Przykłady dla CWE-284: Improper Access Control

	Tytuł	Data	Autor
Low	EnBw SENEC Legacy Storage Box Log Disclosure	20.11.2023	Ph0s
Med.	CVE-2023-36339 WebBoss.io CMS IDOR	23.07.2023	Steven n0tst3 Black
Low	MOV.AI Robotics Engine 2.2.3-3 Improper Access Control	13.01.2023	Thurein Soe
High	Dovecot IMAP Server 2.2 Improper Access Control	08.07.2022	Julian Brook
High	Voltage SecureMail Server Business Logic Bypass	07.02.2022	TING Meng Yean
Low	WordPress Modern Events Calendar 5.16.2 Information Disclosure	02.07.2021	Ron Jost
Med.	Realteo WordPress Plugin <= 1.2.3 - Improper Access Control	02.04.2021	m0ze
Med.	Controlled Admin Access WordPress Plugin <= 1.4.0 - Improper Access Control & Privilege Escalation	23.03.2021	m0ze
Med.	Barco wePresent Undocumented SSH Interface	21.11.2020	Jim Becher
Med.	Reliable Services Improper Access Control	12.05.2020	KingSkrupellos
Med.	ThinkTrek Solutions Improper Access Control	11.05.2020	KingSkrupellos
Med.	Native Sparrow Improper Access Control	11.05.2020	KingSkrupellos
Med.	MediaCosmo CMS Improper Access Control	11.05.2020	KingSkrupellos
Med.	Avast Secure Browser 76.0.1659.101 Local Privilege Escalation	21.03.2020	Silton Santos
High	Avira Free Security Suite 2019 Software Updater 2.0.6.13175 Improper Access Control	06.08.2019	Silton Santos
Low	Yurdum Software Reflected XSS Privilege Escalation	17.06.2019	KingSkrupellos
Med.	Blue Prism Robotic Process Automation (RPA) Privilege Escalation	23.05.2019	Benjamin Hess
Med.	AlumniMagnet OmniMagnet Improper Access Control Vulnerability	20.05.2019	KingSkrupellos
Med.	Gemalto DS3 Authentication Server / Ezio Server Command Injection / File Disclosure	11.05.2019	TING Meng Yean
Med.	Designed by Longtail E-Media Improper Access Control and RFU Vulnerability	22.09.2018	AYAR
Low	WordPress Developed by Netsoft Limited Software Development Bangladesh Improper Authentication Vulnerability	05.09.2018	KingSkrupellos
Med.	WordPress DrcSystems EthicSolutions Jssor-Slider Library Plugin Arbitrary File Upload Vulnerability	21.06.2018	KingSkrupellos
High	Solarwinds LEM 6.3.1 Hardcoded Credentials	25.04.2017	Matt Bergin
Med.	HP Printers Wi-Fi Direct Improper Access Control	03.02.2017	Neseso
Med.	SAP HANA Information Disclosure	28.05.2015	onapsis
High	TheCartPress WordPress plugin 1.3.9 Multiple Vulns	29.04.2015	High-Tech Bridge Secur...
Low	SAP Background Processing RFC Missing Authorization	29.04.2014	Onapsis
Low	SAP BASIS Missing Authorization Check	29.04.2014	Onapsis
Low	SAP Profile Maintenance Missing Authorization	29.04.2014	Onapsis
High	OpenDocMan 1.2.7 Multiple Vulnerabilities	05.03.2014	High-Tech Bridge Secur...
High	Microweber 0.8 Arbitrary File Deletion	18.10.2013	High-Tech Bridge Secur...
High	Samsung Kies 2.3.2.12054_20 NULL Pointer Dereference and bypass	16.10.2012	High-Tech Bridge Secur...
High	PBBoard 2.1.4 SQL Injection and Improper Authentication	09.08.2012	High-Tech Bridge Secur...
Med.	AWScripts Gallery Search Engine 1.x Insecure Cookie Vulnerability	01.07.2009	TiGeR-Dz

Common Weakness Enumeration (CWE)

CVE

Szczegóły

Opis

2024-04-17

CVE-2023-45744	Updating...	A data integrity vulnerability exists in the web interface /cgi-bin/upload_config.cgi functionality of Peplink Smart Reader v1.2.0 (in QEMU). A specially crafted HTTP request can lead to configuration modification. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.
CVE-2023-45209	Updating...	An information disclosure vulnerability exists in the web interface /cgi-bin/download_config.cgi functionality of Peplink Smart Reader v1.2.0 (in QEMU). A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.
CVE-2023-43491	Updating...	An information disclosure vulnerability exists in the web interface /cgi-bin/debug_dump.cgi functionality of Peplink Smart Reader v1.2.0 (in QEMU). A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.