676 matches found
CVE-2026-31368
AiAssistant is affected by type privilege bypass, successful exploitation of this vulnerability may affect service availability...
CVE-2026-31368 Privilege Bypass in AiAssistant
AiAssistant is affected by type privilege bypass, successful exploitation of this vulnerability may affect service availability...
EUVD-2026-24063
AiAssistant is affected by type privilege bypass, successful exploitation of this vulnerability may affect service availability...
CVE-2026-31368
Technical details are not publicly available in the provided documents. Monitor for updates from vendors and security advisories.
EUVD-2026-24065
PcManager is affected by type privilege bypass, successful exploitation of this vulnerability may affect service availability...
CVE-2026-31369
Technical details about CVE-2026-31369 are not publicly provided in the connected documents. Monitor for updates from NVD, CVE List, and vendor advisories as new information becomes available.
CVE-2026-31369
PcManager is affected by type privilege bypass, successful exploitation of this vulnerability may affect service availability...
CVE-2026-31369 Privilege Bypass in PcManager
PcManager is affected by type privilege bypass, successful exploitation of this vulnerability may affect service availability...
CVE-2026-31369 Privilege Bypass in PcManager
PcManager is affected by type privilege bypass, successful exploitation of this vulnerability may affect service availability...
PT-2026-33916
Name of the Vulnerable Software and Affected Versions AiAssistant affected versions not specified Description A privilege bypass issue exists that may affect service availability if successfully exploited. Recommendations At the moment, there is no information about a newer version that contains ...
Honor PcManager 安全漏洞
Honor PcManager is a computer device management tool developed by the Honor company. Honor PcManager has a security vulnerability, which stems from a type of privilege bypass mechanism. This vulnerability may affect the availability of services...
PT-2026-33917
PcManager is affected by type privilege bypass, successful exploitation of this vulnerability may affect service availability...
CVE-2026-40259
SiYuan is an open-source personal knowledge management system. In versions 3.6.3 and below, the /api/av/removeUnusedAttributeView endpoint is protected only by generic authentication that accepts publish-service RoleReader tokens. The handler passes a caller-controlled id directly to a model...
Incorrect Authorization
Overview @better-auth/oauth-provider is an An oauth provider plugin for Better Auth Affected versions of this package are vulnerable to Incorrect Authorization via the createOAuthClientEndpoint endpoint. An attacker can gain unauthorized access to register OAuth clients by bypassing the intended...
Huawei HarmonyOS and EMUI LBS module privilege bypass access vulnerability
Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. A privilege bypass access vulnerability exists in Huaw...
Huawei EMUI和Huawei HarmonyOS 安全漏洞
Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. A privilege bypass access vulnerability exists in Huaw...
PT-2026-32269
Incorrect privilege assignment in Bluetooth in Maintenance mode prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Extend Unlock...
CVE-2026-35653
OpenClaw prior to 2026.3.24 contains an incorrect authorization flaw in POST /reset-profile. Authenticated callers with operator.write access to browser.request can bypass profile mutation restrictions, potentially stopping the running browser, closing Playwright connections, and moving profile d...
PT-2026-30955
ChurchCRM is an open-source church management system. Prior to 7.1.0, an authenticated API user can modify any family record's state without proper authorization by simply changing the familyId parameter in requests, regardless of whether they possess the required EditRecords privilege...
File Browser 安全漏洞
File Browser is an open-source file management interface developed by File Browser. It allows for the uploading, deletion, previewing, and editing of files within a specified directory. Versions of File Browser prior to 2.63.1 contained security vulnerabilities. These vulnerabilities stemmed from...