CVE-2026-18593 | Medium | 5.6 | 2026-08-03 | A weakness has been identified in vxcontrol PentAGI up to 2.1.0. This affects an unknown part of the file backend/pkg/templates/prompts/pentester.tmpl of the c… |
CVE-2026-58556 | Medium | 5.1 | 2026-07-15 | Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2026-58555 | Medium | 6.6 | 2026-07-15 | Permission bypass vulnerability in the card module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2026-14784 | Medium | 6.3 | 2026-07-06 | A vulnerability was identified in vxcontrol PentAGI up to 2.1.0. This affects an unknown function of the file backend/pkg/docker/client.go of the component Doc… |
CVE-2026-41974 | Low | 3.6 | 2026-06-09 | Permission control vulnerability in service notifications. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2026-9368 | High | 7.3 | 2026-05-24 | A vulnerability was identified in NousResearch hermes-agent up to 2026.4.16. This impacts the function execute_code of the file tools/code_execution_tool.py of… |
CVE-2026-41962 | Low | 3.6 | 2026-05-15 | Permission control vulnerability in the app management and control module. Impact: Successful exploitation of this vulnerability may affect service confidentia… |
CVE-2026-6878 | Medium | 5.6 | 2026-04-23 | A vulnerability was identified in ByteDance verl up to 0.7.0. Affected is the function math_equal of the file prime_math/grader.py. The manipulation leads to s… |
CVE-2026-6224 | High | 7.3 | 2026-04-13 | A security flaw has been discovered in nocobase plugin-workflow-javascript up to 2.0.23. This issue affects the function createSafeConsole of the file packages… |
CVE-2026-6117 | Medium | 6.3 | 2026-04-12 | A vulnerability was found in AstrBotDevs AstrBot up to 4.22.1. This issue affects the function install_plugin_upload of the file astrbot/dashboard/routes/plugi… |
CVE-2026-20046 | High | 8.8 | 2026-03-11 | A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local attacker to elevate privileges… |
CVE-2026-28541 | Medium | 4.0 | 2026-03-05 | Permission control vulnerability in the cellular_data module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-66319 | Low | 3.3 | 2026-03-05 | Permission control vulnerability in the resource scheduling module. Impact: Successful exploitation of this vulnerability may affect service integrity. |
CVE-2026-24924 | Medium | 6.1 | 2026-02-06 | Vulnerability of improper permission control in the print module.
Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2026-24920 | Medium | 6.2 | 2026-02-06 | Permission control vulnerability in the AMS module.
Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2026-24931 | Medium | 5.9 | 2026-02-06 | Vulnerability of improper criterion security check in the card module.
Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2026-24923 | Medium | 6.3 | 2026-02-06 | Permission control vulnerability in the HDC module.
Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2025-68967 | Medium | 5.7 | 2026-01-14 | Vulnerability of improper permission control in the print module.
Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2025-66329 | Medium | 4.0 | 2025-12-08 | Permission control vulnerability in the window management module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-66325 | Medium | 6.2 | 2025-12-08 | Permission control vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2025-58302 | High | 8.4 | 2025-11-28 | Permission control vulnerability in the Settings module.
Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2025-64315 | Medium | 4.4 | 2025-11-28 | Configuration defect vulnerability in the file management module.
Impact: Successful exploitation of this vulnerability may affect app data confidentiality and… |
CVE-2025-58315 | Medium | 5.5 | 2025-11-28 | Permission control vulnerability in the Wi-Fi module.
Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2025-58312 | Medium | 5.1 | 2025-11-28 | Permission control vulnerability in the App Lock module.
Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-58309 | Medium | 6.8 | 2025-11-28 | Permission control vulnerability in the startup recovery module.
Impact: Successful exploitation of this vulnerability will affect availability and confidentia… |
CVE-2025-58294 | Medium | 6.2 | 2025-11-28 | Permission control vulnerability in the print module.
Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2025-58293 | Medium | 5.5 | 2025-10-11 | Vulnerability of improper exception handling in the print module. Successful exploitation of this vulnerability may affect availability. |
CVE-2025-58285 | Medium | 5.3 | 2025-10-11 | Permission control vulnerability in the media module. Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2025-58284 | Medium | 5.9 | 2025-10-11 | Permission control vulnerability in the network module. Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2025-58283 | Medium | 5.5 | 2025-10-11 | Permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2025-58282 | Low | 2.8 | 2025-10-11 | Permission control vulnerability in the camera module. Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2025-54654 | Medium | 6.2 | 2025-10-11 | Permission control vulnerability in the Gallery module. Successful exploitation of this vulnerability may affect service confidentiality |
CVE-2025-58276 | Medium | 6.8 | 2025-09-05 | Permission verification vulnerability in the home screen module
Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-54608 | Medium | 6.2 | 2025-08-06 | Vulnerability that allows setting screen rotation direction without permission verification in the screen management module.
Impact: Successful exploitation of… |
CVE-2025-53186 | Medium | 5.9 | 2025-07-07 | Vulnerability that allows third-party call apps to send broadcasts without verification in the audio framework module
Impact: Successful exploitation of this v… |
CVE-2025-53178 | Medium | 4.8 | 2025-07-07 | Permission bypass vulnerability in the calendar storage module
Impact: Successful exploitation of this vulnerability may affect the schedule reminder function… |
CVE-2025-53177 | Low | 3.9 | 2025-07-07 | Permission bypass vulnerability in the calendar storage module
Impact: Successful exploitation of this vulnerability may affect the schedule syncing function o… |
CVE-2025-5874 | Medium | 4.6 | 2025-06-09 | A vulnerability was found in Redash up to 10.1.0/25.1.0. It has been rated as problematic. This issue affects the function run_query of the file /query_runner/… |
CVE-2025-48903 | High | 7.8 | 2025-06-06 | Permission bypass vulnerability in the media library module
Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-5321 | Medium | 6.3 | 2025-05-29 | A vulnerability classified as critical was found in aimhubio aim up to 3.29.1. This vulnerability affects the function RestrictedPythonQuery of the file /aim/s… |
CVE-2025-46587 | Medium | 6.2 | 2025-05-06 | Permission control vulnerability in the media library module
Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2025-20145 | Medium | 5.8 | 2025-03-12 | A vulnerability in the access control list (ACL) processing in the egress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to… |
CVE-2024-53011 | High | 7.9 | 2025-03-03 | Information disclosure may occur due to improper permission and access controls to Video Analytics engine. |
CVE-2024-56444 | High | 7.5 | 2025-01-08 | Cross-process screen stack vulnerability in the UIExtension module
Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2024-56440 | Medium | 6.2 | 2025-01-08 | Permission control vulnerability in the Connectivity module
Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. |
CVE-2023-52955 | Medium | 6.5 | 2025-01-08 | Vulnerability of improper authentication in the ANS system service module
Impact: Successful exploitation of this vulnerability may cause features to perform a… |
CVE-2024-43064 | High | 7.5 | 2025-01-06 | Uncontrolled resource consumption when a driver, an application or a SMMU client tries to access the global registers through SMMU. |
CVE-2024-54104 | Medium | 6.2 | 2024-12-12 | Cross-process screen stack vulnerability in the UIExtension module
Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2024-54103 | Medium | 6.1 | 2024-12-12 | Vulnerability of improper access control in the album module
Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2017-9711 | Medium | 6.7 | 2024-11-22 | Certain unprivileged processes are able to perform IOCTL calls. |
CVE-2024-20371 | Medium | 5.3 | 2024-11-06 | A vulnerability in the access control list (ACL) programming of Cisco Nexus 3550-F Switches could allow an unauthenticated, remote attacker to send traffic tha… |
CVE-2024-51527 | Medium | 5.1 | 2024-11-05 | Permission control vulnerability in the Gallery app
Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2024-51524 | Medium | 4.0 | 2024-11-05 | Permission control vulnerability in the Wi-Fi module
Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2024-20370 | Medium | 6.0 | 2024-10-23 | A vulnerability in the Cisco FXOS CLI feature on specific hardware platforms for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat De… |
CVE-2024-45449 | Medium | 5.1 | 2024-09-04 | Access permission verification vulnerability in the ringtone setting module
Impact: Successful exploitation of this vulnerability may affect service confidenti… |
CVE-2024-45442 | Medium | 5.1 | 2024-09-04 | Vulnerability of permission verification for APIs in the DownloadProviderMain module
Impact: Successful exploitation of this vulnerability will affect availabi… |
CVE-2023-7265 | Medium | 4.0 | 2024-08-08 | Permission verification vulnerability in the lock screen module
Impact: Successful exploitation of this vulnerability may affect availability |
CVE-2024-39670 | Medium | 6.2 | 2024-07-25 | Privilege escalation vulnerability in the account synchronisation module.
Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-21469 | High | 7.3 | 2024-07-01 | Memory corruption when an invoke call and a TEE call are bound for the same trusted application. |
CVE-2024-5465 | Medium | 5.9 | 2024-06-14 | Function vulnerabilities in the Calendar module
Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2023-42005 | High | 7.4 | 2024-05-29 | IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data 3.5, 4.0, 4.5, 4.6, 4.7, and 4.8 could allow a user with access to the Kubernetes pod, to… |
CVE-2024-20361 | Medium | 5.8 | 2024-05-22 | A vulnerability in the Object Groups for Access Control Lists (ACLs) feature of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated… |
CVE-2024-32996 | Medium | 6.2 | 2024-05-14 | Privilege escalation vulnerability in the account module
Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2023-52721 | Medium | 6.2 | 2024-05-14 | The WindowManager module has a vulnerability in permission control.
Impact: Successful exploitation of this vulnerability may affect confidentiality. |
CVE-2024-22452 | High | 7.3 | 2024-03-04 | Dell Display and Peripheral Manager for macOS prior to 1.3 contains an improper access control vulnerability. A low privilege user could potentially exploit th… |
CVE-2023-44281 | Medium | 6.6 | 2024-01-24 |
Dell Pair Installer version prior to 1.2.1 contains an elevation of privilege vulnerability. A low privilege user with local access to the system could potent… |
CVE-2023-52106 | Medium | 4.4 | 2024-01-16 | Vulnerability of permission verification for APIs in the DownloadProviderMain module.
Impact: Successful exploitation of this vulnerability will affect integri… |
CVE-2023-20190 | Medium | 5.8 | 2023-09-13 | A vulnerability in the classic access control list (ACL) compression feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass… |
CVE-2023-39406 | High | 7.5 | 2023-08-13 | Permission control vulnerability in the XLayout component. Successful exploitation of this vulnerability may cause apps to forcibly restart. |
CVE-2023-39394 | High | 7.5 | 2023-08-13 | Vulnerability of API privilege escalation in the wifienhance module. Successful exploitation of this vulnerability may cause the arp list to be modified. |
CVE-2023-39391 | High | 7.5 | 2023-08-13 | Vulnerability of system file information leakage in the USB Service module. Successful exploitation of this vulnerability may affect confidentiality. |
CVE-2023-39387 | Medium | 5.3 | 2023-08-13 | Vulnerability of permission control in the window management module. Successful exploitation of this vulnerability may cause malicious pop-up windows. |
CVE-2023-39384 | High | 7.5 | 2023-08-13 | Vulnerability of incomplete permission verification in the input method module. Successful exploitation of this vulnerability may cause features to perform abn… |
CVE-2023-39380 | High | 7.5 | 2023-08-13 | Permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause audio devices to perform abnormally. |
CVE-2023-3599 | Medium | 6.3 | 2023-07-10 | A vulnerability was found in SourceCodester Best Fee Management System 1.0. It has been rated as critical. Affected by this issue is the function save_user of… |
CVE-2022-48508 | High | 7.5 | 2023-07-06 | Inappropriate authorization vulnerability in the system apps. Successful exploitation of this vulnerability may affect service integrity. |
CVE-2023-21641 | Medium | 6.6 | 2023-07-04 | An app with non-privileged access can change global system brightness and cause undesired system behavior. |
CVE-2023-22633 | High | 7.5 | 2023-06-13 | An improper permissions, privileges, and access controls vulnerability [CWE-264] in FortiNAC-F 7.2.0, FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.8 and belo… |
CVE-2022-36246 | Critical | 9.8 | 2023-05-30 | Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Insecure Permissions. |
CVE-2023-2255 | Medium | 5.3 | 2023-05-25 | Improper access control in editor components of The Document Foundation LibreOffice allowed an attacker to craft a document that would cause external links to… |
CVE-2023-24573 | Medium | 4.7 | 2023-02-10 |
Dell Command | Monitor versions prior to 10.9 contain an arbitrary folder delete vulnerability during uninstallation. A locally authenticated malicious user m… |
CVE-2022-45369 | Medium | 4.3 | 2022-11-18 | Auth. (subscriber+) Broken Access Control vulnerability in Plugin for Google Reviews plugin <= 2.2.2 on WordPress. |
CVE-2022-42459 | High | 7.2 | 2022-11-18 | Auth. WordPress Options Change vulnerability in Image Hover Effects Ultimate plugin <= 9.7.1 on WordPress. |
CVE-2022-41839 | Medium | 5.3 | 2022-11-18 | Broken Access Control vulnerability in WordPress LoginPress plugin <= 1.6.2 on WordPress leading to unauth. changing of Opt-In or Opt-Out tracking settings. |
CVE-2022-42461 | Medium | 5.4 | 2022-11-18 | Broken Access Control vulnerability in miniOrange's Google Authenticator plugin <= 5.6.1 on WordPress. |
CVE-2022-41781 | Medium | 6.5 | 2022-11-18 | Broken Access Control vulnerability in Permalink Manager Lite plugin <= 2.2.20 on WordPress. |
CVE-2022-38974 | Medium | 4.3 | 2022-11-18 | Broken Access Control vulnerability in WPML Multilingual CMS premium plugin <= 4.5.10 on WordPress allows users with subscriber or higher user roles to change… |
CVE-2022-45069 | Medium | 6.3 | 2022-11-17 | Auth. (contributor+) Privilege Escalation vulnerability in Crowdsignal Dashboard plugin <= 3.0.9 on WordPress. |
CVE-2022-45066 | Medium | 5.4 | 2022-11-17 | Auth. (subscriber+) Broken Access Control vulnerability in WooSwipe WooCommerce Gallery plugin <= 2.0.1 on WordPress. |
CVE-2022-41132 | Medium | 6.1 | 2022-11-17 | Unauthenticated Plugin Settings Change Leading To Stored XSS Vulnerability in Ezoic plugin <= 2.8.8 on WordPress. |
CVE-2022-38461 | Medium | 5.4 | 2022-11-17 | Broken Access Control vulnerability in WPML Multilingual CMS premium plugin <= 4.5.10 on WordPress allows users with a subscriber or higher user role to change… |
CVE-2022-42460 | Medium | 6.5 | 2022-11-10 | Broken Access Control vulnerability leading to Stored Cross-Site Scripting (XSS) in Traffic Manager plugin <= 1.4.5 on WordPress. |
CVE-2022-41978 | High | 8.8 | 2022-11-09 | Auth. (subscriber+) Arbitrary Options Update vulnerability in Zoho CRM Lead Magnet plugin <= 1.7.5.8 on WordPress. |
CVE-2022-38104 | High | 7.2 | 2022-10-21 | Auth. WordPress Options Change (siteurl, users_can_register, default_role, admin_email and new_admin_email) vulnerability in Biplob Adhikari's Accordions – Mul… |
CVE-2022-3421 | Medium | 5.6 | 2022-10-17 | An attacker can pre-create the `/Applications/Google\ Drive.app/Contents/MacOS` directory which is expected to be owned by root to be owned by a non-root user… |
CVE-2021-28052 | High | 7.5 | 2022-09-26 | A tenant administrator Hitachi Content Platform (HCP) may modify the configuration in another tenant without authorization, potentially allowing unauthorized a… |
CVE-2022-38134 | Medium | 4.3 | 2022-09-23 | Authenticated (subscriber+) Broken Access Control vulnerability in Customer Reviews for WooCommerce plugin <= 5.3.5 at WordPress. |
CVE-2022-35238 | Medium | 6.5 | 2022-09-23 | Unauthenticated Plugin Settings Change vulnerability in Awesome Filterable Portfolio plugin <= 1.9.7 at WordPress. |
CVE-2022-38135 | Medium | 5.4 | 2022-09-12 | Broken Access Control vulnerability in Dean Oakley's Photospace Gallery plugin <= 2.3.5 at WordPress allows users with subscriber or higher role to change plug… |
CVE-2022-38070 | Medium | 5.4 | 2022-09-09 | Privilege Escalation (subscriber+) vulnerability in Pop-up plugin <= 1.1.5 at WordPress. |