CWE-639

1,574 vulnerabilities with CWE-639

CVE-2025-3282 MEDIUM

User Registration & Membership - Insecure Direct Object Reference

CVSS 5.3

CVE-2025-32373 MEDIUM

Dnnsoftware Dotnetnuke < 9.13.8 - IDOR

CVSS 6.5

CVE-2025-2526 HIGH

Streamit theme <4.0.2 - Privilege Escalation

CVSS 8.8

CVE-2025-22931 HIGH

Os4ed Opensis < 9.1 - IDOR

CVSS 7.5

CVE-2025-31867 MEDIUM

JoomSky JS Job Manager <2.0.2 - Auth Bypass

CVSS 5.4

CVE-2025-31833 MEDIUM

themeglow JobBoard <1.2.7 - Auth Bypass

CVSS 4.9

CVE-2025-30777 MEDIUM

PalsCode Support Genix <1.4.11 - Auth Bypass

CVSS 4.3

CVE-2025-1667 HIGH

Igexsolutions Wpschoolpress < 2.2.16 - Missing Authorization

CVSS 8.8

CVE-2025-2271 HIGH

Issuetrak <17.2.2 - Info Disclosure

CVSS 7.7

CVE-2025-28874 MEDIUM

Shanebp BP Email Assign Templates < 1.8 - IDOR

CVSS 6.5

CVE-2025-27436 MEDIUM

SAP S/4HANA - Privilege Escalation

CVSS 4.3

CVE-2025-27433 MEDIUM

SAP S/4HANA - Auth Bypass

CVSS 4.3

CVE-2025-26660 MEDIUM

SAP Fiori - Auth Bypass

CVSS 4.3

CVE-2025-2125 MEDIUM

Control iD RH iD 25.2.25.0 - Improper Control of Resource Identifiers

CVSS 4.3

CVE-2025-0337 MEDIUM

ServiceNow - Auth Bypass

CVSS 6.5

CVE-2025-27507 CRITICAL

Zitadel - IDOR

CVSS 9.0

CVE-2025-25952 MEDIUM

Serosoft Academia Student Information System - IDOR

CVSS 6.5

CVE-2025-26977 LOW

Ninjateam Filebird < 6.4.6 - IDOR

CVSS 3.8

CVE-2025-26965 MEDIUM

Amelia <1.2.16 - Auth Bypass

CVSS 5.3

CVE-2025-1607 MEDIUM

Mayurik Best Employee Management System - Improper Authorization

CVSS 4.3

CVE-2025-25282 HIGH

RAGFlow - Privilege Escalation

CVSS 8.1

CVE-2025-0352 HIGH

Rapid Response Monitoring My Security Account App - Info Disclosure

CVSS 7.5

CVE-2025-26788 HIGH

StrongKey FIDO Server <4.15.1 - RCE

CVSS 8.4

CVE-2025-1270 CRITICAL

Anapi Group's h6web - SSRF

CVSS 9.1

CVE-2025-0661 MEDIUM

DethemeKit For Elementor <2.36 - Info Disclosure

CVSS 4.3