A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma
A vulnerability was identified in projectworlds Online Notes Sharing Platform 1.0. Affected by this issue is some unknow
A vulnerability was detected in itsourcecode Online Voting System 1.0. This impacts an unknown function of the file /ind
A weakness has been identified in Bdtask Flight Booking Software 4. Affected by this vulnerability is an unknown functio
A security vulnerability has been detected in Jiusi OA up to 20251102. This affects an unknown function of the file /Off
A vulnerability was detected in WeiYe-Jing datax-web up to 2.1.2. This impacts the function remove/update/pause/start/tr
A weakness has been identified in ashraf-kabir travel-agency up to 1f25aa03544bc5fb7a9e846f8a7879cecdb0cad3. Affected is
A security flaw has been discovered in projectworlds can pass malicious payloads up to 1.0. This vulnerability affects u
A weakness has been identified in moxi159753 Mogu Blog v2 up to 5.2. The affected element is an unknown function of the
A vulnerability was identified in ProudMuBai GoFilm 1.0.0/1.0.1. Impacted is the function SingleUpload of the file /serv
A vulnerability has been found in youlaitech youlai-mall 1.0.0/2.0.0. Affected by this vulnerability is the function get
A vulnerability was found in youlaitech youlai-mall 1.0.0/2.0.0. Affected is an unknown function of the file /app-api/v1
A security flaw has been discovered in code-projects Employee Profile Management System 1.0. Impacted is an unknown func
A flaw has been found in Verysync 微力同步 up to 2.21.3. This impacts an unknown function of the file /rest/f/api/resources/
A vulnerability was detected in baowzh hfly up to 638ff9abe9078bc977c132b37acbe1900b63491c. The impacted element is an u
A vulnerability was identified in Ningyuanda TC155 57.0.2.0. This impacts an unknown function of the file /onvif/device_
A flaw has been found in SourceCodester Client Database Management System 1.0. This affects an unknown part of the file
A flaw has been found in liweiyi ChestnutCMS up to 1.5.8. This vulnerability affects the function FilenameUtils.getExten
A security vulnerability has been detected in code-projects Student File Management System 1.0. This affects an unknown
A vulnerability was identified in h-moses moga-mall up to 392d631a5ef15962a9bddeeb9f1269b9085473fa. This vulnerability a
A security vulnerability has been detected in code-projects College Notes Uploading System 1.0. Impacted is an unknown f
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2. An app may be able to access se
A permissions issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14
Aquarius Desktop 3.0.069 for macOS stores user authentication credentials in the local file ~/Library/Application Suppor
Windows Recovery Environment Agent Elevation of Privilege Vulnerability
The PAM module pam_cap.so of libcap configuration supports group names starting with “@”, during actual parsing, configu
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supporte
Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported
Incorrect access control in Ullu (Android version v2.9.929 and IOS version v2.8.0) allows attackers to bypass parental p
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Se
Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Request handling). Supp
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions th
Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supp
Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Application Logging Inte
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supporte
phpPgAdmin 7.13.0 and earlier contains an incorrect access control vulnerability in sql.php at lines 68-76. The applicat
Improper access control in some Intel(R) ME driver pack installer engines before version 2422.6.2.0 may allow an authent
DDSN Interactive cm3 Acora CMS version 10.1.1 contains an improper access control vulnerability. An editor-privileged us
Vulnerability in the Oracle Financial Services Revenue Management and Billing product of Oracle Financial Services Appli
In the Payeer Android application 2.5.0, an improper access control vulnerability exists in the authentication flow for
Improper access control within AMD SEV-SNP could allow an admin privileged attacker to write to the RMP during SNP initi
Improper access control in some Intel(R) GPA software before version 2024.3 may allow an authenticated user to potential
Improper access control for some Intel(R) Arc™ & Iris(R) Xe graphics software before version 31.0.101.4032 may allow
An Improper Access Control vulnerability was identified in the file download functionality. This vulnerability allows us
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE
Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.28,
An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authent
An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authentic
A vulnerability in the email filtering mechanism of Cisco Secure Email Gateway could allow an unauthenticated, remote at
Improper access control for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge Platform
Frequently Asked Questions
What is CWE-284?
CWE-284 (CWE-284) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-284?
There are 7,306 CVE records associated with CWE-284 in our database. Of these, 877 are critical severity, 2593 are high severity, and 2830 are medium severity.
How can I protect against CWE-284 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-284 using AI-powered security agents.
Detect CWE-284 Vulnerabilities
CyberStrike's AI agents automatically detect cwe-284 vulnerabilities across your infrastructure.
Get Started