CVE-2026-4056

The User Registration & Membership plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the Content Access Rules REST API endpoints in versions 5.0.1 through 5.1.4. This is due to the checkpermissions method only checking for editposts...

Improper access control

An issue was discovered in GitLab Community and Enterprise Edition 8.4 through 11.11. The protected branches feature contained a access control issue which resulted in a bypass of the protected branches restriction rules. It has Incorrect Access Control...

CVE-2019-12441

Removed by vendor...

FreeBSD : Gitlab -- Multiple Vulnerabilities (4091069e-860b-11e9-a05f-001b217b3468)

Gitlab reports : Remote Command Execution Vulnerability on Repository Download Feature Confidential Issue Titles Revealed to Restricted Users on Unsubscribe Disclosure of Milestone Metadata through the Search API Private Project Discovery via Comment Links Metadata of Confidential Issues Disclose...

Flash Player Bypass Security

The vulnerability of the Flash Player software implementation is related to the implementation of domain restriction rules. Exploiting this vulnerability can allow a malicious actor to bypass the security mechanisms...

Flash Player Bypass Security

The vulnerability of the Flash Player software is related to the implementation of domain restriction rules. Exploiting this vulnerability allows a malicious actor to bypass the security mechanisms...

PT-2015-1583

Name of the Vulnerable Software and Affected Versions Adobe AIR affected versions not specified Adobe Flash Player affected versions not specified Adobe AIR SDK affected versions not specified Adobe AIR SDK & Compiler affected versions not specified Description The issue is related to a lack of...

PT-2015-1584

Name of the Vulnerable Software and Affected Versions Adobe AIR affected versions not specified Adobe Flash Player affected versions not specified Adobe AIR SDK affected versions not specified Adobe AIR SDK & Compiler affected versions not specified Description The issue is related to a lack of...

PT-2015-1227

Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader affected versions not specified Description The issue arises from the interaction with the JavaScript API, potentially allowing a remote attacker to bypass current access restriction rules. Recommendations At the moment,...

Debian DSA-1955-1 : network-manager/network-manager-applet - information disclosure

It was discovered that network-manager-applet, a network management framework, lacks some dbus restriction rules, which allows local users to obtain sensitive information. If you have locally modified the /etc/dbus-1/system.d/nm-applet.conf file, then please make sure that you merge the changes...

Debian: Security Advisory (DSA-1955-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...