Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.7The Ignition Perspective module does not properly validate session privileges when determining Designer-level access.Oct 13, 2026
- UnknownIncorrect authorization in Updater in Google Chrome prior to 155.0.8059.79 allowed a local attacker to execute arbitrary code outside the sandbox via a local program.Oct 13, 2026
- UnknownIncorrect authorization in Mojo in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to potentially execute arbitrary code outside the sandbo…Oct 13, 2026
- High7.4IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to bypass security restrictions due to incorrect authorization.Oct 13, 2026
- High8.6Photoshop Desktop is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.Oct 13, 2026
- Critical9.6ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.Oct 13, 2026
- High8.4ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.Oct 13, 2026
- Medium5.4IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 is affected by a privilege escalation vulnerability with the restConnector-2.0 feature enabled.Oct 13, 2026
- Low3.5Indico is a feature-rich event management system.Oct 13, 2026
- High7.5ColdFusion is affected by an Incorrect Authorization vulnerability that could lead to disclosure of sensitive memory.Oct 13, 2026
- Critical9.6ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass.Oct 13, 2026
- High8.8ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.Oct 13, 2026
- High8.8ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.Oct 13, 2026
- High8.8ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.Oct 13, 2026
- High7.8ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.Oct 13, 2026
- Critical9.9ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.Oct 13, 2026
- High8.8ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.Oct 13, 2026
- High8.8ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.Oct 13, 2026
- High7.7ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass.Oct 13, 2026
- High8.8ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.Oct 13, 2026
- High8.2ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.Oct 13, 2026
- Medium4.3Contao: Improper access control in the table access voterEPSS 0.2%Oct 9, 2026
- High7.4AsyncHttpClient: Pooled connections can still be shared across NTLM, Negotiate and proxy loginsEPSS 0.2%Oct 8, 2026
- Critical9.1Adobe Commerce and Magento Incorrect Authorization VulnerabilityKEVEPSS 87.5%Aug 11, 2026
- High8.8JFrog Artifactory Incorrect Authorization VulnerabilityKEVEPSS 8.6%Jul 27, 2026
50 records · page 1 of 2
PreviousNext