CWE-280: CWE-280

CVE-2023-28114 is a vulnerability in cilium-cli versions before 0.13.2 that removes user permission enforcement on etcd stores when configuring cluste...

Mastodon's streaming server incorrectly allows OAuth clients with valid authentication tokens to subscribe to public timeline events even when those t...

This vulnerability allows authorized ZooKeeper clients to execute snapshot and restore commands without proper permission checks. It affects Apache Zo...

This CVE-2025-59040 vulnerability in Tuleap allows users to see tracker names they shouldn't have access to due to improper permission verification in...

This vulnerability allows software running inside a guest virtual machine to make improper GPU system calls that can block other guest VMs from access...

Appsmith versions before 1.51 allow users with 'App Viewer' permissions to list datasources in workspaces they're invited to, which constitutes an inf...

This vulnerability in Tuleap allows users to see tracker names they should not have access to due to improper handling of permissions. It affects all ...

Dell PowerScale OneFS versions 8.2.x through 9.5.0.x contain an improper permission handling vulnerability that allows low-privileged remote attackers...