CWE-284
Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
5,300 vulnerabilities with CWE-284
CVE-2025-2989
MEDIUM
Tenda FH1202 1.2.0.14(408) - Info Disclosure
CVSS 5.3
CVE-2025-2978
MEDIUM
WCMS 11 - Unrestricted File Upload via Article Publishing Page
CVSS 6.3
CVE-2025-2973
MEDIUM
College Management System 1.0 - Unrestricted Upload
CVSS 6.3
CVE-2025-2955
MEDIUM
TOTOLINK A3000RU <5.9c.5185 - Improper Access Controls
CVSS 5.3
CVE-2025-2954
LOW
mannaandpoem OpenManus <2025.3.13 - Improper Access Controls
CVSS 3.3
CVE-2025-2952
MEDIUM
Bluestar Micro Mall 1.0 - Unrestricted Upload
CVSS 6.3
CVE-2025-20230
MEDIUM
Splunk Enterprise <9.4.1, 9.3.3, 9.2.5, 9.1.8 - Info Disclosure
CVSS 4.3
CVE-2025-20229
HIGH
Splunk <9.3.3, 9.2.5, 9.1.8 - Cloud & Enterprise - RCE
CVSS 8.0
CVE-2025-26010
CRITICAL
Telesquare TLR-2005KSH 1.1.4 - Unauthenticated Password Modification via admin.cgi setUserNamePassword Parameter
CVSS 9.8
CVE-2025-2499
MEDIUM
Devolutions Remote Desktop Manager <2025.1.25 - Auth Bypass
CVSS 5.4
CVE-2025-23203
MEDIUM
Icinga Director <1.10.4-1.11.4 - Info Disclosure
CVSS 5.5
CVE-2025-29315
CRITICAL
OpenDaylight Service Function Chaining SFC Sodium-SR4 and below - Improper Access Control via Shiro-based RBAC Mechanism
CVSS 9.8
CVE-2025-2706
MEDIUM
Digiwin ERP 5.0.1 - Unrestricted Upload
CVSS 6.3
CVE-2025-30208
MEDIUM
Vite - Arbitrary File Read
CVSS 5.3
CVE-2025-2705
HIGH
Digiwin ERP 5.1 - Unrestricted Upload
CVSS 7.3
CVE-2025-2702
MEDIUM
Softwin WMX3 3.1 - Unrestricted Upload
CVSS 6.3
CVE-2025-2688
MEDIUM
TOTOLINK A3000RU <5.9c.5185 - Improper Access Controls
CVSS 4.3
CVE-2025-2687
MEDIUM
PHPGurukul eLearning System 1.0 - Unrestricted Upload
CVSS 6.3
CVE-2025-2686
MEDIUM
mingyuefusu <d4836f6b49cd0ac79a4021b15ce99ff7229d4694 - Improper Ac...
CVSS 6.5
CVE-2025-2671
MEDIUM
Yue Lao Blind Box <4.0 - Unrestricted Upload
CVSS 6.3
CVE-2025-2607
MEDIUM
phplaozhang LzCMS-LaoZhangBoKeXiTong <= 1.1.4 - Unrestricted File Upload via /admin/upload/upimage.html File Parameter
CVSS 6.3
CVE-2025-2606
MEDIUM
Best Church Management Software 1.0 - Unrestricted File Upload via Soulwinning CRUD Photo Parameter
CVSS 6.3
CVE-2025-2557
MEDIUM
Audi UTR Dashcam <2.89-2.90 - Improper Access Controls
CVSS 5.5
CVE-2025-2553
MEDIUM
D-Link DIR-618 and DIR-605L - Improper Access Control in Virtual Server Configuration
CVSS 4.3
CVE-2025-2552
MEDIUM
D-Link DIR-618 and DIR-605L 2.02/3.02 - Improper Access Control in formTcpipSetup
CVSS 4.3
Details
Vulnerabilities
5,300