Lucene search
+L

2360 matches found

NVD
NVD
•added 2026/09/24 9:17 a.m.•11 views

CVE-2026-78310

Authorization Bypass Through User-Controlled Key in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022...

4.3CVSS0.00214EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/24 8:50 a.m.•7 views

EUVD-2026-85821

Authorization Bypass Through User-Controlled Key in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022...

4.3CVSS5.8AI score0.00214EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/24 8:50 a.m.•15 views

CVE-2026-78310

The software DIAEnergie (versions before 1.11.00.022 ) is vulnerable to an Authorization Bypass caused by a user-controlled key . While the specific technical root cause and component are not detailed in the provided documents, the vulnerability allows for unauthorized access. No specific exploit...

4.3CVSS5.8AI score0.00214EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/24 12:00 a.m.•2 views

PT-2026-97731

Name of the Vulnerable Software and Affected Versions DIAEnergie versions prior to 1.11.00.022 Description An authorization bypass exists due to the use of a user-controlled key. Recommendations Update to version 1.11.00.022 or later...

4.3CVSS5.8AI score0.00214EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/24 12:00 a.m.•8 views

CVE-2026-78310: Authorization Bypass Through User-Controlled Key

Authorization Bypass Through User-Controlled Key in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022...

4.3CVSS5.8AI score0.00214EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/23 12:00 a.m.•5 views

CVE-2026-95602: Authorization Bypass Through User-Controlled Key

Authorization Bypass Through User-Controlled Key vulnerability in YITH YITH WooCommerce Request A Quote allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects YITH WooCommerce Request A Quote: from n/a before 4.46.1...

6.5CVSS5.9AI score0.00276EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/23 12:00 a.m.•3 views

PT-2026-97490

Authorization Bypass Through User-Controlled Key vulnerability in YITH YITH WooCommerce Request A Quote allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects YITH WooCommerce Request A Quote: from n/a before 4.46.1...

6.5CVSS6AI score0.00276EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/18 8:16 a.m.•15 views

CVE-2026-12384

Authorization bypass through User-Controlled key vulnerability in TECHIN2B TECHIN2B Application allows Privilege Abuse. This issue affects TECHIN2B Application: from V1.0.7676.13 through 18092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

8.8CVSS0.00309EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/18 7:48 a.m.•46 views

CVE-2026-12384 Broken Access Control in TECHIN2B Application

Authorization bypass through User-Controlled key vulnerability in TECHIN2B TECHIN2B Application allows Privilege Abuse. This issue affects TECHIN2B Application: from V1.0.7676.13 through 18092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

8.8CVSS0.00309EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/18 7:48 a.m.•12 views

CVE-2026-12384 Broken Access Control in TECHIN2B Application

Authorization bypass through User-Controlled key vulnerability in TECHIN2B TECHIN2B Application allows Privilege Abuse. This issue affects TECHIN2B Application: from V1.0.7676.13 through 18092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

8.8CVSS5.8AI score0.00309EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/18 7:48 a.m.•14 views

EUVD-2026-82764

Authorization bypass through User-Controlled key vulnerability in TECHIN2B TECHIN2B Application allows Privilege Abuse. This issue affects TECHIN2B Application: from V1.0.7676.13 through 18092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

8.8CVSS5.8AI score0.00309EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/18 7:48 a.m.•53 views

CVE-2026-12384

CVE-2026-12384 is an authorization bypass through a user-controlled key in the TECHIN2B Application , enabling privilege abuse . The affected version range is V1.0.7676.13 through 18092026 . The vulnerability is categorized as Broken Access Control and carries a CVSS 3.1 base score of 8.8 (HIGH) ...

8.8CVSS5.8AI score0.00309EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/18 12:31 a.m.•16 views

EUVD-2026-82584

Authorization bypass through user-controlled key in Microsoft Container Registry allows an unauthorized attacker to elevate privileges over a network...

10CVSS5.8AI score0.00798EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/18 12:00 a.m.•3 views

CVE-2026-68493: Authorization Bypass Through User-Controlled Key

After guessing a 62^15 complex unique identifier, a malicious logged in user was able to retrieve a list of memberships for a circle they are not a member of...

3.1CVSS5.6AI score0.00227EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/18 12:00 a.m.•3 views

CVE-2026-12384: Authorization Bypass Through User-Controlled Key

Authorization bypass through User-Controlled key vulnerability in TECHIN2B TECHIN2B Application allows Privilege Abuse. This issue affects TECHIN2B Application: from V1.0.7676.13 through 18092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

8.8CVSS5.8AI score0.00309EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/17 11:18 p.m.•14 views

CVE-2026-69865

Authorization bypass through user-controlled key in Microsoft Container Registry allows an unauthorized attacker to elevate privileges over a network...

10CVSS0.00798EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/17 10:55 p.m.•79 views

CVE-2026-69865

Microsoft Container Registry is affected by an authorization bypass through user-controlled key , allowing an unauthorized attacker to elevate privileges over a network . The CVSS v3.1 base score is 10.0 (Critical) with a changed scope and high impact to both confidentiality and integrity, while ...

10CVSS5.8AI score0.00798EPSS
SaveExploits0References1Affected Software1
Microsoft CVE
Microsoft CVE
•added 2026/09/17 2:00 p.m.•26 views

Microsoft Container Registry Elevation of Privilege Vulnerability

Authorization bypass through user-controlled key in Microsoft Container Registry allows an unauthorized attacker to elevate privileges over a network...

10CVSS5.8AI score0.00798EPSS
SaveExploits0
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•9 views

Astra Linux - Vulnerability in golang-github-emicklei-go-restful

Authorization bypass through user-controlled keys in the GitHub repository in the emicklei/go-restful library, prior to version 3.8.0...

9.3CVSS8AI score0.03115EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2026/09/14 12:00 a.m.•10 views

The vulnerability of the Azure Cosmos DB database management system, related to bypassing authentication using a user-controlled key, allows attackers to perform spear-phishing attacks.

The vulnerability of the Azure Cosmos DB database management system is related to the ability to bypass authentication using a user-controlled key. Exploiting this vulnerability allows an attacker to perform brute-force attacks remotely...

8.5CVSS6.3AI score0.00632EPSS
SaveExploits0References2
Rows per page
Query Builder