PT-2025-21005 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Visual Studio affected versions not specified Description: The issue is related to insufficient granularity of access control, allowing an authorized attacker to disclose information locally. There is no information provided about the estimat...

PT-2025-20919 · Kirby · Kirby

Name of the Vulnerable Software and Affected Versions: Kirby versions prior to 3.9.8.3 Kirby versions prior to 3.10.1.2 Kirby versions prior to 4.7.1 Description: A vulnerability in Kirby affects sites that use the collection helper or $kirby-collection method with a dynamic collection name,...

PT-2025-20714 · Schweitzer Engineering Laboratories · Sel Blueframe Os

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue allows users who are required to change their password to still access system information before actually changing their password. Recommendations: At the moment, there is no...

PT-2025-20717 · Schweitzer Engineering Laboratories · Sel Blueframe Os

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: An authenticated user without user-management permissions could view other users' account information. Recommendations: At the moment, there is no information about a newer version that...

PT-2025-20423 · Unknown · Grocery-Cms-Php-Restful-Api

Name of the Vulnerable Software and Affected Versions: Grocery-CMS-PHP-Restful-API version 1.3 Description: The issue concerns a file upload vulnerability via the "/admin/add-category.php" API endpoint. This allows for potential malicious file uploads. Recommendations: For...

LibreOffice Improper Access Control vulnerability (May 2025) - Mac OS X

LibreOffice is prone to an improper access control vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2025-20415 · My Company · Test

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue allows a bad person to break into the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2025-20431 · Microsoft · Azure

Name of the Vulnerable Software and Affected Versions: Azure affected versions not specified Description: The issue is related to improper access control in Azure, allowing an unauthorized attacker to disclose information over a network. Recommendations: At the moment, there is no information abo...

CVE-2025-20137

Cisco IOS Software on Catalyst 1000 and Catalyst 2960L switches suffers an ACL bypass vulnerability when both an IPv4 ACL and a dynamic IP Source Guard ACL are configured on the same interface (an unsupported configuration). The issue enables an unauthenticated remote attacker to bypass an ACL by...

CVE-2025-47485

Missing Authorization vulnerability in CozyThemes Cozy Blocks cozy-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cozy Blocks: from n/a through = 2.1.22...

CVE-2025-47467

Missing Authorization vulnerability in GS Plugins GS Testimonial Slider gs-testimonial allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GS Testimonial Slider: from n/a through = 3.3.0...

PT-2025-20148 · Woocommerce · Variation Swatches For Woocommerce

Name of the Vulnerable Software and Affected Versions: GS Variation Swatches for WooCommerce versions 3.0.4 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For G...

PT-2025-20304 · F5 · F5Os

Name of the Vulnerable Software and Affected Versions: F5OS affected versions not specified Description: The issue allows access via SSH key-based authentication even after Appliance Mode is enabled, if the root user had previously configured the system to allow such login. An attacker would need...

CVE-2025-46589

Vulnerability of unauthorized access in the app lock module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality...

Cisco NX-OS Incorrect Authorization(CVE-2024-20291)

A vulnerability in the access control list ACL programming for port channel subinterfaces of Cisco Nexus 3000 and 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, remote attacker to send traffic that should be blocked through an affected device. This vulnerability is...

CVE-2025-4051

Insufficient data validation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discretionary access control via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-45237

Incorrect access control in the component /config/download of DBSyncer v2.0.6 allows attackers to access the JSON file containing sensitive account information, including the encrypted password...

CVE-2025-45237

CVE-2025-45237 concerns DBSyncer v2.0.6 with an incorrect access control in the /config/download component. The issue could allow unauthenticated access to a JSON file that contains sensitive account information, including encrypted passwords. Impact is stated in sources as high confidentiality r...

PT-2025-19781 · Unknown · Shiro-Action

Name of the Vulnerable Software and Affected Versions: Shiro-Action version 0.6 Description: The issue is related to incorrect access control in the component /user/list of Shiro-Action, allowing attackers to access sensitive information via a crafted payload. Recommendations: For Shiro-Action...

CVE-2025-23245

NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager vGPU plugin, where it allows a guest to access global resources. A successful exploit of this vulnerability might lead to denial of service...