CWE-284

5,270 vulnerabilities with CWE-284

CVE-2025-70986 HIGH

RuoYi 4.8.2 - Unauthenticated Sensitive Data Exposure via selectDept Function

CVSS 7.5

CVE-2025-70985 CRITICAL

RuoYi 4.8.2 - Unauthenticated Improper Access Control in Update Function

CVSS 9.1

CVE-2025-70983 CRITICAL

SpringBlade 4.5.0 - Privilege Escalation via Incorrect Access Control in authRoutes

CVSS 9.9

CVE-2025-69908 HIGH

Newgen OmniApp - Unauthenticated Information Disclosure via Client-Side JavaScript Resource

CVSS 7.5

CVE-2025-69907 HIGH

Newgen OmniDocs - Unauthenticated Information Disclosure via GetListofCabinet API Endpoint

CVSS 7.5

CVE-2025-69822 HIGH

Atomberg Erica Smart Fan Firmware V1.0.36 - Exposure of Sensitive Information via Crafted Deauth Frame

CVSS 7.4

CVE-2025-65098 HIGH

typebot < 3.13.2 - Unauthenticated Credential Theft via Malicious Typebot Preview

CVSS 7.4

CVE-2025-14083 LOW

Keycloak - Improper Access Control in Admin REST API

CVSS 2.7

CVE-2025-14977 HIGH

Dokan: AI Powered WooCommerce Multivendor Marketplace Solution <4.2...

CVSS 8.1

CVE-2025-31186 LOW

Xcode < 16.3 - Privacy Preferences Bypass via Permissions Issue

CVSS 3.3

CVE-2025-24090 LOW

iPadOS < 18.3 - Improper Access Control

CVSS 3.3

CVE-2025-64516 HIGH

GLPI 10.0.0-10.0.20 - Unauthenticated Document Access via Public FAQ

CVSS 7.5

CVE-2025-61973 HIGH

Epic Games Store - Privilege Escalation

CVSS 8.8

CVE-2025-14338 HIGH

Polkit <0.69.0 - Privilege Escalation

CVE-2025-68949 MEDIUM

n8n 1.36.0-2.1.9 - IP Whitelist Bypass via Partial String Matching

CVSS 5.3

CVE-2025-15503 HIGH

Sangfor O&M Security Management System <=3.0.8 - Unrestricted File Upload via common.jsp

CVSS 7.3

CVE-2025-46299 MEDIUM

Safari < 26.2 - Information Disclosure via Memory Initialization Issue

CVSS 4.3

CVE-2025-46297 MEDIUM

macOS Tahoe <26.2 - Info Disclosure

CVSS 5.5

CVE-2025-15495 MEDIUM

BiggiDroid Simple PHP CMS 1.0 - Unrestricted File Upload via Image Parameter in /admin/editsite.php

CVSS 4.7

CVE-2025-68716 HIGH

KAYSUS KS-WR3600 Firmware 1.0.5.9.1 - Unauthenticated Root Shell Access via SSH

CVSS 8.4

CVE-2025-69221 MEDIUM

LibreChat 0.8.1-rc2 - Authenticated Improper Access Control via Agent Permissions Query

CVSS 4.3

CVE-2025-69220 HIGH

LibreChat 0.8.1-rc2 - Authenticated Improper Access Control in File Upload and Search

CVSS 7.1

CVE-2025-0980 MEDIUM

Nokia SR Linux < 23.10.6 and 24.10.2 - Unauthenticated JSON-RPC Access

CVSS 6.4

CVE-2025-15448 MEDIUM

cld378632668 JavaMall <994f1e2b019378ec9444cdf3fce2d5b5f72d28f0 - U...

CVSS 6.3

CVE-2025-69284 MEDIUM

Plane < 1.2.0 - Unauthenticated Improper Access Control via Workspace Members API

CVSS 4.3