Vulnerability index

Browse CVEs

6,923 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Missing AuthorizationCWE-862 × clear
Android MEDIUM 6.7
CVE-2022-20504

In multiple locations of DreamManagerService.java, there is a missing permission check. This could lead to local escalation of privilege and dismissa…

Patch available
Fix from $1,600 2022-12-16
Android HIGH 7.8
CVE-2022-20506

In onCreate of WifiDialogActivity.java, there is a missing permission check. This could lead to local escalation of privilege from a guest user with …

Patch available
Fix from $1,950 2022-12-16
Android HIGH 7.8
CVE-2022-20508

In onAttach of ConfigureWifiSettings.java, there is a possible way for a guest user to change WiFi settings due to a permissions bypass. This could l…

Patch available
Fix from $1,950 2022-12-16
Android MEDIUM 5.5
CVE-2022-20510

In getNearbyNotificationStreamingPolicy of DevicePolicyManagerService.java, there is a possible way to learn about the notification streaming policy …

Patch available
Fix from $1,600 2022-12-16
Android MEDIUM 5.5
CVE-2022-20511

In getNearbyAppStreamingPolicy of DevicePolicyManagerService.java, there is a missing permission check. This could lead to local information disclosu…

Patch available
Fix from $1,600 2022-12-16
Wp Shamsi MEDIUM 5.3
CVE-2022-4555

The WP Shamsi plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the deactivate() function hooked via in…

Fix: 4.1.1+
Fix from $1,600 2022-12-16
Mega Addons For Wpbakery Page Builder MEDIUM 6.5
CVE-2022-4501

The Mega Addons plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the vc_saving_data function in versio…

Fix: after 4.2.7
Fix from $1,600 2022-12-14
Pgadmin 4 HIGH 8.8
CVE-2022-4223EPSS 80%

The pgAdmin server includes an HTTP API that is intended to be used to validate the path a user selects to external PostgreSQL utilities such as pg_d…

Fix: 6.17+
Fix from $1,950 2022-12-13
Netweaver Process Integration HIGH 8.6
CVE-2022-41272

An unauthenticated attacker over the network can attach to an open interface exposed through JNDI by the User Defined Search (UDS) of SAP NetWeaver P…

Mitigation only
Fix from $1,950 2022-12-13
Netweaver Process Integration CRITICAL 9.4
CVE-2022-41271

An unauthenticated user can attach to an open interface exposed through JNDI by the Messaging System of SAP NetWeaver Process Integration (PI) - vers…

Mitigation only
Fix from $2,300 2022-12-13
Welcart E Commerce MEDIUM 6.5
CVE-2022-3946

The Welcart e-Commerce WordPress plugin before 2.8.4 does not have authorisation and CSRF in an AJAX action, allowing any logged-in user to create, u…

Fix: 2.8.4+
Fix from $1,600 2022-12-12
Woocommerce Shipping HIGH 8.1
CVE-2022-3999

The DPD Baltic Shipping WordPress plugin before 1.2.57 does not have authorisation and CSRF in an AJAX action, which could allow any authenticated us…

Fix: after 1.2.11
Fix from $1,950 2022-12-12
Daloradius HIGH 7.5
CVE-2022-4366

Missing Authorization in GitHub repository lirantal/daloradius prior to master branch.

Patch available
Fix from $1,950 2022-12-08
Content Navigator HIGH 8.8
CVE-2022-43581

IBM Content Navigator 3.0.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.0.6, 3.0.7, 3.0.8, 3.0.9, 3.0.10, 3.0.11, and 3.0.12 is vulnerable to missing autho…

Fix: after 3.0.12
Fix from $1,950 2022-12-07
Android MEDIUM 5.5
CVE-2022-42782

In wlan driver, there is a possible missing permission check, This could lead to local information disclosure.

Mitigation only
Fix from $1,600 2022-12-06
Android HIGH 7.8
CVE-2022-42778

In windows manager service, there is a missing permission check. This could lead to set up windows manager service with no additional execution privi…

No fix yet
Fix from $1,950 2022-12-06
Android HIGH 7.8
CVE-2022-42776

In UscAIEngine service, there is a missing permission check. This could lead to set up UscAIEngine service with no additional execution privileges ne…

Mitigation only
Fix from $1,950 2022-12-06
Android HIGH 7.8
CVE-2022-42777

In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution pri…

No fix yet
Fix from $1,950 2022-12-06
Android MEDIUM 5.5
CVE-2022-42766

In wlan driver, there is a possible missing permission check, This could lead to local information disclosure.

No fix yet
Fix from $1,600 2022-12-06
Android HIGH 7.8
CVE-2022-39102

In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution pri…

No fix yet
Fix from $1,950 2022-12-06
Android HIGH 7.8
CVE-2022-39098

In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution pri…

Mitigation only
Fix from $1,950 2022-12-06
Android HIGH 7.8
CVE-2022-39099

In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution pri…

Mitigation only
Fix from $1,950 2022-12-06
Android HIGH 7.8
CVE-2022-39100

In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution pri…

No fix yet
Fix from $1,950 2022-12-06
Android HIGH 7.8
CVE-2022-39101

In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution pri…

Mitigation only
Fix from $1,950 2022-12-06
Android HIGH 7.8
CVE-2022-39094

In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution pri…

Mitigation only
Fix from $1,950 2022-12-06
Android HIGH 7.8
CVE-2022-39095

In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution pri…

Mitigation only
Fix from $1,950 2022-12-06
Android HIGH 7.8
CVE-2022-39096

In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution pri…

Mitigation only
Fix from $1,950 2022-12-06
Android HIGH 7.8
CVE-2022-39097

In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution pri…

Mitigation only
Fix from $1,950 2022-12-06
Android HIGH 7.8
CVE-2022-39091

In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution pri…

Mitigation only
Fix from $1,950 2022-12-06
Android HIGH 7.8
CVE-2022-39092

In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution pri…

Mitigation only
Fix from $1,950 2022-12-06