CWE-285

Pending Intent hijacking vulnerability in NotiCenterUtils in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for G

Pending Intent hijacking vulnerability in SpayNotification in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for

Improper authorization in Samsung Pass prior to 1.0.00.33 allows physical attackers to acess account list without authen

Improper Authorization in GitHub repository janeczku/calibre-web prior to 0.6.16.

An improper authorization vulnerability in Palo Alto Network Cortex XSOAR software enables authenticated users in non-Re

BigBlueButton is an open source web conferencing system. In BigBlueButton starting with 2.2 but before 2.3.18 and 2.4-rc

BigBlueButton is an open source web conferencing system. Starting in version 2.2 and prior to versions 2.3.18 and 2.4.1,

BigBlueButton is an open source web conferencing system. Starting in version 2.2 and prior to versions 2.3.18 and 2.4-rc

The “Bytebase” application does not restrict low privilege user to access “admin issues“ for which an unauthorized user

The “Bytebase” application does not restrict low privilege user to access admin “projects“ for which an unauthorized use

Improper authorization vulnerability in Samsung Internet prior to version 18.0.4.14 allows physical attackers to add boo

Improper Authorization in GitHub repository froxlor/froxlor prior to 2.0.0-beta1.

Implicit Intent hijacking vulnerability in ActivityMetricsLogger prior to SMR Jan-2022 Release 1 allows attackers to get

Keeping sensitive data in unprotected BluetoothSettingsProvider prior to SMR Jan-2022 Release 1 allows untrusted applica

Improper authorization in TelephonyManager prior to SMR Jan-2022 Release 1 allows attackers to get IMSI without READ_PRI

Improper Authorization vulnerability in Link Sharing prior to version 12.4.00.3 allows attackers to open protected activ

Improper caller check in AR Emoji prior to SMR Jun-2022 Release 1 allows untrusted applications to use some camera funct

Improper authorization in isemtelephony prior to SMR Jul-2022 Release 1 allows attacker to obtain CID without ACCESS_FIN

Implicit Intent hijacking vulnerability in Smart View prior to SMR Aug-2022 Release 1 allows attacker to access connecte

Implicit Intent hijacking vulnerability in Galaxy Wearable prior to version 2.2.50 allows attacker to get sensitive info

Improper authorization vulnerability in StorageManagerService prior to SMR Nov-2022 Release 1 allows local attacker to c

Implicit intent hijacking vulnerability in Telecom application prior to SMR Dec-2022 Release 1 allows attacker to access

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server and Ne

Information exposure in Calendar prior to version 12.3.05.10000 allows attacker to access calendar schedule without READ

Discourse is an open source platform for community discussion. Prior to version 2.8.4 on the `stable` branch and 2.9.0be

Improper Authorization vulnerability in Video Editor prior to SMR Sep-2022 Release 1 allows local attacker to access int

Improper Authorization vulnerability in Photo Editor prior to SMR Sep-2022 Release 1 allows physical attackers to read i

Improper authorization in UPI payment in Samsung Pass prior to version 4.0.04.10 allows physical attackers to access acc

An improper authorization vulnerability has been reported to affect QNAP NAS running HBS 3 (Hybrid Backup Sync. ) If exp

OneFuzz is an open source self-hosted Fuzzing-As-A-Service platform. Starting with OneFuzz 2.12.0 or greater, an incompl

Improper Authorization vulnerability in Gallagher Command Centre Server allows command line macros to be modified by an

Deno is a runtime for JavaScript and TypeScript that uses V8 and is built in Rust. In Deno versions 1.5.0 to 1.10.1, mod

An improper authorization vulnerability in Palo Alto Networks Cortex XSOAR enables a remote unauthenticated attacker wit

4MOSAn GCB Doctor’s login page has improper validation of Cookie, which allows an unauthenticated remote attacker to byp

A vulnerability was reported in Lenovo Smart Camera X3, X5, and C2E that could allow an unauthorized user to view device

Improper authorization vulnerability in QSAN Storage Manager allows remote privileged users to bypass the access control

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an imprope

Tad Book3 editing book page does not perform identity verification. Remote attackers can use the vulnerability to view a

Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the WP Content Copy Protection

Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the Captchinoo, Google recaptc

Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the WooCommerce Conditional Ma

Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the WP Maintenance Mode & Site

Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the Tree Sitemap WordPress plu

Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the Visitor Traffic Real Time

Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the Login Protection - Limit F

Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the Login as User or Customer

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions pri

Multiple vulnerabilities in the web-based management interface of Cisco Business Process Automation (BPA) could allow an

Multiple vulnerabilities in the web-based management interface of Cisco Business Process Automation (BPA) could allow an

Nextcloud Server is a Nextcloud package that handles data storage. Nextcloud Server supports application specific tokens