An improper access check allowed low privileged users to edit the task types of existing scheduler tasks.
CVE-2026-48900
An improper access check allowed low privileged users to edit the task types of existing scheduler tasks.
#cwe-284
共收录 2028 条相关情报。
← 返回所有主题An improper access check allows privilege escalation through the com_users batch task.
CVE-2026-48899
An improper access check allows privilege escalation through the com_users batch task.
An improper access check allows privilege escalation through the com_users batch task.
CVE-2026-48898
An improper access check allows privilege escalation through the com_users batch task.
An improper access check allows unauthorized access to com_config webservice endpoints.
CVE-2026-35223
An improper access check allows unauthorized access to com_config webservice endpoints.
e107 is a content management system (CMS). Prior to 2.3.4, a Broken Access Control vulnerability exists in the application, allowing an unauthorized authenticated user to edit c...
CVE-2026-43934
e107 is a content management system (CMS). Prior to 2.3.4, a Broken Access Control vulnerability exists in the applicati
Versions of the package @koa/router from 14.0.0 and before 15.0.0 are vulnerable to Access Control Bypass due to the middleware being silently dropped from the execution chain w...
CVE-2026-9495
Versions of the package @koa/router from 14.0.0 and before 15.0.0 are vulnerable to Access Control Bypass due to the mid
A vulnerability was determined in hemant6488 CodeIgniter-StudentManagementSystem. The affected element is an unknown function of the file /index.php/students/addStudentView of t...
CVE-2026-9517
A vulnerability was determined in hemant6488 CodeIgniter-StudentManagementSystem. The affected element is an unknown fun
A malicious actor with access to the network could exploit an Improper Access Control...
CVE-2026-34908
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS de
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make unauthorized changes to the system.
CVE-2026-34908
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS de
Concrete CMS 9.5.0 and below is vulnerable to unauthenticated page metadata disclosure across...
CVE-2026-8240
Concrete CMS 9.5.0 and below is vulnerable to unauthenticated page metadata disclosure across every page with a configur
Concrete CMS 9.5.0 and below is vulnerable to unauthenticated page metadata disclosure across every page with a configured summary template, revealing the existence of private, ...
CVE-2026-8240
Concrete CMS 9.5.0 and below is vulnerable to unauthenticated page metadata disclosure across every page with a configur
BoxLite: Permission Bypass Allows Modification of Read-Only Files
CVE-2026-46695
#### Summary Boxlite is a sandbox service that allows users to create lightweight virtual machines (Boxes) and launch O
@hulumi/policies: GitHub OIDC trust policy bypass via AWS set-qualified condition operators
Impact: @hulumi/policies versions before 1.3.2 only checked exact AWS IAM StringLike/StringEquals condition operator key
@hulumi/policies: HULUMI-H1 SecureBucket parent spoof bypass
Impact: @hulumi/policies versions before 1.3.2 could accept spoofed SecureBucket parent evidence for HULUMI-H1, allowing
Incorrect Behaviour of Views with TCP PROXY Requests
CVE-2026-41999
Incorrect Behaviour of Views with TCP PROXY Requests
In mlflow/mlflow versions up to 3.9.0, the `SearchModelVersions` REST API endpoint and the `mlflowSearchModelVersions` GraphQL query lack proper per-model authorization checks w...
CVE-2026-2734
In mlflow/mlflow versions up to 3.9.0, the `SearchModelVersions` REST API endpoint and the `mlflowSearchModelVersions` G
Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. In versions 0.102.1 and prior, the Clipper API in Tri...
CVE-2026-39310
Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bas
InfoScale CmdServer before 7.4.2 mishandles access control.
CVE-2026-44926
InfoScale CmdServer before 7.4.2 mishandles access control.
InfoScale CmdServer before 7.4.2 mishandles access control.
CVE-2026-44926
InfoScale CmdServer before 7.4.2 mishandles access control.
Improper Access Control vulnerability in Mesalvo Meona Client Launcher Component, Mesalvo Meona Server Component enables a normal user gaining access to the admin panel. This is...
CVE-2026-0856
Improper Access Control vulnerability in Mesalvo Meona Client Launcher Component, Mesalvo Meona Server Component enables