CVE-2022-4801

Insufficient Granularity of Access Control in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4813

Vulnerability : usememos/memos prior to 0.9.1 has insufficient granularity of access control, enabling an IDOR on archived memos. Root cause : inadequate authorization checks on archive objects. Impact : attacker could delete archived memos (per multiple sources mentioning deletion via IDOR). Aff...

CVE-2022-4813 Insufficient Granularity of Access Control in usememos/memos

Insufficient Granularity of Access Control in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4801

CVE-2022-4801 affects usememos/memos versions prior to 0.9.1 and is caused by Insufficient Granularity of Access Control (authorization flaw). The vulnerability can allow an attacker to archive any user’s post (public or private), as described across multiple sources (GHSA/OSV/Red Hat references)...

CVE-2022-4801 Insufficient Granularity of Access Control in usememos/memos

Insufficient Granularity of Access Control in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4801: Insufficient Granularity of Access Control

Insufficient Granularity of Access Control in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-2475: Insufficient Granularity of Access Control

Haas Controller version 100.20.000.1110 has insufficient granularity of access control when using the "Ethernet Q Commands" service. Any user is able to write macros into registers outside of the authorized accessible range. This could allow a user to access privileged resources or resources out ...

CVE-2022-36110 Netmaker vulnerable to Insufficient Granularity of Access Control

Netmaker makes networks with WireGuard. Prior to version 0.15.1, Improper Authorization functions lead to non-privileged users running privileged API calls. If someone adds users to the Netmaker platform who do not have admin privileges, they can use their auth tokens to run admin-level functions...

CVE-2022-1461: Insufficient Granularity of Access Control

Non Privilege User can Enable or Disable Registered in GitHub repository openemr/openemr prior to 6.1.0.1...

CVE-2021-31384

CVE-2021-31384 affects Juniper Networks Junos OS on SRX Series. The vulnerability stems from a Missing Authorization weakness and insufficient granularity of access control in a specific device configuration, allowing an attacker to reach J-Web administrative interfaces from any device interface,...

PT-2021-5372

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS SRX Series versions 20.4R1 through 20.4R2-S1, 20.4R3 Juniper Networks Junos OS SRX Series versions 21.1R1 through 21.1R1-S1, 21.1R2 Description The issue is related to a Missing Authorization weakness and Insufficient...