Weaknesses of type CWE-284

4,444 results
CVE-2023-1490MEDIUMMax Secure Anti Virus Plus IoControlCode SDActMon.sys 0x220020 access controlEPSS 0.3%CVE-2025-11078MEDIUMitsourcecode Open Source Job Portal controller.php unrestricted uploadEPSS 0.3%CVE-2025-10398MEDIUMfcba_zzm ics-park Smart Park Management System FileUploadUtils.java unrestricted uploadEPSS 0.3%CVE-2024-55025MEDIUMIncorrect access control in the VNC component of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to access tEPSS 0.3%CVE-2022-48615MEDIUMAn improper access control vulnerability exists in a Huawei datacom product. Attackers can exploit this vulnerability to obtain partial deviEPSS 0.3%CVE-2026-46916HIGHVulnerability in the Oracle Process Manufacturing Product Development product of Oracle E-Business Suite (component: Quality Management SpecEPSS 0.3%CVE-2024-20911LOWVulnerability in Oracle Audit Vault and Database Firewall (component: Firewall). Supported versions that are affected are 20.1-20.9. DifficEPSS 0.3%CVE-2025-65098HIGHTypebot Vulnerable to Credential Theft via Client-Side Script Execution and API Authorization BypassEPSS 0.3%CVE-2025-64347HIGHApollo Router Improperly Enforces Renamed Access Control DirectivesEPSS 0.3%CVE-2025-20230MEDIUMMissing Access Control and Incorrect Ownership of Data in App Key Value Store (KVStore) collections in the Splunk Secure Gateway AppEPSS 0.3%CVE-2025-56405HIGHAn issue was discovered in litmusautomation litmus-mcp-server thru 0.0.1 allowing unauthorized attackers to control the target's MCP serviceEPSS 0.3%CVE-2026-50545CRITICALFission Environment CRD PodSpec Injection Leading to Node Escape and Cluster TakeoverEPSS 0.3%CVE-2021-34401HIGHNVIDIA Linux kernel distributions contain a vulnerability in nvmap NVGPU_IOCTL_CHANNEL_SET_ERROR_NOTIFIER, where improper access control mayEPSS 0.3%CVE-2025-10957HIGHUnrestricted FTP Access Vulnerability in Syrotech RouterEPSS 0.3%CVE-2025-37131MEDIUMAuthenticated Arbitrary File Read allows Data Exposure in CLI InterfaceEPSS 0.3%CVE-2025-7016HIGHImproper Access Control in Akinsoft's QR MenuEPSS 0.3%CVE-2026-35235MEDIUMVulnerability in the MySQL Server product of Oracle MySQL (component: Server: GIS). Supported versions that are affected are 9.0.0-9.6.0. EEPSS 0.3%CVE-2026-3800MEDIUMSourceCodester/janobe Resort Reservation System controller.php doInsert unrestricted uploadEPSS 0.3%CVE-2024-42021HIGHAn improper access control vulnerability allows an attacker with valid access tokens to access saved credentials.EPSS 0.3%CVE-2025-11351MEDIUMcode-projects Online Hotel Reservation System editpicexec.php unrestricted uploadEPSS 0.3%