Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
In Contacts service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privil…
In Contacts Service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privil…
In vowifi service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileg…
In Contacts service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privil…
MeterSphere is an open-source continuous testing platform. Prior to version 2.10.4 LTS, some interfaces of the Cloud version of MeterSphere do not ha…
The foundry campaigns service was found to be vulnerable to an unauthenticated information disclosure in a rest endpoint
Missing Authorization in GitHub repository answerdev/answer prior to v1.1.1.
Backup Migration
MEDIUM 6.5
Several plugins for WordPress by Inisev are vulnerable to unauthorized installation of plugins due to a missing capability check on the handle_instal…
Tolgee is an open-source localization platform. Starting in version 3.14.0 and prior to version 3.23.1, when a request is made using an API key, the …
Instawp Connect
CRITICAL 9.8
The InstaWP Connect plugin for WordPress is vulnerable to unauthorized access of data, modification of data and loss of data due to a missing capabil…
Servicenow Devops
HIGH 7.5
A missing authorization vulnerability exists in versions of the Jenkins Plug-in for ServiceNow DevOps prior to 1.38.1 that, if exploited successfully…
POST requests to /web/mvc in GX Software XperienCentral version 10.36.0 and earlier were not blocked for uses that are not logged in. If an unauthori…
emlog 2.1.9 is vulnerable to Arbitrary file deletion via admin\template.php.
Certain HP LaserJet Pro print products are potentially vulnerable to an Elevation of Privilege and/or Information Disclosure related to a lack of aut…
HashiCorp Nomad and Nomad Enterprise 0.11.0 up to 1.5.6 and 1.4.1 HTTP search API can reveal names of available CSI plugins to unauthenticated users …
In Hazelcast through 5.0.4, 5.1 through 5.1.6, and 5.2 through 5.2.3, executor services don't check client permissions properly, allowing authenticat…
Profilegrid
HIGH 8.8
The ProfileGrid plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'profile_magic_check…
Profilegrid
HIGH 8.8
The ProfileGrid plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'edit_group' handler…
Plane version 0.7.1 allows an unauthenticated attacker to view all stored server files of all users.
In updateSettingsInternalLI of InstallPackageHelper.java, there is a possible way to sideload an app in the work profile due to a missing permission …
In getAvailabilityStatus of BluetoothScanningMainSwitchPreferenceController.java, there is a possible way to bypass a device policy restriction due t…
In getAvailabilityStatus of WifiScanningMainSwitchPreferenceController.java, there is a possible way to bypass a device policy restriction due to a m…
Benchmark Evaluator
MEDIUM 5.4
A missing permission check in Jenkins Benchmark Evaluator Plugin 1.0.1 and earlier allows attackers with Overall/Read permission to connect to an att…
Elasticbox Ci
HIGH 7.1
A missing permission check in Jenkins ElasticBox CI Plugin 5.0.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-…
Datadog
MEDIUM 6.5
A missing permission check in Jenkins Datadog Plugin 5.4.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specif…
Orka By Macstadium
HIGH 7.1
A missing permission check in Jenkins Orka by MacStadium Plugin 1.33 and earlier allows attackers with Overall/Read permission to connect to an attac…
Mabl
MEDIUM 6.5
A missing permission check in Jenkins mabl Plugin 0.0.46 and earlier allows attackers with Overall/Read permission to connect to an attacker-specifie…
Test Results Aggregator
MEDIUM 6.5
A missing permission check in Jenkins Test Results Aggregator Plugin 1.2.13 and earlier allows attackers with Overall/Read permission to connect to a…
Sumologic Publisher
MEDIUM 6.5
A missing permission check in Jenkins Sumologic Publisher Plugin 2.2.1 and earlier allows attackers with Overall/Read permission to connect to an att…
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges ne…