CWE-862 · Missing Authorization (page 72)
Page 72 of 92 — CVEs classified under CWE-862, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-45247 | High | 7.1 | 2023-10-09 | Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux… |
CVE-2023-43700 | High | 7.7 | 2023-10-09 | Missing Authorization in RDT400 in SICK APU allows an unprivileged remote attacker to modify data via HTTP requests that no not require authentication. |
CVE-2023-5331 | Medium | 4.3 | 2023-10-09 | Mattermost fails to properly check the creator of an attached file when adding the file to a draft post, potentially exposing unauthorized file information. |
CVE-2023-45370 | Medium | 5.3 | 2023-10-09 | An issue was discovered in the SportsTeams extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. SportsTeams… |
CVE-2023-40654 | Medium | 6.7 | 2023-10-08 | In FW-PackageManager, there is a possible missing permission check. This could lead to local escalation of privilege with System execution privileges needed |
CVE-2023-40653 | Medium | 6.7 | 2023-10-08 | In FW-PackageManager, there is a possible missing permission check. This could lead to local escalation of privilege with System execution privileges needed |
CVE-2023-40650 | Medium | 5.5 | 2023-10-08 | In Telecom service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-40649 | Medium | 5.5 | 2023-10-08 | In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-40648 | Medium | 5.5 | 2023-10-08 | In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-40647 | Medium | 5.5 | 2023-10-08 | In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-40646 | Medium | 5.5 | 2023-10-08 | In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-40645 | Medium | 5.5 | 2023-10-08 | In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-40644 | Medium | 5.5 | 2023-10-08 | In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-40643 | Medium | 5.5 | 2023-10-08 | In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-40642 | Medium | 5.5 | 2023-10-08 | In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-40641 | Medium | 5.5 | 2023-10-08 | In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-40640 | Medium | 5.5 | 2023-10-08 | In SoundRecorder service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges |
CVE-2023-40639 | Medium | 5.5 | 2023-10-08 | In SoundRecorder service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges |
CVE-2023-40638 | Medium | 4.4 | 2023-10-08 | In Telecom service, there is a possible missing permission check. This could lead to local denial of service with System execution privileges needed |
CVE-2023-40637 | Medium | 5.5 | 2023-10-08 | In telecom service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges |
CVE-2023-40636 | Medium | 4.4 | 2023-10-08 | In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information… |
CVE-2023-40635 | High | 7.8 | 2023-10-08 | In linkturbo, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed |
CVE-2023-40634 | High | 7.8 | 2023-10-08 | In phasechecksercer, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges nee… |
CVE-2023-40633 | Medium | 5.5 | 2023-10-08 | In phasecheckserver, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges need… |
CVE-2023-40631 | Medium | 4.4 | 2023-10-08 | In Dialer, there is a possible missing permission check. This could lead to local information disclosure with System execution privileges needed |
CVE-2023-21291 | Medium | 5.5 | 2023-10-06 | In visitUris of Notification.java, there is a possible way to reveal image contents from another user due to a missing permission check. This could lead to loc… |
CVE-2023-21244 | Medium | 6.7 | 2023-10-06 | In visitUris of Notification.java, there is a possible bypass of user profile boundaries due to a missing permission check. This could lead to local escalation… |
CVE-2023-45246 | High | 7.1 | 2023-10-06 | Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux… |
CVE-2023-4469 | Medium | 5.3 | 2023-10-06 | The Profile Extra Fields by BestWebSoft plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the prflxtrflds_… |
CVE-2023-45245 | Medium | 5.5 | 2023-10-06 | Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 36119. |
CVE-2023-45244 | High | 7.1 | 2023-10-06 | Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux… |
CVE-2023-45243 | Medium | 5.5 | 2023-10-05 | Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) b… |
CVE-2023-45242 | Medium | 5.5 | 2023-10-05 | Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) b… |
CVE-2023-45240 | Medium | 5.5 | 2023-10-05 | Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 35739. |
CVE-2023-44214 | Medium | 5.5 | 2023-10-05 | Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 35739. |
CVE-2023-44212 | High | 7.1 | 2023-10-05 | Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) befo… |
CVE-2023-44211 | High | 7.1 | 2023-10-05 | Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux… |
CVE-2023-44210 | Medium | 5.5 | 2023-10-04 | Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux… |
CVE-2023-40376 | Medium | 5.3 | 2023-10-04 | IBM UrbanCode Deploy (UCD) 7.1 - 7.1.2.12, 7.2 through 7.2.3.5, and 7.3 through 7.3.2.0 under certain configurations could allow an authenticated user to make… |
CVE-2023-44208 | Critical | 9.1 | 2023-10-04 | Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Home Office (Windows… |
CVE-2023-3213 | Medium | 5.3 | 2023-10-04 | The WP Mail SMTP Pro plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the is_print_page function in versi… |
CVE-2023-3770 | Medium | 5.3 | 2023-10-02 | Incorrect validation vulnerability of the data entered, allowing an attacker with access to the network on which the affected device is located to use the di… |
CVE-2023-5321 | Medium | 5.5 | 2023-09-30 | Missing Authorization in GitHub repository hamza417/inure prior to build94. |
CVE-2023-2233 | Low | 3.1 | 2023-09-29 | An improper authorization issue has been discovered in GitLab CE/EE affecting all versions starting from 11.8 before 16.2.8, all versions starting from 16.3 be… |
CVE-2023-43652 | High | 8.2 | 2023-09-27 | JumpServer is an open source bastion host. As an unauthenticated user, it is possible to authenticate to the core API with a username and an SSH public key wit… |
CVE-2023-20252 | Critical | 9.8 | 2023-09-27 | A vulnerability in the Security Assertion Markup Language (SAML) APIs of Cisco Catalyst SD-WAN Manager Software could allow an unauthenticated, remote attacker… |
CVE-2023-0456 | High | 7.4 | 2023-09-27 | A flaw was found in APICast, when 3Scale's OIDC module does not properly evaluate the response to a mismatched token from a separate realm. This could allow a… |
CVE-2023-5165 | High | 7.1 | 2023-09-25 | Docker Desktop before 4.23.0 allows an unprivileged user to bypass Enhanced Container Isolation (ECI) restrictions via the debug shell which remains accessible… |
CVE-2023-41296 | Critical | 9.1 | 2023-09-25 | Vulnerability of missing authorization in the kernel module. Successful exploitation of this vulnerability may affect integrity and confidentiality. |
CVE-2023-43090 | Medium | 5.5 | 2023-09-22 | A vulnerability was found in GNOME Shell. GNOME Shell's lock screen allows an unauthenticated local user to view windows of the locked desktop session by using… |
CVE-2023-43135 | Critical | 9.8 | 2023-09-20 | There is an unauthorized access vulnerability in TP-LINK ER5120G 4.0 2.0.0 Build 210817 Rel.80868n, which allows attackers to obtain sensitive information of t… |
CVE-2023-43134 | Critical | 9.8 | 2023-09-20 | There is an unauthorized access vulnerability in Netis 360RAC1200 v1.3.4517, which allows attackers to obtain sensitive information of the device without authe… |
CVE-2023-43501 | Medium | 6.5 | 2023-09-20 | A missing permission check in Jenkins Build Failure Analyzer Plugin 2.4.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-s… |
CVE-2023-5054 | Medium | 5.8 | 2023-09-19 | The Super Store Finder plugin for WordPress is vulnerable to unauthenticated arbitrary email creation and relay in versions up to, and including, 6.9.3. This i… |
CVE-2023-0923 | High | 8.8 | 2023-09-15 | A flaw was found in the Kubernetes service for notebooks in RHODS, where it does not prevent pods from other namespaces and applications from making requests t… |
CVE-2023-4948 | Medium | 4.3 | 2023-09-14 | The WooCommerce CVR Payment Gateway plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the refresh_or… |
CVE-2023-42469 | Low | 3.3 | 2023-09-13 | The com.full.dialer.top.secure.encrypted application through 1.0.1 for Android enables any installed application (with no permissions) to place phone calls wit… |
CVE-2023-39073 | Critical | 9.8 | 2023-09-12 | An issue in SNMP Web Pro v.1.1 allows a remote attacker to execute arbitrary code and obtain senstive information via a crafted request. |
CVE-2023-40625 | Medium | 5.4 | 2023-09-12 | S4CORE (Manage Purchase Contracts App) - versions 102, 103, 104, 105, 106, 107, does not perform necessary authorization checks for an authenticated user. This… |
CVE-2023-35677 | Medium | 5.5 | 2023-09-11 | In onCreate of DeviceAdminAdd.java, there is a possible way to forcibly add a device admin due to a missing permission check. This could lead to local denial o… |
CVE-2023-35665 | High | 7.8 | 2023-09-11 | In multiple files, there is a possible way to import a contact from another user due to a missing permission check. This could lead to local escalation of priv… |
CVE-2023-36140 | Critical | 9.8 | 2023-09-11 | In PHPJabbers Cleaning Business Software 1.0, there is no encryption on user passwords allowing an attacker to gain access to all user accounts. |
CVE-2023-4630 | Medium | 5.0 | 2023-09-11 | An issue has been discovered in GitLab affecting all versions starting from 10.6 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions sta… |
CVE-2023-4104 | Medium | 5.5 | 2023-09-11 | An invalid Polkit Authentication check and missing authentication requirements for D-Bus methods allowed any local user to configure arbitrary VPN setups. *Thi… |
CVE-2023-40040 | Medium | 5.3 | 2023-09-11 | An issue was discovered in the MyCrops HiGrade "THC Testing & Cannabi" application 1.0.337 for Android. A remote attacker can start the camera feed via the com… |
CVE-2023-4792 | Medium | 4.3 | 2023-09-07 | The Duplicate Post Page Menu & Custom Post Type plugin for WordPress is vulnerable to unauthorized page and post duplication due to a missing capability check… |
CVE-2023-41947 | Medium | 4.3 | 2023-09-06 | A missing permission check in Jenkins Frugal Testing Plugin 1.1 and earlier allows attackers with Overall/Read permission to connect to Frugal Testing using at… |
CVE-2023-41945 | High | 8.8 | 2023-09-06 | Jenkins Assembla Auth Plugin 1.14 and earlier does not verify that the permissions it grants are enabled, resulting in users with EDIT permissions to be grante… |
CVE-2023-41943 | Medium | 6.5 | 2023-09-06 | Jenkins AWS CodeCommit Trigger Plugin 3.0.12 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permissi… |
CVE-2023-41941 | Medium | 4.3 | 2023-09-06 | A missing permission check in Jenkins AWS CodeCommit Trigger Plugin 3.0.12 and earlier allows attackers with Overall/Read permission to enumerate credentials I… |
CVE-2023-41908 | Medium | 5.3 | 2023-09-05 | Cerebrate before 1.15 lacks the Secure attribute for the session cookie. |
CVE-2023-4059 | Medium | 4.3 | 2023-09-04 | The Profile Builder WordPress plugin before 3.9.8 lacks authorisation and CSRF in its page creation function which allows unauthenticated users to create the r… |
CVE-2023-20833 | Medium | 4.4 | 2023-09-04 | In keyinstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution… |
CVE-2023-20826 | Medium | 5.5 | 2023-09-04 | In cta, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execut… |
CVE-2023-20825 | Medium | 5.5 | 2023-09-04 | In duraspeed, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional… |
CVE-2023-20824 | Medium | 5.5 | 2023-09-04 | In duraspeed, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional… |
CVE-2023-38466 | Medium | 5.5 | 2023-09-04 | In ims service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges |
CVE-2023-38465 | Medium | 5.5 | 2023-09-04 | In ims service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges |
CVE-2023-38464 | High | 7.8 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges |
CVE-2023-38463 | Medium | 5.5 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privileges |
CVE-2023-38462 | Medium | 5.5 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privileges |
CVE-2023-38461 | Medium | 5.5 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privileges |
CVE-2023-38460 | High | 7.8 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges |
CVE-2023-38459 | High | 7.8 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges |
CVE-2023-38458 | High | 7.8 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges |
CVE-2023-38457 | Medium | 5.5 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privileges |
CVE-2023-38456 | High | 7.8 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges |
CVE-2023-38455 | High | 7.8 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges |
CVE-2023-38454 | Medium | 5.5 | 2023-09-04 | In vowifi service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges |
CVE-2023-38453 | High | 7.8 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges |
CVE-2023-38452 | High | 7.8 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges |
CVE-2023-38451 | High | 7.8 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges |
CVE-2023-38450 | High | 7.8 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges |
CVE-2023-38449 | High | 7.8 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges |
CVE-2023-38448 | Medium | 5.5 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privileges |
CVE-2023-38447 | Medium | 5.5 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privileges |
CVE-2023-38446 | Medium | 5.5 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privileges |
CVE-2023-38445 | Medium | 5.5 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privileges |
CVE-2023-38444 | High | 7.8 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges |
CVE-2023-38443 | High | 7.8 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges |