Vulnerabilities > Insufficient Granularity of Access Control

DATE CVE VULNERABILITY TITLE RISK
2024-09-13 CVE-2024-6867 Insufficient Granularity of Access Control vulnerability in Lunary 1.4.9
An information disclosure vulnerability exists in the lunary-ai/lunary, specifically in the `runs/{run_id}/related` endpoint.
network
low complexity
lunary CWE-1220
6.5
6.5
2024-03-13 CVE-2024-2412 The disabling function of the user registration page for Heimavista Rpage and Epage is not properly implemented, allowing remote attackers to complete user registration on sites where user registration is supposed to be disabled.
network
low complexity
CWE-1220
5.3
5.3
2023-12-14 CVE-2023-50713 Insufficient Granularity of Access Control vulnerability in Specklesystems Speckle Server
Speckle Server provides server, frontend, 3D viewer, and other JavaScript utilities for the Speckle 3D data platform.
network
high complexity
specklesystems CWE-1220
5.0
5.0
2023-06-14 CVE-2023-3227 Insufficient Granularity of Access Control vulnerability in Fossbilling
Insufficient Granularity of Access Control in GitHub repository fossbilling/fossbilling prior to 0.5.0.
network
low complexity
fossbilling CWE-1220
5.7
5.7
2022-12-28 CVE-2022-4801 Insufficient Granularity of Access Control vulnerability in Usememos Memos
Insufficient Granularity of Access Control in GitHub repository usememos/memos prior to 0.9.1.
network
low complexity
usememos CWE-1220
5.3
5.3
2022-12-28 CVE-2022-4813 Insufficient Granularity of Access Control vulnerability in Usememos Memos
Insufficient Granularity of Access Control in GitHub repository usememos/memos prior to 0.9.1.
network
low complexity
usememos CWE-1220
4.3
4.3