CWE-863

Archer Platform 2024.03 before version 2024.08 is affected by an authorization bypass vulnerability related to supportin

A vulnerability in the access control list (ACL) programming for port channel subinterfaces of Cisco Nexus 3000 and 9000

In JetBrains TeamCity before 2023.11.4 presigned URL generation requests in S3 Artifact Storage plugin were authorized i

Sysmac Studio provided by OMRON Corporation contains an incorrect authorization vulnerability. If this vulnerability is

A logic issue was addressed with improved checks This issue is fixed in macOS Sonoma 14. A camera extension may be able

In shouldUseNoOpLocation of CameraActivity.java, there is a possible confused deputy due to a permissions bypass. This c

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.1, macOS Monterey

An access issue was addressed with improved access restrictions. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS

A vulnerability has been identified in Siveillance Control (All versions >= V2.8 < V3.1.1). The affected product does no

Hw64.sys in Marvin Test HW.exe before 5.0.5.0 allows unprivileged user-mode processes to arbitrarily map physical memory

Zoho ManageEngine ADAudit Plus versions 7260 and below allows unauthorized local agent machine users to view the session

Acrobat Mobile Sign Android versions 24.4.2.33155 and earlier are affected by an Incorrect Authorization vulnerability t

IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could disclose sensitive information to a local user to do

aimeos/ai-admin-jsonadm is the Aimeos e-commerce JSON API for administrative tasks. In versions prior to 2020.10.13, 202

Logitech Options+ on MacOS prior 1.72 allows a local attacker to inject dynamic library within Options+ runtime and abus

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15. An app may be able to modify prot

There is a possible Local bypass of user interaction due to an insecure default value. This could lead to local informat

In ppmp_protect_buf of drm_fw.c, there is a possible information disclosure due to a logic error in the code. This could

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7.1, macOS Ventur

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Vent

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Vent

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Vent

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Vent

The issue was addressed with improved permissions logic. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2.

IBM AIX 7.2, 7.3, VIOS 3.1, and 4.1 could allow a non-privileged local user to exploit a vulnerability in the AIX perfs

A user changing their email after signing up and verifying it can change it without verification in profile settings. T

SnapCenter versions 4.8 prior to 5.0 are susceptible to a vulnerability which could allow an authenticated SnapCenter S

Liferay Portal 7.2.0 through 7.4.1, and older unsupported versions, and Liferay DXP 7.3 before service pack 3, 7.2 befor

The Swift Performance Lite plugin for WordPress is vulnerable to unauthorized access due to a missing capability check o

Incorrect authorization vulnerability in Cybozu Garoon 5.0.0 to 6.0.0 allows a remote authenticated attacker to alter an

Computer Vision Annotation Tool (CVAT) is an interactive video and image annotation tool for computer vision. An attacke

In version v0.3.8 of open-webui, an improper privilege management vulnerability exists in the API endpoints GET /api/v1/

Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Authorization vu

Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Authorization vu

A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could al

The Chef Habitat builder-api on-prem-builder package  with any version lower than habitat/builder-api/10315/202409131628

Incorrect Authorization vulnerability in wpsoul Greenshift greenshift-animation-and-page-builder-blocks allows Exploitin

Incorrect Authorization vulnerability in WP Chill Htaccess File Editor htaccess-file-editor allows Accessing Functionali

Due to inconsistent authorization permissions, data.all may allow an external actor with an authenticated account to per

Autolab is a course management service that enables auto-graded programming assignments. There is a vulnerability in ver

Incorrect authorization in the permission validation component of Devolutions Remote Desktop Manager 2024.2.21 and earli

The Silverstripe CMS GraphQL Server serves Silverstripe data as GraphQL representations. In versions 4.0.0 prior to 4.3.

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to CAPTCHA Bypass in versions up to, and including, 2.0

The WP Show Posts plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and includ

A vulnerability was found in kishor-23 Food Waste Management System 1.0. It has been declared as critical. This vulnerab

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). Sup

Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmos Network. Users are able to delegate tokens that have not y

The WPS Hide Login plugin for WordPress is vulnerable to Login Page Disclosure in all versions up to, and including, 1.9

Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Incorrect Authorization vulne