1948 matches found
CVE-2025-54691
CVE-2025-54691 is a real vulnerability affecting the WordPress Motors plugin (versions n/a through 1.4.80). The issue is an Insecure Direct Object References (IDOR) that enables an authorization bypass via a user-controlled key, effectively bypassing access control. The CVSSv3.1 vector is CVSS:3....
CVE-2025-54691 WordPress Motors Plugin plugin <= 1.4.80 - Insecure Direct Object References (IDOR) Vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in Stylemix Motors motors-car-dealership-classified-listings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Motors: from n/a through = 1.4.80...
PT-2025-33243 · Unknown · Stylemix Motors
Name of the Vulnerable Software and Affected Versions: Stylemix Motors versions n/a through 1.4.80 Description: A flaw exists in Stylemix Motors related to incorrectly configured access control security levels, allowing for authorization bypass through a user-controlled key. Recommendations: Upda...
CVE-2025-53189
Authorization Bypass Through User-Controlled Key vulnerability in ABB Aspect.This issue affects Aspect: from o before 3.08.04-s01...
CVE-2025-53189
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2025-53189
CVE-2025-53189 concerns an authorization bypass in ABB Aspect triggered by a user-controlled key. Affected software: ABB Aspect, with versions prior to 3.08.04-s01. The issue’s root cause and exploit specifics are not detailed in the provided documents; remediation guidance available is to update...
PT-2025-32565 · Abb · Abb Aspect
Name of the Vulnerable Software and Affected Versions: ABB Aspect versions prior to 3.08.04-s01 Description: An authorization bypass exists due to a user-controlled key. Recommendations: Update ABB Aspect to version 3.08.04-s01 or later...
CVE-2025-36023
IBM Cloud Pak for Business Automation 24.0.0 through 24.0.0 IF005 and 24.0.1 through 24.0.1 IF002 could allow an authenticated user to view sensitive user and system information due to an indirect object reference through a user-controlled key...
Authorization Bypass Through User-Controlled Key
Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the LocalStorage handler when manipulating the projectID argument. An attacker can gain unauthorized access to resources by providing a crafted value for this argument during local...
CVE-2025-36023
IBM Cloud Pak for Business Automation 24.0.0 through 24.0.0 IF005 and 24.0.1 through 24.0.1 IF002 could allow an authenticated user to view sensitive user and system information due to an indirect object reference through a user-controlled key...
CVE-2025-46387
CWE-639 Authorization Bypass Through User-Controlled Key...
CVE-2025-46386
CWE-639 Authorization Bypass Through User-Controlled Key...
PT-2025-32362 · Ibm · Ibm Cloud Pak For Business Automation
Name of the Vulnerable Software and Affected Versions: IBM Cloud Pak for Business Automation versions 24.0.0 through 24.0.0 IF005 IBM Cloud Pak for Business Automation versions 24.0.1 through 24.0.1 IF002 Description: The software contains a flaw that may allow an authenticated user to view...
CVE-2025-46387
CWE-639 Authorization Bypass Through User-Controlled Key...
CVE-2025-46386
CWE-639 Authorization Bypass Through User-Controlled Key...
CVE-2025-46387
CVE-2025-46387 describes an authorization bypass in Emby MediaBrowser (a media server) via a user-controlled key (CWE-639). The vulnerability is documented across multiple feeds (NVD/NVD-derived, CNVD, ENISA ENISA EUVD, CCTV-like references), consistently noting an authorization bypass mechanism ...