6191 matches found
CVE-2023-2950
Improper Authorization in GitHub repository openemr/openemr prior to 7.0.1...
CVE-2023-2782
Sensitive information disclosure due to improper authorization. The following products are affected: Acronis Cyber Infrastructure ACI before build 5.3.1-38...
CVE-2022-38375
An improper authorization vulnerability CWE-285 in Fortinet FortiNAC version 9.4.0 through 9.4.1 and before 9.2.6 allows an unauthenticated user to perform some administrative operations over the FortiNAC instance via crafted HTTP POST requests...
CVE-2022-4962
A vulnerability was found in Apollo 2.0.0/2.0.1 and classified as problematic. Affected by this issue is some unknown functionality of the file /users of the component Configuration Center. The manipulation leads to improper authorization. The attack may be launched remotely. The exploit has been...
CVE-2022-31589
Due to improper authorization check, business users who are using Israeli File from SHAAM program /ATL/VQ23 transaction, are granted more than needed authorization to perform certain transaction, which may lead to users getting access to data that would otherwise be restricted...
CVE-2022-40843
The Tenda AC1200 V-W15Ev2 V15.11.0.101576 router is vulnerable to improper authorization / improper session management that allows the router login page to be bypassed. This leads to authenticated attackers having the ability to read the routers syslog.log file which contains the MD5 password of...
CVE-2022-4879
A vulnerability was found in Forged Alliance Forever up to 3746. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Vote Handler. The manipulation leads to improper authorization. Upgrading to version 3747 is able to address this issue. T...
CVE-2022-4613
A vulnerability was found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome and classified as critical. This issue affects some unknown processing of the component Browser Extension Provisioning. The manipulation leads to improper authorization. The attack may be initiated...
CVE-2022-4868
Improper Authorization in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...
CVE-2022-45874
Huawei Aslan Children's Watch has an improper authorization vulnerability. Successful exploit could allow the attacker to access certain file...
CVE-2022-45450
Sensitive information disclosure and manipulation due to improper authorization. The following products are affected: Acronis Agent Linux, macOS, Windows before build 28610, Acronis Cyber Protect 15 Linux, macOS, Windows before build 30984...
CVE-2022-45128
Improper authorization in the IntelR EMA software before version 1.9.0.0 may allow an authenticated user to potentially enable denial of service via local access...
CVE-2022-43465
Improper authorization in the IntelR SCS software all versions may allow an authenticated user to potentially enable denial of service via local access...
CVE-2022-22272
Improper authorization in TelephonyManager prior to SMR Jan-2022 Release 1 allows attackers to get IMSI without READPRIVILEGEDPHONESTATE permission...
CVE-2022-41610
Improper authorization in IntelR EMA Configuration Tool before version 1.0.4 and IntelR MC before version 2.4 software may allow an authenticated user to potentially enable denial of service via local access...
CVE-2022-39890
Improper Authorization in Samsung Billing prior to version 5.0.56.0 allows attacker to get sensitive information...
CVE-2022-39883
Improper authorization vulnerability in StorageManagerService prior to SMR Nov-2022 Release 1 allows local attacker to call privileged API...
CVE-2022-39879
Improper authorization vulnerability in?CallBGProvider prior to SMR Nov-2022 Release 1 allows local attacker to grant permission for accessing information with phone uid...