Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

CVEs (10,099)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-47333 1Google 1Android Jun 17, 2026 Feb 12, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.
CVE-2022-47332 1Google 1Android Jun 17, 2026 Feb 12, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.
CVE-2022-47330 1Google 1Android Jun 17, 2026 Feb 12, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.
CVE-2022-47329 1Google 1Android Jun 17, 2026 Feb 12, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.
CVE-2022-47328 1Google 1Android Jun 17, 2026 Feb 12, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.
CVE-2022-47327 1Google 1Android Jun 17, 2026 Feb 12, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.
CVE-2022-47326 1Google 1Android Jun 17, 2026 Feb 12, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.
CVE-2022-47325 1Google 1Android Jun 17, 2026 Feb 12, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.
CVE-2022-47324 1Google 1Android Jun 17, 2026 Feb 12, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.
CVE-2022-44421 1Google 1Android Jun 17, 2026 Feb 12, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In wlan driver, there is a possible missing permission check. This could lead to local In wlan driver, information disclosure.
CVE-2023-21450 1Samsung 1One Hand Operation + Jun 17, 2026 Feb 9, 2023 N/A· v4 2.1 LOW· v3 N/A· v2 Missing Authorization vulnerability in One Hand Operation + prior to version 6.1.21 allows multi-users to access owner's widget without authorization via gesture setting.
CVE-2022-48302 1Huawei 2Emui Harmonyos Jun 17, 2026 Feb 9, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 The AMS module has a vulnerability of lacking permission verification in APIs.Successful exploitation of this vulnerability may affect data confidentiality.
CVE-2023-0720 1Wickedplugins 1Wicked Folders Jun 17, 2026 Feb 8, 2023 N/A· v4 4.3 MEDIUM· v3 N/A· v2 The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_save_folder_order function in versions up to, and including, 2.18.16. This makes it possible for...Show more The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_save_folder_order function in versions up to, and including, 2.18.16. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke this function and perform actions intended for administrators such as modifying the folder structure maintained by the plugin.Show less
CVE-2023-0717 1Wickedplugins 1Wicked Folders Jun 17, 2026 Feb 8, 2023 N/A· v4 4.3 MEDIUM· v3 N/A· v2 The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_delete_folder function in versions up to, and including, 2.18.16. This makes it possible for aut...Show more The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_delete_folder function in versions up to, and including, 2.18.16. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke this function and perform actions intended for administrators such as modifying the folder structure maintained by the plugin.Show less
CVE-2023-0716 1Wickedplugins 1Wicked Folders Jun 17, 2026 Feb 8, 2023 N/A· v4 4.3 MEDIUM· v3 N/A· v2 The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_edit_folder function in versions up to, and including, 2.18.16. This makes it possible for authe...Show more The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_edit_folder function in versions up to, and including, 2.18.16. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke this function and perform actions intended for administrators such as modifying the folder structure maintained by the plugin.Show less
CVE-2023-0715 1Wickedplugins 1Wicked Folders Jun 17, 2026 Feb 8, 2023 N/A· v4 4.3 MEDIUM· v3 N/A· v2 The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_clone_folder function in versions up to, and including, 2.18.16. This makes it possible for auth...Show more The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_clone_folder function in versions up to, and including, 2.18.16. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke this function and perform actions intended for administrators such as modifying the folder structure maintained by the plugin.Show less
CVE-2023-0711 1Wickedplugins 1Wicked Folders Jun 17, 2026 Feb 8, 2023 N/A· v4 4.3 MEDIUM· v3 N/A· v2 The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_save_state function in versions up to, and including, 2.18.16. This makes it possible for authen...Show more The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_save_state function in versions up to, and including, 2.18.16. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke this function and perform actions intended for administrators such as modifying the view state of the folder structure maintained by the plugin.Show less
CVE-2023-0684 1Wickedplugins 1Wicked Folders Jun 17, 2026 Feb 8, 2023 N/A· v4 4.3 MEDIUM· v3 N/A· v2 The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_unassign_folders function in versions up to, and including, 2.18.16. This makes it possible for...Show more The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_unassign_folders function in versions up to, and including, 2.18.16. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke this function and perform actions intended for administrators such as changing the folder structure maintained by the plugin.Show less
CVE-2023-0718 1Wickedplugins 1Wicked Folders Jun 17, 2026 Feb 8, 2023 N/A· v4 4.3 MEDIUM· v3 N/A· v2 The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_save_folder function in versions up to, and including, 2.18.16. This makes it possible for authe...Show more The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_save_folder function in versions up to, and including, 2.18.16. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke this function and perform actions intended for administrators such as modifying the folder structure maintained by the plugin.Show less
CVE-2023-0719 1Wickedplugins 1Wicked Folders Jun 17, 2026 Feb 7, 2023 N/A· v4 4.3 MEDIUM· v3 N/A· v2 The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_save_sort_order function in versions up to, and including, 2.18.16. This makes it possible for a...Show more The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_save_sort_order function in versions up to, and including, 2.18.16. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke this function and perform actions intended for administrators such as modifying the folder structure maintained by the plugin.Show less

Previous 1...432433434...505 Next