthorized retrieval or alteration of sensitive information, or unauthorized manipulation. Thi...
CVE-2026-76143
A missing authorization vulnerability in Genian SSL PNS allows an attacker to bypass multi-factor authentication by manipulating a login request parameter...
CVE-2026-103538
A security flaw has been discovered in ZongXR SuperMarket 1.0.0.0. Affected by this issue is the function OrderController.deleteOrder of the file order/src/main/java/com/supermarket/order/controller/OrderController.java of the component Order Deletion Endpoint. Performing a manipulation of the...
CVE-2026-103539
A weakness has been identified in ZongXR SuperMarket 1.0.0.0. This affects the function startBuy of the file instant-buy/src/main/java/com/supermarket/instantbuy/controller/InstantBuyController.java of the component Instant Buy. Executing a manipulation of the argument Username can lead to missin...
CVE-2026-103536
A vulnerability was identified in ZongXR Supermarket 1.0.0.0. Affected by this vulnerability is the function OrderController.addOrder of the file order/src/main/java/com/supermarket/order/controller/OrderController.java of the component save Endpoint. Such manipulation of the argument userId lead...
CVE-2026-103539 ZongXR SuperMarket Instant Buy InstantBuyController.java startBuy missing authentication
A weakness has been identified in ZongXR SuperMarket 1.0.0.0. This affects the function startBuy of the file instant-buy/src/main/java/com/supermarket/instantbuy/controller/InstantBuyController.java of the component Instant Buy. Executing a manipulation of the argument Username can lead to missin...
CVE-2026-103539
A vulnerability exists in ZongXR SuperMarket 1.0.0.0 within the Instant Buy component. Specifically, the startBuy function in instant-buy/src/main/java/com/supermarket/instantbuy/controller/InstantBuyController.java fails to perform proper authentication. By manipulating the Username argument, a ...