CVE-2023-23868 WordPress Cost of Goods for WooCommerce plugin <= 2.8.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPFactory Cost of Goods for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cost of Goods for WooCommerce: from n/a through 2.8.6...

CVE-2023-25454

CVE-2023-25454 maps to the WordPress Protected Posts Logout Button plugin vulnerability (

CVE-2023-25791

CVE-2023-25791 concerns the WordPress Fontiran plugin (versions

CVE-2023-50899 WordPress Product Catalog Enquiry for WooCommerce by MultiVendorX plugin <= 5.0.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in MultiVendorX Product Catalog Enquiry for WooCommerce by MultiVendorX allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Product Catalog Enquiry for WooCommerce by MultiVendorX: from n/a through 5.0.2...

CVE-2024-46547

CVE-2024-46547 affects Wampserver (Romain Bourdon) versions 3.2.3 and 3.2.6. The issue arises from improper access-control validation on the PHP Info Page, allowing unauthorized users to access sensitive information. The documented impact is data leakage. No remediation details are provided in th...

Kashipara E-learning Management System 安全漏洞

Kashipara E-learning Management System is a learning management system from Kashipara. A security vulnerability exists in Kashipara E-learning Management System v1.0. An attacker can exploit the vulnerability to access sensitive files and directories via /admin/uploads...

Unauthorized Data Access

moodle/moodle is vulnerable to Unauthorized Data Access. The vulnerability is due to insufficient access control checks, allowing users with permission to view badge recipients to access unintended lists...

Insufficient Access Control

Moodle is vulnerable to Insufficient Access Control. The vulnerability is due to improper validation in the external API for the Quiz module, allowing unauthorized users to override access controls...

CVE-2024-50651

javashop 1.0 is vulnerable to Incorrect Access Control, which allows attackers to obtain sensitive information of users with different IDs by modifying the ID parameter...

PT-2024-27294 · Popup Box · Popup Box

Name of the Vulnerable Software and Affected Versions: Popup box versions n/a through 4.5.1 Description: The issue is related to a Missing Authorization vulnerability in Popup Box Team Popup, which allows exploiting incorrectly configured access control security levels. Recommendations: For...

Improper Access Control

github.com/rancher/rancher is vulnerable to Improper Access Control. The vulnerability is due to authenticated users being able to disable access control via an API call...

Privilege Escalation

github.com/kiali/kiali is vulnerable to Privilege Escalation. The vulnerability is due to an incorrect access control flaw that allows an attacker with basic access to deploy a kiali operand and potentially gain access to privileged service account tokens...

PT-2024-32834 · Directus · Directus

Name of the Vulnerable Software and Affected Versions: Directus versions prior to 10.13.2 Description: The issue concerns the exposure of access tokens from query strings in system logs, potentially allowing an attacker to gain administrative control and access to unauthorized data. This occurs...

PT-2024-39570 · Sourcecodester · Sourcecodester Online Railway Reservation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Railway Reservation System version 1.0 Description: A critical issue affects the processing of the file /admin/inquiries/view details.php, where the manipulation of the id argument leads to improper access controls. The...

Mattermost Unauthorized Access Vulnerability

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an unauthorized access vulnerability that stems from failing to properly authorize access to an archive channel when viewing the archive channel is disabled. An attacker could...

Unauthorized Access

github.com/zitadel/zitadel is vulnerable to Unauthorized Access. The vulnerability is due to inadequate enforcement of account deactivation protocols, allowing an attacker to gain unauthorized access to the system using tokens from deactivated service accounts...

lunary access control error vulnerability (CNVD-2025-09696)

lunary is lunary open source a production toolkit for LLM . An access control error vulnerability exists in Lunary that stems from improper controls in the saml.ts file, which can be exploited by an attacker to cause unauthorized access and potential account takeover, where a user of an...

PT-2024-31186 · Rely-Pcie · Rely-Pcie

Name of the Vulnerable Software and Affected Versions: RELY-PCIe versions 22.2.1 through 23.1.0 Description: The issue is related to incorrect access control in the mService function at the phpinf.php endpoint. This affects the ability to properly restrict access, potentially leading to...

PT-2024-31302 · Irfan Skiljan · Irfanview

Name of the Vulnerable Software and Affected Versions: Irfanview version 4.67.1.0 Description: An issue in the component EXR!ReadEXR+0x4eef0 of Irfanview allows attackers to cause an access violation via a crafted EXR file, leading to a Denial of Service DoS. Recommendations: For Irfanview versio...

PT-2024-31301 · Irfan Skiljan · Irfanview

Name of the Vulnerable Software and Affected Versions: Irfanview version 4.67.1.0 Description: An issue in the component EXR!ReadEXR+0x3df50 of Irfanview allows attackers to cause an access violation via a crafted EXR file, leading to a Denial of Service DoS. Recommendations: For Irfanview versio...