CWE-566.

MailWatch: IDOR lets any authenticated user release or delete another tenant's quarantined mail

• MailWatch
• Broken access control
• CWE-566

Deserialization of untrusted data in Jenkins

• Jenkins
• Insecure deserialization
• CWE-566

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.9.1, the GraphQL mutations "IndividualDeletionDeleteMutation" is intended to ...

• Broken access control
• CWE-566

<6.9.1 · fixed in 6.9.1

SQLi in Database Software's Databank Accreditation Software

• DATABASE Software Training Consulting Ltd. Databank Accreditation Software
• CWE-566

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.8.1, the GraphQL mutation "WorkspacePopoverDeletionMutation" allows users to ...

• Broken access control
• CWE-566

<6.8.1 · fixed in 6.8.1

Subrion CMS: Authenticated administrators are able to gain escalated access through Run SQL Query tool

• CWE-566

<=4.2.1 · no fixed version yet

Zulip allows the deletion of Custom profile fields by administrators of a different organization

• zulip
• CWE-566

Zulip allows the deletion of organization by administrators of a different organization

• zulip
• CWE-566

SQL Injection in Harbor scan log API

• CWE-566

<2.8.6 || >=2.9.0, <2.9.4 || >=2.10.0, <2.10.2 · fixed in 2.8.6, 2.9.4, 2.10.2

EC-CUBE vulnerable to authorization bypass

• Broken access control
• CWE-566

>=2.11.0, <2.12.2 · fixed in 2.12.2