Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical10.0Widget Factory Joomla Content Editor Improper Access Control VulnerabilityKEVEPSS 16.2%Jun 5, 2026
- Critical10.0Ubiquiti UniFi OS Improper Access Control VulnerabilityKEVEPSS 15.2%May 21, 2026
- Medium5.3Improper access control between the Joint Test Action Group (JTAG) and Advanced Extensible Interface (AXI) could allow an attacker with physical access to read or over…May 15, 2026
- High8.8An access issue was addressed with additional sandbox restrictions.May 12, 2026
- High7.2Due to not validating the organization context when executing adaptive authentication flows, the WSO2 Identity Server allows adaptive authentication logic to be trigge…May 11, 2026
- Critical9.8Fortinet FortiClient EMS Improper Access Control VulnerabilityKEVEPSS 9.1%Apr 3, 2026
- Critical10.0Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control VulnerabilityKEVEPSS 73.2%Jan 20, 2026
- Critical9.1TOTOLINK A3300R V17.0.0cu.557_B20221024 and N200RE V9.3.5u.6448_B20240521 and V9.3.5u.6437_B20230519 are vulnerable to Incorrect Access Control.Dec 15, 2025
- High7.5An issue was discovered in Dynatrace OneAgent before 1.325.47.Dec 15, 2025
- High8.8An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16.Dec 15, 2025
- High7.5An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16.Dec 15, 2025
- Critical9.1Gladinet Triofox Improper Access Control VulnerabilityKEVEPSS 95.7%Nov 10, 2025
- High7.8Microsoft Windows Improper Access Control VulnerabilityKEVEPSS 2.7%Oct 14, 2025
- High8.8Microsoft Windows SMB Client Improper Access Control VulnerabilityKEVEPSS 82.7%Jun 10, 2025
- High7.5Vite Vitejs Improper Access Control VulnerabilityKEVEPSS 65.2%Mar 31, 2025
- Medium6.5Improper access control in mail module of Odoo Community 17.0 and Odoo Enterprise 17.0 allows remote authenticated attackers to extract sensitive information via an or…Feb 25, 2025
- High8.8Improper access control in the auth_oauth module of Odoo Community 15.0 and Odoo Enterprise 15.0 allows an internal user to export the OAuth tokens of other users.Feb 25, 2025
- Critical9.8Microsoft Power Pages Improper Access Control VulnerabilityKEVEPSS 1.6%Feb 19, 2025
- Critical9.8Synacor Zimbra Collaboration Suite (ZCS) Command Execution VulnerabilityKEVEPSS 99.9%Oct 2, 2024
- Critical9.8SonicWall SonicOS Improper Access Control VulnerabilityKEVEPSS 18.4%Aug 23, 2024
- Critical9.8Apache HugeGraph-Server Improper Access Control VulnerabilityKEVEPSS 99.2%Apr 22, 2024
- High7.4Adobe ColdFusion Improper Access Control VulnerabilityKEVEPSS 98.5%Mar 18, 2024
- Critical9.8GitLab Community and Enterprise Editions Improper Access Control VulnerabilityKEVEPSS 94.6%Jan 12, 2024
- High7.5Adobe ColdFusion Improper Access Control VulnerabilityKEVEPSS 99.8%Jul 20, 2023
- High7.5Adobe ColdFusion Improper Access Control VulnerabilityKEVEPSS 99.8%Jul 12, 2023