Weaknesses of type CWE-284

4,445 results
CVE-2024-55025MEDIUMIncorrect access control in the VNC component of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to access tEPSS 0.3%CVE-2023-1490MEDIUMMax Secure Anti Virus Plus IoControlCode SDActMon.sys 0x220020 access controlEPSS 0.3%CVE-2023-1491MEDIUMMax Secure Anti Virus Plus IoControlCode MaxCryptMon.sys 0x220020 access controlEPSS 0.3%CVE-2026-28930HIGHA permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.5. An app may be able to access protecEPSS 0.3%CVE-2022-48615MEDIUMAn improper access control vulnerability exists in a Huawei datacom product. Attackers can exploit this vulnerability to obtain partial deviEPSS 0.3%CVE-2026-46916HIGHVulnerability in the Oracle Process Manufacturing Product Development product of Oracle E-Business Suite (component: Quality Management SpecEPSS 0.3%CVE-2024-20911LOWVulnerability in Oracle Audit Vault and Database Firewall (component: Firewall). Supported versions that are affected are 20.1-20.9. DifficEPSS 0.3%CVE-2025-64347HIGHApollo Router Improperly Enforces Renamed Access Control DirectivesEPSS 0.3%CVE-2025-10957HIGHUnrestricted FTP Access Vulnerability in Syrotech RouterEPSS 0.3%CVE-2021-34401HIGHNVIDIA Linux kernel distributions contain a vulnerability in nvmap NVGPU_IOCTL_CHANNEL_SET_ERROR_NOTIFIER, where improper access control mayEPSS 0.3%CVE-2025-65098HIGHTypebot Vulnerable to Credential Theft via Client-Side Script Execution and API Authorization BypassEPSS 0.3%CVE-2025-7016HIGHImproper Access Control in Akinsoft's QR MenuEPSS 0.3%CVE-2025-20230MEDIUMMissing Access Control and Incorrect Ownership of Data in App Key Value Store (KVStore) collections in the Splunk Secure Gateway AppEPSS 0.3%CVE-2025-37131MEDIUMAuthenticated Arbitrary File Read allows Data Exposure in CLI InterfaceEPSS 0.3%CVE-2026-50545CRITICALFission Environment CRD PodSpec Injection Leading to Node Escape and Cluster TakeoverEPSS 0.3%CVE-2025-56405HIGHAn issue was discovered in litmusautomation litmus-mcp-server thru 0.0.1 allowing unauthorized attackers to control the target's MCP serviceEPSS 0.3%CVE-2026-35234MEDIUMVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Partition). Supported versions that are affected are 9.0.0-9.EPSS 0.3%CVE-2025-8859MEDIUMcode-projects eBlog Site File Upload save-slider.php unrestricted uploadEPSS 0.3%CVE-2026-1152MEDIUMtechnical-laohu mpay QR Code Image unrestricted uploadEPSS 0.3%CVE-2025-11417MEDIUMCampcodes Advanced Online Voting Management System voters_add.php unrestricted uploadEPSS 0.3%