CWE-284: Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
Also known as Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- No product listedIncorrect access control in the delSlaveDevice function of TOTOLINK T6 4.1.5cu.748_B20211015...9.8 Critical
- No product listedIncorrect access control in the updatePriChannel function of TOTOLINK T6 4.1.5cu.748_B20211015...9.8 Critical
- No product listedIncorrect access control in the sendStaticInfoToMaster function of TOTOLINK T6 4.1.5cu...5.9 Medium
- No product listedIncorrect access control in the keepAlive function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...9.8 Critical
- No product listedIncorrect access control in the updatePriStaList function of TOTOLINK T6 4.1.5cu.748_B20211015...5.3 Medium
- No product listedIncorrect access control in the recv_mesh_info_sync function of TOTOLINK T6 4.1.5cu.748_B20211015...9.8 Critical
- No product listedIncorrect access control in the guest_wifi_sync function of TOTOLINK T6 4.1.5cu.748_B20211015...9.1 Critical
- No product listedIncorrect access control in the discoverWan function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...5.9 Medium
- No product listedIncorrect access control in the clearDiagnosisLog function of TOTOLINK T6 4.1.5cu.748_B20211015...9.8 Critical
- google androidIn setClipboardAccessNotificationsEnabledForUser of ClipboardService.java, there is a possible...7.8 High
- shopex ecshopShopEx ECShop pack.php check_img_type unrestricted upload6.9 Medium
- caoqianming django-vue-admincaoqianming django-vue-admin file access control5.3 Medium
- doccano auto labeling pipeline module to annotate a document automatically, open source annotation tools for machine learning practitioners +1 moreDoccano Open Source Annotation Tools for Machine Learning Practitioners Bulk-Delete Endpoint category-types LabelList access control5.3 Medium
- doccano auto labeling pipeline module to annotate a document automatically, open source annotation tools for machine learning practitioners +1 moreDoccano Open Source Annotation Tools for Machine Learning Practitioners Project Example Detail Endpoint examples ExampleDetail access control5.3 Medium
- dibo-software dibootdibo-software diboot Tenant Resource Assignment resource access control5.3 Medium
- dibo-software dibootdibo-software diboot Tenant Administrator Management API admin access control5.3 Medium
- megaease easeprobeMegaEase EaseProbe Middleware server.go realIP access control6.9 Medium
- extension.vn 2fa authenticator extensionextension.vn 2FA Authenticator Extension Background Service Worker chrome.runtime.onMessageExternal.addListener information disclosure4.8 Medium
- vidiq vision for youtube extensionvidIQ Vision for YouTube Extension postMessage window.addEventListener information disclosure5.3 Medium
- joomshaper.com helix ultimate extension for joomlaJoomla Extension - joomshaper.com - Broken Access Control & Missing Authorization in MegaMenu Settings in Helix Ultimate < 2.2.105.1 Medium
- miniorgange.com custom api for joomla (free) extension for joomla, import export users for joomla (free) extension for joomla, joomai - ai assistant for joomla (free) extension for joomla +20 more +22 moreJoomla Extension - miniorgange.com - Unauthenticated arbitrary extension deinstallation via various miniOrange extensions8.8 High
- diem-project diemdiem-project diem Widget Editor dmWidgetContentBaseMediaForm.php unrestricted upload5.3 Medium
- kerberosmansour hulumihulumi before v1.3.2 SCP Template Tag-on-Create Bypass9.3 Critical
- jeecgboot jeewx-bootjeecgboot jeewx-boot doUpload Endpoint MyJwWebJwid3Controller.java MyJwWebJwid3Controller.doUpload unrestricted upload5.1 Medium
- nokia wavesuiteAn Insufficient Role-based Access Control Vulnerability in WaveSuite7.6 High
- code-projects simple inventory systemcode-projects Simple Inventory System Database Backup File inventorymanagement.sql information disclosure6.9 Medium
- cozmoslabs profile builder pluginCozmoslabs Profile Builder Plugin Avatar Simple Upload AJAX admin-ajax.php wppb_ajax_simple_avatar unrestricted upload6.9 Medium
- No product listedIncorrect access control in the killProcess function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...9.8 Critical
- No product listedIncorrect access control in the CloudSrvVersionCheck function of TOTOLINK T6 4.1.5cu...5.9 Medium
- No product listedIncorrect access control in the LoadDefSettings function of TOTOLINK T6 4.1.5cu.748_B20211015...9.8 Critical
- No product listedIncorrect access control in the clearTracerouteLog function of TOTOLINK T6 4.1.5cu.748_B20211015...5.3 Medium
- No product listedIncorrect access control in the clearSyslog function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...9.1 Critical
- No product listedIncorrect access control in the showSyslog function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...7.5 High
- No product listedIncorrect access control in the informSlaveUpdate function of TOTOLINK T6 4.1.5cu.748_B20211015...9.8 Critical
- No product listedIncorrect access control in the FirmwareUpgrade function of TOTOLINK T6 4.1.5cu.748_B20211015...9.8 Critical
- No product listedIncorrect access control in the delWiFiScheduleCfg function of TOTOLINK T6 4.1.5cu.748_B20211015...5.3 Medium
- No product listedIncorrect access control in the delVlanCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...9.1 Critical
- No product listedIncorrect access control in the delWiFiAclRules function of TOTOLINK T6 4.1.5cu.748_B20211015...9.1 Critical
- No product listedIncorrect access control in the delDevice function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...9.1 Critical
- No product listedIncorrect access control in the UploadFirmwareFile function of TOTOLINK T6 4.1.5cu.748_B20211015...9.8 Critical
- No product listedIncorrect access control in the SystemSettings function of TOTOLINK T6 4.1.5cu.748_B20211015...5.3 Medium
- No product listedIncorrect access control in the delParentalRules function of TOTOLINK T6 4.1.5cu.748_B20211015...9.1 Critical
- No product listedIncorrect access control in the NTPSyncWithHost function of TOTOLINK T6 4.1.5cu.748_B20211015...9.1 Critical
- No product listedIncorrect access control in the delSmartQosCfg function of TOTOLINK T6 4.1.5cu.748_B20211015...9.8 Critical
- No product listedIncorrect access control in the UploadCustomModule function of TOTOLINK T6 4.1.5cu.748_B20211015...9.1 Critical
- No product listedIncorrect access control in the setWiFiRepeaterCfg function of TOTOLINK T6 4.1.5cu.748_B20211015...9.1 Critical
- No product listedIncorrect access control in the setPairCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...9.1 Critical
- No product listedIncorrect access control in the delIpPortFilterRules function of TOTOLINK T6 4.1.5cu...9.1 Critical
- No product listedIncorrect access control in the delUrlFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015...7.5 High
- No product listedIncorrect access control in the delStaticDhcpRules function of TOTOLINK T6 4.1.5cu.748_B20211015...9.8 Critical
- Show moreLoading…