CWE-863

An incorrect authorization vulnerability was identified in GitHub Enterprise Server, allowing for escalation of privileg

An issue was discovered in LIVEBOX Collaboration vDesk before v018. Broken Access Control can occur under the /api/v1/re

A vulnerability in the Remember Me function of Masa CMS v7.2, 7.3, and 7.4-beta allows attackers to bypass authenticatio

Authentication vulnerability in MOSN v.0.23.0 allows attacker to escalate privileges via case-sensitive JWT authorizatio

TOTOLINK A720R V4.1.5cu.532_ B20210610 is vulnerable to Incorrect Access Control.

Incorrect authorization in OMICRON StationGuard 1.10 through 2.20 and StationScout 1.30 through 2.20 allows an attacker

In Delta Electronics InfraSuite Device Master versions prior to 1.0.5, an unauthenticated attacker could generate a vali

An authentication bypass vulnerability in the Password Reset component of Gladinet CentreStack before 13.5.9808 allows r

An authentication bypass vulnerability in the web client interface for the CL4NX printer before firmware version 1.13.3-

Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbe

Improper authentication vulnerability in T&D Corporation and ESPEC MIC CORP. data logger products allows a remote unauth

Wade Graphic Design FANTSY has a vulnerability of insufficient authorization check. An unauthenticated remote user can e

An issue was discovered in freakchicken kafkaUI-lite 1.2.11 allows attackers on the same network to gain escalated privi

Arcserve UDP through 9.0.6034 allows authentication bypass. The method getVersionInfo at WebServiceImpl/services/FlashSe

Vulnerability of incomplete read and write permission verification in the GPU module. Successful exploitation of this vu

Vulnerability of incomplete read and write permission verification in the GPU module. Successful exploitation of this vu

Nexxt Nebula 1200-AC 15.03.06.60 allows authentication bypass and command execution by using the HTTPD service to enable

An issue in Zimbra Collaboration (ZCS) v.8.8.15 and v.9.0 allows a remote attacker to escalate privileges and obtain sen

In TravianZ 8.3.4 and 8.3.3, Incorrect Access Control in the installation script allows an attacker to overwrite the ser

Sourcecodester Online Computer and Laptop Store 1.0 is vulnerable to Incorrect Access Control, which allows remote attac

Authentication Bypass vulnerability in D-Link DIR-645 firmware version 1.03 allows remote attackers to gain escalated pr

Authentication Bypass vulnerability in D-Link DIR-885L FW102b01 allows remote attackers to gain escalated privileges via

Authentication Bypass vulnerability in D-Link DIR-895 FW102b07 allows remote attackers to gain escalated privileges via

Authentication Bypass vulnerability in D-Link DIR-859 FW105b03 allows remote attackers to gain escalated privileges via

The Linux DVS server component of Mitel MiVoice Connect through 19.3 SP2 (22.24.1500.0) could allow an unauthenticated a

A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may allow an

SAP CommonCryptoLib does not perform necessary authentication checks, which may result in missing or wrong authorization

Incorrect Authorization in GitHub repository tiann/kernelsu prior to v0.6.9.

An Access Control issue discovered in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, also fixed in 22.7, 31.7.2

VMware Aria Operations for Logs contains an authentication bypass vulnerability. An unauthenticated, malicious actor can

All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authoriz

A client side rate limit issue discovered in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain escalated pri

An issue discovered in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain control of the device via the chang

Combodo iTop is an open source, web-based IT service management platform. Prior to versions 2.7.8 and 3.0.2-1, a user wh

A logic error in SiLabs Z/IP Gateway SDK 7.18.02 and earlier allows authentication to be bypassed, remote administration

Incorrect Authorization vulnerability in Apache Software Foundation Apache Pulsar. This issue affects Apache Pulsar: be

SAP Business One installation - version 10.0, does not perform proper authentication and authorization checks for SMB sh

A CWE-863: Incorrect Authorization vulnerability exists that could cause Denial of Service against the Geo SCADA server

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All Argo CD versions starting with 2.3.0-rc1 a

Galaxy is an open-source platform for data analysis. All supported versions of Galaxy are affected prior to 22.01, 22.05

The GarminOS TVM component in CIQ API version 2.1.0 through 4.1.7 allows applications with a specially crafted head sect

In JetBrains TeamCity before 2023.05 bypass of permission checks allowing to perform admin actions was possible

KramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326 exhibit a vulnerability that enables

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected ver

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions of Argo CD starting with v1.8.2 and p

UniFi OS 3.1 introduces a misconfiguration on consoles running UniFi Network that allows users on a local network to acc

BMC Server Automation before 8.9.01 patch 1 allows Process Spawner command execution because of authentication bypass.

Nexkey is a lightweight fork of Misskey v12 optimized for small to medium size servers. Prior to 12.23Q4.5, Nexkey allow

The Administrator function of EasyTest has an Incorrect Authorization vulnerability. A remote attacker authenticated as

Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbe