9 matches found
EUVD-2026-49992
Nebula Mesh is a self-hosted control plane for the Slack Nebula mesh VPN. In versions 0.3.5 and below, the web UI /ui/ does not apply the per-operator CA scoping employed by the JSON API. This was partially addressed by GHSA-598g-h2vc-h5vg, but the changes were not implemented in the web...
CVE-2026-50510: Improper Restriction of Names for Files and Other Resources
Improper restriction of names for files and other resources in Github Copilot allows an unauthorized attacker to execute code locally...
CVE-2026-42999
A flaw was found in OpenStack Keystone. This vulnerability allows an authenticated user to bypass Role-Based Access Control RBAC checks by injecting arbitrary policy target attributes into the request body. This enables the user to perform unauthorized operations on resources belonging to other...
CVE-2026-9808
An authorization bypass vulnerability exists in the Mautic 7 API v2 endpoints utilizing API Platform. Under certain conditions, roles configured with owner-scope restrictions such as "viewown" or "editown" are not properly enforced. This allows low-privilege authenticated API users to bypass...
CVE-2025-21361: Improper Restriction of Names for Files and Other Resources
Microsoft Outlook Remote Code Execution Vulnerability...
CVE-2024-30063: Improper Restriction of Names for Files and Other Resources
Windows Distributed File System DFS Remote Code Execution Vulnerability...
PT-2023-9735 · Fortinet · Fortiportal
Name of the Vulnerable Software and Affected Versions: Fortinet FortiPortal versions 7.0.0 through 7.0.3 Description: The issue is related to an authorization bypass through a user-controlled key, allowing an authenticated attacker to interact with resources of other organizations via HTTP or HTT...
CVE-2023-0046: Improper Restriction of Names for Files and Other Resources
Improper Restriction of Names for Files and Other Resources in GitHub repository lirantal/daloradius prior to master-branch...
