CWE-862 · Missing Authorization (page 70)
Page 70 of 92 — CVEs classified under CWE-862, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-4164 | High | 8.4 | 2024-01-02 | There is a possible information disclosure due to a missing permission check. This could lead to local information disclosure of health data with no additional… |
CVE-2023-47458 | Critical | 9.8 | 2024-01-02 | An issue in SpringBlade v.3.7.0 and before allows a remote attacker to escalate privileges via the lack of permissions control framework. |
CVE-2023-5877 | Critical | 9.8 | 2024-01-01 | The affiliate-toolkit WordPress plugin before 3.4.3 lacks authorization and authentication for requests to it's affiliate-toolkit-starter/tools/atkp_imagerecei… |
CVE-2023-52275 | Low | 2.1 | 2023-12-31 | Gallery3d on Tecno Camon X CA7 devices allows attackers to view hidden images by navigating to data/com.android.gallery3d/.privatealbum/.encryptfiles and guess… |
CVE-2023-4468 | Medium | 4.3 | 2023-12-29 | A vulnerability was found in Poly Trio 8500, Trio 8800 and Trio C60. It has been classified as problematic. This affects an unknown part of the component Poly… |
CVE-2023-22676 | Low | 3.1 | 2023-12-29 | Missing Authorization vulnerability in Anders Thorborg.This issue affects Anders Thorborg: from n/a through 1.4.12. |
CVE-2023-49230 | High | 8.8 | 2023-12-28 | An issue was discovered in Peplink Balance Two before 8.4.0. A missing authorization check in captive portals allows attackers to modify the portals' configura… |
CVE-2023-49229 | Medium | 4.3 | 2023-12-28 | An issue was discovered in Peplink Balance Two before 8.4.0. A missing authorization check in the administration web service allows read-only, unprivileged use… |
CVE-2023-49003 | Medium | 5.3 | 2023-12-27 | An issue in simplemobiletools Simple Dialer 5.18.1 allows an attacker to bypass intended access restrictions via interaction with com.simplemobiletools.dialer… |
CVE-2023-51650 | High | 7.5 | 2023-12-22 | Hertzbeat is an open source, real-time monitoring system. Prior to version 1.4.1, Spring Boot permission configuration issues caused unauthorized access vulner… |
CVE-2023-22674 | Medium | 5.4 | 2023-12-21 | Missing Authorization, Cross-Site Request Forgery (CSRF) vulnerability in Hal Gatewood Dashicons + Custom Post Types.This issue affects Dashicons + Custom Post… |
CVE-2023-25715 | Medium | 5.4 | 2023-12-19 | Missing Authorization vulnerability in GamiPress GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress.This issue… |
CVE-2023-48751 | Medium | 4.3 | 2023-12-19 | Missing Authorization, Cross-Site Request Forgery (CSRF) vulnerability in Roland Barker, xnau webdesign Participants Database allows Accessing Functionality No… |
CVE-2023-47754 | Medium | 4.3 | 2023-12-19 | Missing Authorization vulnerability in Clever plugins Delete Duplicate Posts allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects… |
CVE-2023-46212 | Medium | 6.3 | 2023-12-19 | Missing Authorization, Cross-Site Request Forgery (CSRF) vulnerability in TienCOP WP EXtra allows Accessing Functionality Not Properly Constrained by ACLs, Cro… |
CVE-2023-5949 | High | 7.5 | 2023-12-18 | The SmartCrawl WordPress plugin before 3.8.3 does not prevent unauthorised users from accessing password-protected posts' content. |
CVE-2023-5056 | Medium | 6.8 | 2023-12-18 | A flaw was found in the Skupper operator, which may permit a certain configuration to create a service account that would allow an authenticated attacker in th… |
CVE-2023-50976 | Critical | 9.8 | 2023-12-18 | Redpanda before 23.1.21 and 23.2.x before 23.2.18 has missing authorization checks in the Transactions API. |
CVE-2023-5061 | Medium | 4.3 | 2023-12-15 | An issue has been discovered in GitLab affecting all versions starting from 9.3 before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions star… |
CVE-2023-48375 | High | 8.8 | 2023-12-15 | SmartStar Software CWS is a web-based integration platform, it has a vulnerability of missing authorization and users are able to access data or perform action… |
CVE-2023-48676 | High | 7.1 | 2023-12-14 | Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows… |
CVE-2023-50779 | Medium | 4.3 | 2023-12-13 | Missing permission checks in Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier allow attackers with Overall/Read permission to connect to an attacker-specifie… |
CVE-2023-50769 | Medium | 4.3 | 2023-12-13 | Missing permission checks in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allow attackers with Overall/Read permission to connect to an attacker-specifi… |
CVE-2023-50767 | Medium | 5.4 | 2023-12-13 | Missing permission checks in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allow attackers with Overall/Read permission to send an HTTP request to an att… |
CVE-2023-50765 | Medium | 4.3 | 2023-12-13 | A missing permission check in Jenkins Scriptler Plugin 342.v6a_89fd40f466 and earlier allows attackers with Overall/Read permission to read the contents of a G… |
CVE-2023-47573 | High | 8.8 | 2023-12-13 | An issue discovered in Relyum RELY-PCIe 22.2.1 devices. The authorization mechanism is not enforced in the web interface, allowing a low-privileged user to exe… |
CVE-2023-48417 | Critical | 9.8 | 2023-12-11 | Missing Permission checks resulting in unauthorized access and Manipulation in KeyChainActivity Application |
CVE-2023-6394 | High | 7.4 | 2023-12-09 | A flaw was found in Quarkus. This issue occurs when receiving a request over websocket with no role-based permission specified on the GraphQL operation, Quarku… |
CVE-2023-48402 | High | 7.8 | 2023-12-08 | In ppcfw_enable of ppcfw.c, there is a possible EoP due to a missing permission check. This could lead to local escalation of privilege with no additional exec… |
CVE-2023-39167 | High | 7.5 | 2023-12-07 | In SENEC Storage Box V1,V2 and V3 an unauthenticated remote attacker can obtain the devices' logfiles that contain sensitive data. |
CVE-2023-5714 | Medium | 4.3 | 2023-12-07 | The System Dashboard plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the sd_db_specs() function hooked v… |
CVE-2023-5713 | Medium | 4.3 | 2023-12-07 | The System Dashboard plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the sd_option_value() function hook… |
CVE-2023-5712 | Medium | 4.3 | 2023-12-07 | The System Dashboard plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the sd_global_value() function hook… |
CVE-2023-5711 | Medium | 4.3 | 2023-12-07 | The System Dashboard plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the sd_php_info() function hooked v… |
CVE-2023-5710 | Medium | 4.3 | 2023-12-07 | The System Dashboard plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the sd_constants() function hooked… |
CVE-2023-46354 | High | 7.5 | 2023-12-06 | In the module "Orders (CSV, Excel) Export PRO" (ordersexport) < 5.2.0 from MyPrestaModules for PrestaShop, a guest can download personal information without re… |
CVE-2023-44113 | High | 7.5 | 2023-12-06 | Vulnerability of missing permission verification for APIs in the Designed for Reliability (DFR) module. Successful exploitation of this vulnerability may affec… |
CVE-2023-40094 | High | 7.8 | 2023-12-04 | In keyguardGoingAway of ActivityTaskManagerService.java, there is a possible lock screen bypass due to a missing permission check. This could lead to local esc… |
CVE-2023-40089 | High | 7.8 | 2023-12-04 | In getCredentialManagerPolicy of DevicePolicyManagerService.java, there is a possible method for users to select credential managers without permission due to… |
CVE-2023-32855 | Medium | 6.7 | 2023-12-04 | In aee, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with System execution p… |
CVE-2023-42749 | Medium | 5.5 | 2023-12-04 | In enginnermode service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local inform… |
CVE-2023-42748 | High | 7.8 | 2023-12-04 | In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges need… |
CVE-2023-42747 | High | 7.8 | 2023-12-04 | In camera service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed |
CVE-2023-42746 | High | 7.8 | 2023-12-04 | In power manager, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed |
CVE-2023-42745 | High | 7.8 | 2023-12-04 | In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges need… |
CVE-2023-42744 | Medium | 5.5 | 2023-12-04 | In telecom service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges needed |
CVE-2023-42743 | High | 7.8 | 2023-12-04 | In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges need… |
CVE-2023-42742 | Medium | 5.5 | 2023-12-04 | In sysui, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges needed |
CVE-2023-42741 | Medium | 5.5 | 2023-12-04 | In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information… |
CVE-2023-42740 | High | 7.8 | 2023-12-04 | In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local escalation… |
CVE-2023-42739 | High | 7.8 | 2023-12-04 | In engineermode service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local escala… |
CVE-2023-42738 | High | 7.8 | 2023-12-04 | In telocom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges need… |
CVE-2023-42737 | Medium | 5.5 | 2023-12-04 | In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information… |
CVE-2023-42736 | High | 7.8 | 2023-12-04 | In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges need… |
CVE-2023-42735 | Medium | 4.4 | 2023-12-04 | In telephony service, there is a possible missing permission check. This could lead to local information disclosure with System execution privileges needed |
CVE-2023-42734 | Medium | 5.5 | 2023-12-04 | In telephony service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges nee… |
CVE-2023-42733 | Medium | 5.5 | 2023-12-04 | In telephony service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges nee… |
CVE-2023-42732 | Medium | 5.5 | 2023-12-04 | In telephony service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges nee… |
CVE-2023-42730 | Medium | 5.5 | 2023-12-04 | In IMS service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information dis… |
CVE-2023-42714 | Medium | 5.5 | 2023-12-04 | In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local informatio… |
CVE-2023-42713 | Medium | 5.5 | 2023-12-04 | In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local informatio… |
CVE-2023-42712 | Medium | 5.5 | 2023-12-04 | In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local informatio… |
CVE-2023-42711 | Medium | 5.5 | 2023-12-04 | In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local informatio… |
CVE-2023-42710 | Medium | 5.5 | 2023-12-04 | In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local informatio… |
CVE-2023-42709 | Medium | 5.5 | 2023-12-04 | In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local informatio… |
CVE-2023-42708 | Medium | 5.5 | 2023-12-04 | In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local informatio… |
CVE-2023-42707 | Medium | 5.5 | 2023-12-04 | In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local informatio… |
CVE-2023-42706 | Medium | 5.5 | 2023-12-04 | In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local informatio… |
CVE-2023-42705 | Medium | 5.5 | 2023-12-04 | In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disc… |
CVE-2023-42704 | Medium | 5.5 | 2023-12-04 | In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disc… |
CVE-2023-42703 | Medium | 5.5 | 2023-12-04 | In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local informatio… |
CVE-2023-42702 | Medium | 5.5 | 2023-12-04 | In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local informatio… |
CVE-2023-42701 | Medium | 5.5 | 2023-12-04 | In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local informatio… |
CVE-2023-42700 | Medium | 5.5 | 2023-12-04 | In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local informatio… |
CVE-2023-42699 | Medium | 5.5 | 2023-12-04 | In omacp service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information d… |
CVE-2023-42698 | Medium | 5.5 | 2023-12-04 | In omacp service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information d… |
CVE-2023-42697 | Medium | 5.5 | 2023-12-04 | In omacp service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information d… |
CVE-2023-42696 | High | 7.8 | 2023-12-04 | In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges need… |
CVE-2023-42695 | High | 7.8 | 2023-12-04 | In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed |
CVE-2023-42694 | High | 7.8 | 2023-12-04 | In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed |
CVE-2023-42693 | High | 7.8 | 2023-12-04 | In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed |
CVE-2023-42692 | High | 7.8 | 2023-12-04 | In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed |
CVE-2023-42691 | High | 7.8 | 2023-12-04 | In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed |
CVE-2023-42690 | High | 7.8 | 2023-12-04 | In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed |
CVE-2023-42689 | High | 7.8 | 2023-12-04 | In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed |
CVE-2023-42688 | High | 7.8 | 2023-12-04 | In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed |
CVE-2023-42687 | High | 7.8 | 2023-12-04 | In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed |
CVE-2023-42686 | High | 7.8 | 2023-12-04 | In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed |
CVE-2023-42685 | High | 7.8 | 2023-12-04 | In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed |
CVE-2023-42681 | High | 7.8 | 2023-12-04 | In ion service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed |
CVE-2023-42678 | Medium | 5.5 | 2023-12-04 | In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disc… |
CVE-2023-42677 | Medium | 5.5 | 2023-12-04 | In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disc… |
CVE-2023-42676 | Medium | 5.5 | 2023-12-04 | In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disc… |
CVE-2023-42675 | Medium | 5.5 | 2023-12-04 | In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disc… |
CVE-2023-42674 | Medium | 5.5 | 2023-12-04 | In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disc… |
CVE-2023-42673 | Medium | 5.5 | 2023-12-04 | In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disc… |
CVE-2023-42672 | Medium | 5.5 | 2023-12-04 | In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disc… |
CVE-2023-42671 | Medium | 5.5 | 2023-12-04 | In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disc… |
CVE-2023-47870 | Medium | 5.7 | 2023-11-30 | Cross-Site Request Forgery (CSRF), Missing Authorization vulnerability in gVectors Team wpForo Forum wpforo allows Cross Site Request Forgery, Accessing Functi… |
CVE-2023-37890 | Medium | 4.3 | 2023-11-30 | Missing Authorization vulnerability in WPOmnia KB Support – WordPress Help Desk and Knowledge Base allows Accessing Functionality Not Properly Constrained by A… |