Falhas do tipo CWE-863
2.098 resultadosCVE-2025-8796MEDIUMLitmusChaos Litmus Delete Request delete_project authorizationEPSS 0.3%CVE-2025-62647MEDIUMThe Restaurant Brands International (RBI) assistant platform through 2025-09-06 provides the functionality of returning a JWT that can be usEPSS 0.3%CVE-2026-25859HIGHWeKan < 8.20 Migration Functionality Insufficient Permission ChecksEPSS 0.3%CVE-2020-36625MEDIUMdestiny.gg chat main.go websocket.Upgrader cross-site request forgeryEPSS 0.3%CVE-2024-7604MEDIUMLogsign Unified SecOps Platform Incorrect Authorization Authentication Bypass VulnerabilityEPSS 0.3%CVE-2026-24748MEDIUMKargo's `GetConfig()` and `RefreshResource()` API endpoints allow unauthenticated accessEPSS 0.3%CVE-2026-50008MEDIUMParse Server: Server option routeAllowList is bypassable through batch sub-requestsEPSS 0.3%CVE-2024-38369CRITICALXWiki programming rights may be inherited by inclusion EPSS 0.3%CVE-2025-48888MEDIUMDeno run with --allow-read and --deny-read flags results in allowedEPSS 0.3%CVE-2025-0781HIGHIncorrect Authorization in SimGearEPSS 0.3%CVE-2026-48064HIGHpam_usb: PAM_RHOST check skipped when deny_remote=false allows XDMCP authentication bypassEPSS 0.3%CVE-2024-13277CRITICALSmart IP Ban - Critical - Access bypass - SA-CONTRIB-2024-041EPSS 0.3%CVE-2025-11340HIGHIncorrect Authorization in GitLabEPSS 0.3%CVE-2022-3978MEDIUMNodeBB abort cross-site request forgeryEPSS 0.3%CVE-2024-13281CRITICALMonster Menus - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2024-045EPSS 0.3%CVE-2023-49783MEDIUMNo permission checks for editing/deleting records with CSV import formEPSS 0.3%CVE-2024-13278CRITICALDiff - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2024-042EPSS 0.3%CVE-2026-41404HIGHOpenClaw < 2026.3.31 - Operator Admin Privilege Escalation via Trusted-Proxy AuthenticationEPSS 0.3%CVE-2025-8807MEDIUMxujeff tianti 天梯 save authorizationEPSS 0.3%CVE-2025-53895HIGHZITADEL has broken authN and authZ in session API and resulting session tokensEPSS 0.3%