Vulnerability index

Browse CVEs

6,923 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Missing AuthorizationCWE-862 × clear
Mattermost Server MEDIUM 5.3
CVE-2023-5331

Mattermost fails to properly check the creator of an attached file when adding the file to a draft post, potentially exposing unauthorized file infor…

Fix: 7.8.11 / 8.0.3+
Fix from $1,600 2023-10-09
Mediawiki MEDIUM 5.3
CVE-2023-45370

An issue was discovered in the SportsTeams extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. Spo…

Fix: 1.35.12 / 1.39.5+
Fix from $1,600 2023-10-09
Android MEDIUM 5.5
CVE-2023-40641

In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges n…

Mitigation only
Fix from $1,600 2023-10-08
Android MEDIUM 5.5
CVE-2023-40642

In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges n…

No fix yet
Fix from $1,600 2023-10-08
Android MEDIUM 5.5
CVE-2023-40643

In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges n…

Mitigation only
Fix from $1,600 2023-10-08
Android MEDIUM 5.5
CVE-2023-40644

In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges n…

Mitigation only
Fix from $1,600 2023-10-08
Android MEDIUM 5.5
CVE-2023-40645

In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges n…

Mitigation only
Fix from $1,600 2023-10-08
Android MEDIUM 5.5
CVE-2023-40646

In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges n…

Mitigation only
Fix from $1,600 2023-10-08
Android MEDIUM 5.5
CVE-2023-40647

In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges n…

Mitigation only
Fix from $1,600 2023-10-08
Android MEDIUM 5.5
CVE-2023-40648

In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges n…

No fix yet
Fix from $1,600 2023-10-08
Android MEDIUM 5.5
CVE-2023-40649

In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges n…

Mitigation only
Fix from $1,600 2023-10-08
Android MEDIUM 5.5
CVE-2023-40650

In Telecom service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privil…

Mitigation only
Fix from $1,600 2023-10-08
Android MEDIUM 6.7
CVE-2023-40653

In FW-PackageManager, there is a possible missing permission check. This could lead to local escalation of privilege with System execution privileges…

Mitigation only
Fix from $1,600 2023-10-08
Android MEDIUM 6.7
CVE-2023-40654

In FW-PackageManager, there is a possible missing permission check. This could lead to local escalation of privilege with System execution privileges…

Mitigation only
Fix from $1,600 2023-10-08
Android MEDIUM 5.5
CVE-2023-40633

In phasecheckserver, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privi…

Mitigation only
Fix from $1,600 2023-10-08
Android HIGH 7.8
CVE-2023-40634

In phasechecksercer, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution priv…

Mitigation only
Fix from $1,950 2023-10-08
Android HIGH 7.8
CVE-2023-40635

In linkturbo, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges …

Mitigation only
Fix from $1,950 2023-10-08
Android MEDIUM 5.5
CVE-2023-40637

In telecom service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privil…

Mitigation only
Fix from $1,600 2023-10-08
Android MEDIUM 5.5
CVE-2023-40639

In SoundRecorder service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution …

Mitigation only
Fix from $1,600 2023-10-08
Android MEDIUM 5.5
CVE-2023-40640

In SoundRecorder service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution …

Mitigation only
Fix from $1,600 2023-10-08
Android MEDIUM 6.7
CVE-2023-21244

In visitUris of Notification.java, there is a possible bypass of user profile boundaries due to a missing permission check. This could lead to local …

Patch available
Fix from $1,600 2023-10-06
Android MEDIUM 5.5
CVE-2023-21291

In visitUris of Notification.java, there is a possible way to reveal image contents from another user due to a missing permission check. This could l…

Patch available
Fix from $1,600 2023-10-06
Agent HIGH 7.1
CVE-2023-45246

Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agen…

Mitigation only
Fix from $1,950 2023-10-06
Profile Extra Fields MEDIUM 5.3
CVE-2023-4469

The Profile Extra Fields by BestWebSoft plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the pr…

Fix: after 1.2.7
Fix from $1,600 2023-10-06
Agent HIGH 7.1
CVE-2023-45244

Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agen…

Mitigation only
Fix from $1,950 2023-10-06
Agent MEDIUM 5.5
CVE-2023-45245

Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before buil…

Mitigation only
Fix from $1,600 2023-10-06
Agent HIGH 7.1
CVE-2023-44211

Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agen…

Mitigation only
Fix from $1,950 2023-10-05
Agent HIGH 7.1
CVE-2023-44212

Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Agent (Linux, macOS, Win…

Mitigation only
Fix from $1,950 2023-10-05
Agent MEDIUM 5.5
CVE-2023-44214

Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before buil…

Mitigation only
Fix from $1,600 2023-10-05
Agent MEDIUM 5.5
CVE-2023-45240

Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before buil…

Mitigation only
Fix from $1,600 2023-10-05