Due to a missing authorization check in Application Server ABAP of SAP NetWeaver and ABAP...
CVE-2026-76963
Due to a missing authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform, an authenticated att
#cwe-862
共收录 4122 条相关情报。
← 返回所有主题SAP S/4HANA (Manage Bank Chains app) does not perform sufficient authorization checks within...
CVE-2026-76962
SAP S/4HANA (Manage Bank Chains app) does not perform sufficient authorization checks within certain affected functional
Due to a missing authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform, an authenticated attacker could gain unauthorized access to sensitive system ...
CVE-2026-76963
Due to a missing authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform, an authenticated att
SAP S/4HANA (Manage Bank Chains app) does not perform sufficient authorization checks within certain affected functionality. An attacker with low privileges could send specially...
CVE-2026-76962
SAP S/4HANA (Manage Bank Chains app) does not perform sufficient authorization checks within certain affected functional
Lara Dashboard before 1.3.2 fails to authorize the MarketplaceModuleBrowser installModule...
CVE-2026-86438
Lara Dashboard before 1.3.2 fails to authorize the MarketplaceModuleBrowser installModule Livewire action, allowing non-
Lara Dashboard before 1.3.2 fails to authorize access to the post-builder image and video upload...
CVE-2026-86436
Lara Dashboard before 1.3.2 fails to authorize access to the post-builder image and video upload endpoints, allowing aut
Lara Dashboard before 1.3.2 fails to authorize the MarketplaceModuleBrowser installModule Livewire action, allowing non-Superadmin administrators to install modules. Attackers c...
CVE-2026-86438
Lara Dashboard before 1.3.2 fails to authorize the MarketplaceModuleBrowser installModule Livewire action, allowing non-
Lara Dashboard before 1.3.2 fails to authorize access to the post-builder image and video upload endpoints, allowing authenticated accounts without content permissions to upload...
CVE-2026-86436
Lara Dashboard before 1.3.2 fails to authorize access to the post-builder image and video upload endpoints, allowing aut
In JetBrains YouTrack before 2026.2.18687 missing permission checks allowed creating knowledge...
CVE-2026-86495
In JetBrains YouTrack before 2026.2.18687 missing permission checks allowed creating knowledge base articles in inaccess
In JetBrains YouTrack before 2026.2.18769 missing access control on Helpdesk authorized reporters...
CVE-2026-86496
In JetBrains YouTrack before 2026.2.18769 missing access control on Helpdesk authorized reporters exposed reporter email
In JetBrains YouTrack before 2026.1.14047 predefined search fields leaked all group names to any...
CVE-2026-86499
In JetBrains YouTrack before 2026.1.14047 predefined search fields leaked all group names to any user, regardless of vis
In JetBrains YouTrack before 2026.2.18634 cloning a whiteboard allowed unauthorized changes to...
CVE-2026-86494
In JetBrains YouTrack before 2026.2.18634 cloning a whiteboard allowed unauthorized changes to links on inaccessible iss
In JetBrains YouTrack before 2026.2.18788, 2026.1.14055, 2025.3.161254 missing authorisation...
CVE-2026-86479
In JetBrains YouTrack before 2026.2.18788, 2026.1.14055, 2025.3.161254 missing authorisation allowed access to restric
In JetBrains YouTrack before 2026.1.14047 predefined search fields leaked all group names to any user, regardless of visibility permission
CVE-2026-86499
In JetBrains YouTrack before 2026.1.14047 predefined search fields leaked all group names to any user, regardless of vis
In JetBrains YouTrack before 2026.2.18769 missing access control on Helpdesk authorized reporters exposed reporter email addresses
CVE-2026-86496
In JetBrains YouTrack before 2026.2.18769 missing access control on Helpdesk authorized reporters exposed reporter email
In JetBrains YouTrack before 2026.2.18687 missing permission checks allowed creating knowledge base articles in inaccessible projects
CVE-2026-86495
In JetBrains YouTrack before 2026.2.18687 missing permission checks allowed creating knowledge base articles in inaccess
In JetBrains YouTrack before 2026.2.18634 cloning a whiteboard allowed unauthorized changes to links on inaccessible issues
CVE-2026-86494
In JetBrains YouTrack before 2026.2.18634 cloning a whiteboard allowed unauthorized changes to links on inaccessible iss
In JetBrains YouTrack before 2026.2.18788, 2026.1.14055, 2025.3.161254 missing authorisation allowed access to restricted REST API resources via IDOR
CVE-2026-86479
In JetBrains YouTrack before 2026.2.18788, 2026.1.14055, 2025.3.161254 missing authorisation allowed access to restric
A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This vulnerability affects unknown...
CVE-2026-86307
A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a061
The Masteriyo LMS plugin for WordPress is vulnerable to unauthorized data deletion due to a missing capability check on the 'delete_item_permissions_check' function in the Cours...
CVE-2026-8279
The Masteriyo LMS plugin for WordPress is vulnerable to unauthorized data deletion due to a missing capability check on