The web application does not adequately enforce appropriate authorization on all restricted URLs, scripts, or files.
212 vulnerabilities with CWE-425
CVE-2026-1978
MEDIUM
kalyan02 NanoCMS <0.4 - Info Disclosure
CVSS 5.3
CVE-2025-52024
CRITICAL
Aptsys Gemscms Backend < 2025-05-28 - Missing Authorization
CVSS 9.4
CVE-2026-0790
HIGH
Algosolutions 8180 IP Audio Alerter Firmware - Information Disclosure
CVSS 7.5
CVE-2026-0650
Flagr - Missing Authentication
CVE-2025-15153
LOW
PbootCMS <3.2.12 - Info Disclosure
CVSS 3.7
CVE-2025-67844
MEDIUM
Mintlify Platform <2025-11-15 - Info Disclosure
CVSS 5.0
CVE-2025-65011
WODESYS WD- R608U - Info Disclosure
CVE-2025-26381
Unknown - Info Disclosure
CVE-2025-14697
LOW
Shenzhen Sixun Software Sixun Shanghui Group Business Management Sy...
CVSS 3.7
CVE-2025-57823
LOW
Fortinet FortiAuthenticator <6.6.7 - Info Disclosure
CVSS 2.7
CVE-2025-6195
MEDIUM
GitLab EE <18.4.5-18.6.1 - Info Disclosure
CVSS 4.3
CVE-2025-62778
MEDIUM
Frappe Learning <2.39.1 - Info Disclosure
CVSS 5.3
CVE-2025-11280
LOW
Frappe LMS 2.35.0 - Unknown Vuln
CVSS 3.7
CVE-2025-59797
MEDIUM
Profession Fit 5.0.99 Build 44910 - Auth Bypass
CVSS 5.8
CVE-2025-10287
LOW
roncoo-pay <9428382af21cd5568319eae7429b7e1d0332ff40 - Unknown Vuln
CVSS 3.1
CVE-2025-31971
MEDIUM
AIML Solutions for HCL SX - SSRF
CVSS 5.1
CVE-2022-43110
CRITICAL
Voltronic Power ViewPower <1.04-21353 & PowerShield Netguard <1.04-...
CVSS 9.8
CVE-2025-55736
MEDIUM
flaskBlog <2.8.0 - Privilege Escalation
CVSS 6.5
CVE-2025-41404
MEDIUM
iroha Board <v0.10.12 - Info Disclosure
CVSS 4.3
CVE-2025-53073
MEDIUM
Sentry 25.1.0-25.5.1 - Info Disclosure
CVSS 4.2
CVE-2025-52920
MEDIUM
Innoshop <0.4.1 - Info Disclosure
CVSS 6.4
CVE-2025-6352
MEDIUM
code-projects Automated Voting System 1.0 - Direct Request
CVSS 5.3
CVE-2025-48207
HIGH
TYPO3 reint_downloadmanager <5.0.0 - Info Disclosure
CVSS 8.6
CVE-2025-48205
HIGH
TYPO3 sr_feuser_register <12.4.8 - Info Disclosure
CVSS 8.6
CVE-2025-48202
MEDIUM
TYPO3 femanager <8.2.1 - Info Disclosure
CVSS 5.3
Details
Vulnerabilities
212