Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

CVEs (8,874)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-41135 1Wpchill 1Customizable Wordpress Gallery Plugin Modula Image Gallery Jun 17, 2026 Nov 18, 2022 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Unauth. Plugin Settings Change vulnerability in Modula plugin <= 2.6.9 on WordPress.
CVE-2022-40216 1Wordplus 1Better Messages Jun 17, 2026 Nov 18, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Auth. (subscriber+) Messaging Block Bypass vulnerability in Better Messages plugin <= 1.9.10.69 on WordPress.
CVE-2022-34827 1Carel 1Boss Mini Firmware Jun 17, 2026 Nov 18, 2022 N/A· v4 9.9 CRITICAL· v3 N/A· v2 Carel Boss Mini 1.5.0 has Improper Access Control.
CVE-2022-41652 1Expresstech 1Quiz And Survey Master Jun 17, 2026 Nov 18, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Bypass vulnerability in Quiz And Survey Master plugin <= 7.3.10 on WordPress.
CVE-2022-24038 1Karmasis 1Infraskope Siem+ Jun 17, 2026 Nov 18, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 Karmasis Informatics Infraskope SIEM+ has an unauthenticated access vulnerability which could allow an unauthenticated attacker to damage the page where the agents are listed.
CVE-2022-24036 1Karmasis 1Infraskope Siem+ Jun 17, 2026 Nov 16, 2022 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Karmasis Informatics Infraskope SIEM+ has an unauthenticated access vulnerability which could allow an unauthenticated attacker to modificate logs.
CVE-2022-20918 1Cisco 2Firepower Services Software For Asa Secure Firewall Management Center Jun 17, 2026 Nov 15, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 A vulnerability in the Simple Network Management Protocol (SNMP) access controls for Cisco FirePOWER Software for Adaptive Security Appliance (ASA) FirePOWER module, Cisco Firepower Management Center (FMC) Software, and...Show more A vulnerability in the Simple Network Management Protocol (SNMP) access controls for Cisco FirePOWER Software for Adaptive Security Appliance (ASA) FirePOWER module, Cisco Firepower Management Center (FMC) Software, and Cisco Next-Generation Intrusion Prevention System (NGIPS) Software could allow an unauthenticated, remote attacker to perform an SNMP GET request using a default credential. This vulnerability is due to the presence of a default credential for SNMP version 1 (SNMPv1) and SNMP version 2 (SNMPv2). An attacker could exploit this vulnerability by sending an SNMPv1 or SNMPv2 GET request to an affected device. A successful exploit could allow the attacker to retrieve sensitive information from the device using the default credential. This attack will only be successful if SNMP is configured, and the attacker can only perform SNMP GET requests; write access using SNMP is not allowed.Show less
CVE-2022-25679 1Qualcomm 67Aqt1000 Firmware Qca6390 FirmwareQca6391 Firmware+64 more Jun 17, 2026 Nov 15, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Denial of service in video due to improper access control in broadcast receivers in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2022-42126 1Liferay 2Digital Experience Platform Liferay Portal Jul 9, 2026 Nov 15, 2022 N/A· v4 4.3 MEDIUM· v3 N/A· v2 The Asset Libraries module in Liferay Portal 7.3.5 through 7.4.3.28, and Liferay DXP 7.3 before update 8, and DXP 7.4 before update 29 does not properly check permissions of asset libraries, which allows remote authentic...Show more The Asset Libraries module in Liferay Portal 7.3.5 through 7.4.3.28, and Liferay DXP 7.3 before update 8, and DXP 7.4 before update 29 does not properly check permissions of asset libraries, which allows remote authenticated users to view asset libraries via the UI.Show less
CVE-2022-36789 1Intel 26Nuc 10 Performance Kit Nuc10i3fnh Firmware Nuc 10 Performance Kit Nuc10i3fnhf FirmwareNuc 10 Performance Kit Nuc10i3fnhn Firmware+23 more Jun 17, 2026 Nov 11, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 Improper access control in BIOS firmware for some Intel(R) NUC 10 Performance Kits and Intel(R) NUC 10 Performance Mini PCs before version FNCML357.0053 may allow a privileged user to potentially enable escalation of pri...Show more Improper access control in BIOS firmware for some Intel(R) NUC 10 Performance Kits and Intel(R) NUC 10 Performance Mini PCs before version FNCML357.0053 may allow a privileged user to potentially enable escalation of privilege via local access.Show less
CVE-2022-35276 1Intel 5Nuc 8 Compute Element Cm8ccb Firmware Nuc 8 Compute Element Cm8i3cb FirmwareNuc 8 Compute Element Cm8i5cb Firmware+2 more Jun 17, 2026 Nov 11, 2022 N/A· v4 6.7 MEDIUM· v3 N/A· v2 Improper access control in BIOS firmware for some Intel(R) NUC 8 Compute Elements before version CBWHL357.0096 may allow a privileged user to potentially enable escalation of privilege via local access.
CVE-2022-43679 1Owncloud 1Owncloud Jun 17, 2026 Nov 10, 2022 N/A· v4 5.3 MEDIUM· v3 N/A· v2 The Docker image of ownCloud Server through 10.11 contains a misconfiguration that renders the trusted_domains config useless. This could be abused to spoof the URL in password-reset e-mail messages.
CVE-2022-39889 1Samsung 1Galaxywatch4plugin Jun 17, 2026 Nov 9, 2022 N/A· v4 3.3 LOW· v3 N/A· v2 Improper access control vulnerability in GalaxyWatch4Plugin prior to versions 2.2.11.22101351 and 2.2.12.22101351 allows attackers to access wearable device information.
CVE-2022-39887 1Google 1Android Jun 17, 2026 Nov 9, 2022 N/A· v4 3.3 LOW· v3 N/A· v2 Improper access control vulnerability in clearAllGlobalProxy in MiscPolicy prior to SMR Nov-2022 Release 1 allows local attacker to configure EDM setting.
CVE-2022-39884 1Google 1Android Jun 17, 2026 Nov 9, 2022 N/A· v4 3.3 LOW· v3 N/A· v2 Improper access control vulnerability in IImsService prior to SMR Nov-2022 Release 1 allows local attacker to access to Call information.
CVE-2022-31687 1Vmware 1Workspace One Assist Jun 17, 2026 Nov 9, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 VMware Workspace ONE Assist prior to 22.10 contains a Broken Access Control vulnerability. A malicious actor with network access to Workspace ONE Assist may be able to obtain administrative access without the need to aut...Show more VMware Workspace ONE Assist prior to 22.10 contains a Broken Access Control vulnerability. A malicious actor with network access to Workspace ONE Assist may be able to obtain administrative access without the need to authenticate to the application.Show less
CVE-2022-27673 1Amd 1Amd Link Jun 17, 2026 Nov 9, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 Insufficient access controls in the AMD Link Android app may potentially result in information disclosure.
CVE-2021-46851 1Huawei 2Emui Harmonyos Jun 17, 2026 Nov 9, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 The DRM module has a vulnerability in verifying the secure memory attributes. Successful exploitation of this vulnerability may cause abnormal video playback.
CVE-2021-26360 1Amd 3Enterprise Driver Radeon Pro SoftwareRadeon Software Jun 17, 2026 Nov 9, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 An attacker with local access to the system can make unauthorized modifications of the security configuration of the SOC registers. This could allow potential corruption of AMD secure processor’s encrypted memory content...Show more An attacker with local access to the system can make unauthorized modifications of the security configuration of the SOC registers. This could allow potential corruption of AMD secure processor’s encrypted memory contents which may lead to arbitrary code execution in ASP.Show less
CVE-2022-25932 1Inhandnetworks 1Inrouter302 Firmware Jun 17, 2026 Nov 9, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 The firmware of InHand Networks InRouter302 V3.5.45 introduces fixes for TALOS-2022-1472 and TALOS-2022-1474. The fixes are incomplete. An attacker can still perform, respectively, a privilege escalation and an informati...Show more The firmware of InHand Networks InRouter302 V3.5.45 introduces fixes for TALOS-2022-1472 and TALOS-2022-1474. The fixes are incomplete. An attacker can still perform, respectively, a privilege escalation and an information disclosure vulnerability.Show less

Previous 1...359360361...444 Next