CWE-284: Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
Also known as Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- guchengwuyue yshopmallguchengwuyue yshopmall co.yixiang.utils.FileUtil updateAvatar unrestricted upload5.3 Medium
- code-projects online music sitecode-projects Online Music Site AdminUpdateCategory.php unrestricted upload6.9 Medium
- wekanWeKan Activity Publication activities.js LinkedBoardActivitiesBleed information disclosure6.9 Medium
- wekanWeKan Administrative Repair fixDuplicateLists.js FixDuplicateBleed access control5.3 Medium
- wekanWeKan Meteor Publication cards.js CardPubSubBleed information disclosure5.3 Medium
- yeqifu warehouseyeqifu warehouse Role-Permission Binding RoleController.java saveRolePermission access control5.3 Medium
gogs.io/gogsGo,govulncheck-vulndbopenSUSE +1 moreGogs has authorization bypass in repository deletion API5.7 Medium- d-link dir-605l, dir-619l, dlink dir-605l firmware +1 more +3 moreD-Link DIR-605L/DIR-619L DHCP Connection Status wan_connection_status.asp information disclosure6.9 Medium
- d-link dir-605l, dir-619l, dlink dir-605l firmware +1 more +3 moreD-Link DIR-605L/DIR-619L DHCP Client Information information disclosure6.9 Medium
- d-link dir-605l, dir-619l, dlink dir-605l firmware +1 more +3 moreD-Link DIR-605L/DIR-619L Wifi Setting information disclosure6.9 Medium
- mayurik gas agency management systemSourceCodester Gas Agency Management System createUser.php access control5.3 Medium
- getgophish gophishGophish is vulnerable to Incorrect Access Control7.6 High
- microsoft azure front doorAzure Front Door Elevation of Privilege Vulnerability9.8 Critical
- microsoft azure arcAzure Arc Elevation of Privilege Vulnerability8.6 High
- wekanWeKan REST Endpoint boards.js BoardTitleRESTBleed access control5.3 Medium
- spreeSpree allows unauthenticated users can access all guest addresses7.7 High
- wekanWeKan Attachment Storage attachments.js MoveStorageBleed access control5.3 Medium
- wekanWeKan Attachment Migration attachmentMigration.js AttachmentMigrationBleed access control5.3 Medium
- pgadmin 4, pgadmin.org pgadmin 4 +1 moreRestore restriction bypass via key disclosure vulnerability (pgAdmin 4)7.4 High
- wekanWeKan LDAP User Sync syncUser.js SyncLDAPBleed access control5.3 Medium
- axigen mail serverAxigen Mail Server before 10.5.57 contains an improper access control vulnerability in the...8.1 High
- wekanWeKan Migration Operation comprehensiveBoardMigration.js ComprehensiveBoardMigration MigrationBleed access control5.3 Medium
- wekanWeKan Attachment Storage lists.js applyWipLimit ListWIPBleed access control5.3 Medium
- openslidesOpenSlides has incorrect access control vulnerability in authentication service8.1 High
- eladminA vulnerability has been discovered in eladmin v2.7 and before. This vulnerability allows for an...6.5 Medium
- adlered bolo-solobolo-blog bolo-solo FreeMarker Template PicUploadProcessor.java unrestricted upload5.3 Medium
- gunet open eclass platform, openeclass +1 moreOpen eClass Broken Access Control Allows Students to Add Content to Course Units6.5 Medium
- gunet open eclass platform, openeclass +1 moreOpen eClass Has Broken Access Control in Course Units Module Allows Students to Create Units6.5 Medium
- openeclass gunet openeclass, gunet open eclass platform +1 moreGUnet OpenEclass 1.7.3 E-learning platform - phpMyAdmin Remote Access8.7 High
- avanquest pc helpsoft driver updaterInsecure Permissions vulnerability in avanquest Driver Updater v.9.1.57803.1174 allows a local...7.8 High
- wikimedia foundation abusefilterCreating a permanent account from a temporary account associates temp username and IP address with real username in AbuseLog2.1 Low
- parisneo parisneo/lollmsImproper Access Control in parisneo/lollms8.2 High
- efm iptime a8004t, iptime a8004t firmware +1 moreEFM ipTIME A8004T VPN Service timepro.cgi commit_vpncli_file_upload unrestricted upload5.1 Medium
- adguard trusttunnelTrustTunnel has `client_random_prefix` rule bypass via fragmented or partial TLS ClientHello5.3 Medium
- akinsoft qr menuImproper Access Control in Akinsoft's QR Menu8.0 High
- dell premiercolorDell PremierColor Panel Driver, versions prior to 1.0.0.1 A01, contains an Improper Access...7.8 High
- nmedia simple user registrationSimple User Registration <= 6.7 - Authenticated (Subscriber+) Privilege Escalation via profile_save_field8.8 High
- open-emr openemrOpenEMR Vulnerable to Broken Access Control in Profile Edit Endpoint8.8 High
- honoHono has an Arbitrary Key Read in Serve static Middleware (Cloudflare Workers Adapter)6.3 Medium
- amir20 dozzleDozzle Agent Label-Based Access Control Bypass Allows Unauthorized Container Shell Access8.7 High
- ijason-liu books manageriJason-Liu Books_Manager upload_bookCover.php unrestricted upload5.1 Medium
- phpgurukul news portalPHPGurukul News Portal Profile Pic unrestricted upload5.1 Medium
- code-projects online examination systemcode-projects Online Examination System admin_pic.php unrestricted upload5.3 Medium
- beetel 777vr1, 777vr1 firmware +1 moreBeetel 777VR1 UART access control5.4 Medium
- bladex springbladeIncorrect access control in the importUser function of SpringBlade v4.5.0 allows attackers with...9.9 Critical
- beetel 777vr1, 777vr1 firmware +1 moreBeetel 777VR1 UART information disclosure1.0 Low
- phpmyfaqphpMyFAQ: Attachment download allowed without dlattachment right (broken access control)6.5 Medium
- microsoft azure resource managerAzure Resource Manager Elevation of Privilege Vulnerability9.9 Critical
- ruoyiIncorrect access control in the selectDept function of RuoYi v4.8.2 allows unauthorized attackers...7.5 High
- ruoyiIncorrect access control in the update function of RuoYi v4.8.2 allows unauthorized attackers to...9.1 Critical
- Show moreLoading…