All CVE vulnerabilities classified under this weakness type.
View on MITRE CWE50
9
0
0
An issue has recently been discovered in Arista EOS where certain gNOI APIs incorrectly skip authorization and authentication which could potentially allow a factory reset of the device.
An issue has recently been discovered in Arista EOS where the incorrect use of EOS's AAA API’s by the OpenConfig and TerminAttr agents could result in unrestricted access to the device for local users...
An issue has recently been discovered in Arista EOS where the incorrect use of EOS's AAA API’s by the OpenConfig and TerminAttr agents could result in unrestricted access to the device for local users...
EisBaer Scada - CWE-285: Improper Authorization
A CWE-285 Improper Authorization vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which allows improper access to executable code folders.
An improper authorization vulnerability [CWE-285] in FortiPortal version 7.2.0, and versions 7.0.6 and below reports may allow a user to download other organizations reports via modification in the re...
A CWE-285: Improper Authorization vulnerability exists that could cause unauthorized access to certain software functions when an attacker gets access to localhost interface of the EcoStruxure Power C...
An improper authorization vulnerability [CWE-285] in Fortinet FortiNAC version 9.4.0 through 9.4.1 and before 9.2.6 allows an unauthenticated user to perform some administrative operations over the F...
An improper authorization vulnerability [CWE-285] in FortiMail webmail version 7.2.0 through 7.2.2 and before 7.0.5 allows an authenticated attacker to see and modify the title of address book folders...
An improper authorization vulnerability [CWE-285] in Fortinet FortiADC version 7.4.0 and before 7.2.2 may allow a low privileged user to read or backup the full system configuration via HTTP or HTTPS ...
Multiple improper authorization vulnerabilities [CWE-285] in FortiWeb version 7.4.2 and below, version 7.2.7 and below, version 7.0.10 and below, version 6.4.3 and below, version 6.3.23 and below may ...
A vulnerability was found in GL.iNet GL-A1300 Slate Plus, GL-AR300M16 Shadow, GL-AR300M Shadow, GL-AR750 Creta, GL-AR750S-EXT Slate, GL-AX1800 Flint, GL-AXT1800 Slate AX, GL-B1300 Convexa-B, GL-B3000 ...
An improper authorization vulnerability [CWE-285] vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.8, FortiOS 7.0.0 through 7.0.11, FortiProxy 7.4.0 through 7.4.8, Fort...
Improper authorization in some Intel Battery Life Diagnostic Tool installation software before version 2.2.1 may allow a privilaged user to potentially enable escalation of privilege via local access.
Visual Studio Code Spoofing Vulnerability
openwhyd is vulnerable to Improper Authorization
Azure Portal Elevation of Privilege Vulnerability
Azure CycleCloud Remote Code Execution Vulnerability
Azure Migrate Remote Code Execution Vulnerability
Microsoft Outlook Elevation of Privilege Vulnerability
Microsoft Outlook for iOS Information Disclosure Vulnerability
Windows Kerberos Elevation of Privilege Vulnerability
Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
Microsoft SharePoint Server Elevation of Privilege Vulnerability
Redis Enterprise Elevation of Privilege Vulnerability
Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft SharePoint Server Remote Code Execution Vulnerability
Improper Authorization in GitHub repository chatwoot/chatwoot prior to 2.8.
Improper Authorization in Packagist librenms/librenms prior to 22.2.0.
Improper Authorization in GitHub repository webmin/webmin prior to 1.990.
Improper Authorization in GitHub repository teamamaze/amazefileutilities prior to 1.91.
Improper Authorization in GitHub repository modoboa/modoboa prior to 2.1.0.
Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.4.
Improper Authorization in GitHub repository pixelfed/pixelfed prior to 0.11.4.
Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.3.
Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.3.
Improper Authorization in GitHub repository usememos/memos prior to 0.9.1.
Improper Authorization in GitHub repository usememos/memos prior to 0.9.0.
Improper Authorization in GitHub repository kromitgmbh/titra prior to 0.79.1.
Improper Authorization in GitHub repository orchardcms/orchardcore prior to 1.3.0.
Improper Authorization in GitHub repository phpipam/phpipam prior to 1.4.6.
Improper Authorization in GitHub repository openemr/openemr prior to 7.0.1.
Remote file download vulnerability in wptf-image-gallery v1.03
Improper Authorization in GitHub repository froxlor/froxlor prior to 2.0.0-beta1.
It was found that the CloudForms before 5.6.2.2, and 5.7.0.7 did not properly apply permissions controls to VM IDs passed by users. A remote, authenticated attacker could use this flaw to execute arbi...
Improper Authorization in GitHub repository janeczku/calibre-web prior to 0.6.16.
Windows Server Service Security Feature Bypass Vulnerability
Improper authorization in Azure allows an authorized attacker to elevate privileges over a network.
Improper authentication in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network.
Improper Authorization in GitHub repository pimcore/customer-data-framework prior to 3.4.1.