CWE-639

▾ SunlitEPSS 0.45%via NVD

Confidential Containers's Trustee project contains tools and components for attesting confidential guests and providing secrets to them

Confidential Containers's Trustee project contains tools and components for attesting confidential guests and providing secrets to them. In versions prior to 0.15.0, the attestation-policy endpoint didn't check if the kbs-client submitti…

CVE-2025-6038High· 8.8

▾ TwilightEPSS 0.33%via NVD

The Lisfinity Core - Lisfinity Core plugin used for pebas® Lisfinity WordPress theme plugin for WordPress is vulnerable to privilege escalation via password update in all versions up to, and including, 1.4.0

The Lisfinity Core - Lisfinity Core plugin used for pebas® Lisfinity WordPress theme plugin for WordPress is vulnerable to privilege escalation via password update in all versions up to, and including, 1.4.0. This is due to the plugin no…

CVE-2025-43724Medium· 4.4

▾ Sunlitdell · powerscale_onefsEPSS 0.13%via NVD

Dell PowerScale OneFS, versions prior to 9.12.0.0, contains an authorization bypass through user-controlled key vulnerability

Dell PowerScale OneFS, versions prior to 9.12.0.0, contains an authorization bypass through user-controlled key vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability to gain unauthorized…

CVE-2025-40676None

▾ SunlitEPSS 0.27%via NVD

Insecure Direct Object Reference (IDOR) in Negotiator v3.15.2 from Biobanking and Biomolecular Resources - European Research Infrastructure (BBMRI-ERIC)

Insecure Direct Object Reference (IDOR) in Negotiator v3.15.2 from Biobanking and Biomolecular Resources - European Research Infrastructure (BBMRI-ERIC). This vulnerability allows an attacker to access or modify unauthorised resources by…

CVE-2025-11321Medium· 4.3

▾ SunlitEPSS 0.36%via NVD

A vulnerability was detected in zhuimengshaonian wisdom-education up to 1.0.4

A vulnerability was detected in zhuimengshaonian wisdom-education up to 1.0.4. The affected element is an unknown function of the file src/main/java/com/education/api/controller/student/WrongBookController.java. Performing manipulation o…

CVE-2025-0606Medium· 6.0

▾ SunlitEPSS 0.29%via NVD

Authorization Bypass Through User-Controlled Key vulnerability in Logo Software Inc

Authorization Bypass Through User-Controlled Key vulnerability in Logo Software Inc. Logo Cloud allows Forceful Browsing, Resource Leak Exposure. This issue affects Logo Cloud: before 0.67.

CVE-2025-0642Medium· 6.3

▾ SunlitEPSS 0.26%via NVD

Use of Hard-coded Credentials, Authorization Bypass Through User-Controlled Key vulnerability in PosCube Hardware Software and Consulting Ltd

Use of Hard-coded Credentials, Authorization Bypass Through User-Controlled Key vulnerability in PosCube Hardware Software and Consulting Ltd. Co. Assist allows Excavation, Authentication Bypass. This issue affects Assist: through 10.02…

CVE-2025-55795Low· 3.5

▾ Sunlitopenml · openml_frontendEPSS 0.31%via NVD

The openml/openml.org web application version v2.0.20241110 uses incremental user IDs and insufficient email ownership verification during email update workflows

The openml/openml.org web application version v2.0.20241110 uses incremental user IDs and insufficient email ownership verification during email update workflows. An authenticated attacker controlling a user account with a lower user ID …

CVE-2025-10947Medium· 5.3

▾ SunlitEPSS 0.50%via NVD

A flaw has been found in Sistemas Pleno Gestão de Locação up to 2025.7.x

A flaw has been found in Sistemas Pleno Gestão de Locação up to 2025.7.x. The impacted element is an unknown function of the file /api/areacliente/pessoa/validarCpf of the component CPF Handler. Executing a manipulation of the argument p…

CVE-2025-9342Medium· 6.5

▾ SunlitEPSS 0.29%via NVD

Authorization Bypass Through User-Controlled Key vulnerability in Anadolu Hayat Emeklilik Inc

Authorization Bypass Through User-Controlled Key vulnerability in Anadolu Hayat Emeklilik Inc. AHE Mobile allows Privilege Abuse. This issue affects AHE Mobile: from 1.9.7 before 1.9.9.

CVE-2025-7106Medium· 5.3

▾ Sunlitlibrechat · librechatEPSS 0.28%via NVD

danny-avila/librechat is affected by an authorization bypass vulnerability due to improper access control checks

danny-avila/librechat is affected by an authorization bypass vulnerability due to improper access control checks. The `checkAccess` function in `api/server/middleware/roles/access.js` uses `permissions.some()` to validate permissions, wh…

CVE-2025-8463Medium· 5.3

▾ SunlitEPSS 0.26%via NVD

Authorization Bypass Through User-Controlled Key vulnerability in SecHard Information Technologies SecHard allows Forceful Browsing. This issue affects SecHard: before 3.6.2-20250805.

CVE-2025-7718High· 8.8

▾ TwilightEPSS 0.33%via NVD

The Resideo Plugin for Resideo - Real Estate WordPress Theme plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.5.4

The Resideo Plugin for Resideo - Real Estate WordPress Theme plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.5.4. This is due to the plugin not properly validating a…

CVE-2025-58597Medium· 4.3

▾ SunlitEPSS 0.34%via NVD

Authorization Bypass Through User-Controlled Key vulnerability in Tomdever wpForo Forum wpforo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects wpForo Forum: from n/a through <= 2.4.6.

Authorization Bypass Through User-Controlled Key vulnerability in Tomdever wpForo Forum wpforo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects wpForo Forum: from n/a through <= 2.4.6.

CVE-2025-0640Medium· 4.7

▾ SunlitEPSS 0.24%via NVD

Authorization Bypass Through User-Controlled Key vulnerability in Akinsoft OctoCloud allows Resource Leak Exposure. This issue affects OctoCloud: from s1.09.02 before v1.11.01.

CVE-2025-20114Medium· 4.3

▾ SunlitCisco · Cisco Unified Contact Center ExpressEPSS 0.35%via CVEORG

Cisco Unified Intelligence Center Insecure Direct Object Reference Vulnerability

A vulnerability in the API of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to perform a horizontal privilege escalation attack on an affected system. This vulnerability is due to insufficient validat…

CVE-2024-11146Medium· 6.3

▾ Sunliti3 Verticals · TrueFilingEPSS 0.34%via CVEORG

TrueFiling authorization bypass via user-controlled keys

TrueFiling is a collaborative, web-based electronic filing system where attorneys, paralegals, court reporters and self-represented filers collect public legal documentation into cases. TrueFiling is an entirely cloud-hosted application.…

CVE-2024-7041Medium· 6.5

▾ Sunlitopen-webui · open-webuiEPSS 0.37%via OSV

open-webui Insecure Direct Object Reference (IDOR) vulnerability

CVE-2024-33668Critical· 9.1PoC

▾ Abyssalzammad · zammadEPSS 0.45%via NVD

An issue was discovered in Zammad before 6.3.0

An issue was discovered in Zammad before 6.3.0. The Zammad Upload Cache uses insecure, partially guessable FormIDs to identify content. An attacker could try to brute force them to upload malicious content to article drafts they have no …

CVE-2024-1313Medium· 6.5

▾ SunlitRed Hat · Red Hat Enterprise Linux AppStream (v. 8)EPSS 0.65%via CSAF

grafana: vulnerable to authorization bypass (CVE-2024-1313)

A vulnerability was found in Grafana. Due to an error in authorization logic, it is possible for an unprivileged user in a different organization other than the snapshot owner to perform unauthorized actions such as deleting it using a vie…

CVE-2023-43900Medium· 6.5

▾ Sunlitemudhra · emsignerEPSS 0.60%via NVD

Insecure Direct Object References (IDOR) in EMSigner v2.8.7 allow attackers to gain unauthorized access to application content and view sensitive data of other users via manipulation of the documentID and EncryptedDocumentId parameters.

Insecure Direct Object References (IDOR) in EMSigner v2.8.7 allow attackers to gain unauthorized access to application content and view sensitive data of other users via manipulation of the documentID and EncryptedDocumentId parameters.

CVE-2022-36202Critical· 9.8

▾ Midnightdoctor's_appointment_system_project · doctor's_appointment_systemEPSS 0.91%via NVD

Doctor's Appointment System1.0 is vulnerable to Incorrect Access Control via edoc/patient/settings.php

Doctor's Appointment System1.0 is vulnerable to Incorrect Access Control via edoc/patient/settings.php. The settings.php is affected by Broken Access Control (IDOR) via id= parameter.

CVE-2022-28986High· 7.5PoC

▾ Midnightlmsdoctor · 2_factor_authenticationEPSS 2.3%via NVD

LMS Doctor Simple 2 Factor Authentication Plugin For Moodle Affected: 2021072900 has an Insecure direct object references (IDOR) vulnerability, which allows remote attackers to update sensitive records such as email, password and phone n…

LMS Doctor Simple 2 Factor Authentication Plugin For Moodle Affected: 2021072900 has an Insecure direct object references (IDOR) vulnerability, which allows remote attackers to update sensitive records such as email, password and phone n…

CVE-2021-46416High· 8.1PoC

▾ Midnightsma · sunny_tripower_firmwareEPSS 4.3%via NVD

Insecure direct object reference in SUNNY TRIPOWER 5.0 Firmware version 3.10.16.R leads to unauthorized user groups accessing due to insecure cookie handling.

CVE-2021-3380Medium· 6.5