CWE-863
3,038 CVEs • Abstraction: Class • Likelihood of Exploit: High
Incorrect Authorization
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.
CVEs (3,038)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low-privileged att...Show more |
Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A privileged attacke...Show more |
Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. An attacker could le...Show more |
1Bosch 9Divar Ip 3000 Firmware Divar Ip 4000 FirmwareDivar Ip 5000 Firmware+6 moreNov 21, 2024 Jun 15, 2023 N/A· v4 7.7 HIGH· v3 N/A· v2 Improper Authorization in SSH server in Bosch VMS 11.0, 11.1.0, and 11.1.1 allows a remote authenticated user to access resources within the trusted internal network via a port forwarding request. |
IBM Security Guardium 11.3, 11.4, and 11.5 could allow a local user to obtain elevated privileges due to incorrect authorization checks. IBM X-Force ID: 216753. |
1Hp 327Dragonfly Folio G3 2 In 1 Firmware Elite Dragonfly FirmwareElite Dragonfly G2 Firmware+324 moreDec 30, 2024 Jun 14, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. |
1Hp 327Dragonfly Folio G3 2 In 1 Firmware Elite Dragonfly FirmwareElite Dragonfly G2 Firmware+324 moreDec 30, 2024 Jun 14, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. |
Discourse is an open source discussion platform. Prior to version 3.0.4 of the `stable` branch and version 3.1.0.beta5 of the `beta` and `tests-passed` branches, the lack of restrictions on the iFrame tag makes it easy f...Show more |
On affected versions of the CloudVision Portal improper access controls on the connection from devices to CloudVision could enable a malicious actor with network access to CloudVision to get broader access to telemetry a...Show more |
SSPanel-Uim 2023.3 does not restrict access to the /link/ interface which can lead to a leak of user information. |
Milesight NCR/camera version 71.8.0.6-r5 allows authentication bypass through an unspecified method. |
A Mazda model (2015-2016) can be unlocked via an unspecified method. |
1Kafkaui Lite Project 1Kafkaui Lite Jan 6, 2025 Jun 12, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 An issue was discovered in freakchicken kafkaUI-lite 1.2.11 allows attackers on the same network to gain escalated privileges for the nodes running on it. |
An issue found in CrossX v.1.15.3 for Android allows a local attacker to cause an escalation of Privileges via the database files. |
An issue found in Sleep v.20230303 for Android allows unauthorized apps to cause a persistent denial of service by manipulating the SharedPreference files. |
An issue found in FlightAware v.5.8.0 for Android allows unauthorized apps to cause a persistent denial of service by manipulating the database files. |
An issue found in Blue Light Filter v.1.5.5 for Android allows unauthorized apps to cause a persistent denial of service by manipulating the SharedPreference files. |
An issue found in Facemoji Emoji Keyboard v.2.9.1.2 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the component. |
Pydio Cells allows users by default to create so-called external users in order to share files with them. By modifying the HTTP request sent when creating such an external user, it is possible to assign the new user arbi...Show more |
Incorrect access control in Chamilo 1.11.* up to 1.11.18 allows a student subscribed to a given course to download documents belonging to another student if they know the document's ID. |