3 matches found
CVE-2026-45009
phpMyFAQ before 4.1.2 contains an insufficient authorization vulnerability in admin-api routes that allows authenticated ordinary users to access administrative endpoints by only checking login status instead of verifying backend privileges. Attackers with valid frontend user accounts can access...
5.3CVSS5.9AI score0.00211EPSS
SaveExploits0References5
Authentication flaw
Veritas Desktop and Laptop Option DLO before 9.5 disclosed operational information on the backup processing status through a URL that did not require authentication...
5CVSS5.2AI score0.00919EPSS
SaveExploits0References1Affected Software1
CVE-2020-36159: Undefined Security Weakness
Veritas Desktop and Laptop Option DLO before 9.5 disclosed operational information on the backup processing status through a URL that did not require authentication...
5.3CVSS5.8AI score0.00919EPSS
SaveExploits0References1
20