CWE-862 · 10.867 kayıt
Missing Authorization
Bu sınıftaki CVE’ler
10.000 kayıt
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
100Hemen | CVE-2022-0543Silahlaştırılmış | It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escaperedis · redis · CWE-862 | Kritik10,0 | KEV | %99,3 | 18 Şub 2022 |
94Hemen | CVE-2023-52163Silahlaştırılmış | Digiever DS-2105 Pro 3.1.0.71-11 devices allow time_tzsetup.cgi Command Injection.digiever · ds-2105 pro firmware · CWE-862 | Yüksek8,8 | KEV | %97,1 | 3 Şub 2025 |
90Hemen | CVE-2025-20362Silahlaştırılmış | Update: On November 5, 2025, Cisco became aware of a new attack variant against devices running Cisco Secure ASA Software or Cisco Secure FTcisco · adaptive security appliance software · CWE-862 | Yüksek8,6 | KEV | %86,6 | 25 Eyl 2025 |
89Hemen | CVE-2024-57726Silahlaştırılmış | SimpleHelp remote support software v5.5.7 and before has a vulnerability that allows low-privileges technicians to create API keys with excesimple-help · simplehelp · CWE-862 | Kritik9,9 | KEV | %66,4 | 15 Oca 2025 |
86Hemen | CVE-2025-6205Silahlaştırılmış | Missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 20253ds · delmia apriso · CWE-862 | Kritik9,1 | KEV | %67,1 | 4 Ağu 2025 |
73Bu hafta | CVE-2021-30657Silahlaştırılmış | A logic issue was addressed with improved state management.apple · mac os x · CWE-862 | Orta5,5 | KEV | %68,5 | 8 Eyl 2021 |
66Bu hafta | CVE-2021-21307Silahlaştırılmış | Remote Code Exploit in Lucee Adminlucee · lucee server · CWE-862 | Kritik9,8 | — | %89,1 | 11 Şub 2021 |
65Bu hafta | CVE-2020-8772Silahlaştırılmış | The InfiniteWP Client plugin before 1.9.4.5 for WordPress has a missing authorization check in iwp_mmb_set_request in init.php.revmakx · infinitewp client · CWE-862 | Kritik9,8 | — | %87,6 | 6 Şub 2020 |
65Bu hafta | CVE-2018-6000Silahlaştırılmış | An issue was discovered in AsusWRT before 3.0.0.4.384_10007.asus · asuswrt · CWE-862 | Kritik9,8 | — | %85,1 | 22 Oca 2018 |
63Bu hafta | CVE-2023-26035Silahlaştırılmış | ZoneMinder vulnerable to Missing Authorizationzoneminder · zoneminder · CWE-862 | Kritik9,8 | — | %80,4 | 24 Şub 2023 |
63Bu hafta | CVE-2019-15954Silahlaştırılmış | An issue was discovered in Total.js CMS 12.0.0.totaljs · total.js cms · CWE-862 | Kritik9,9 | — | %78,6 | 5 Eyl 2019 |
63Bu hafta | CVE-2021-30713Silahlaştırılmış | A permissions issue was addressed with improved validation.apple · mac os x · CWE-862 | Yüksek7,8 | KEV | %7,0 | 8 Eyl 2021 |
62Bu hafta | CVE-2024-41730İstismar yok | Missing Authentication check in SAP BusinessObjects Business Intelligence Platformsap · business objects business intelligence platform · CWE-862 | Kritik9,8 | — | %75,8 | 13 Ağu 2024 |
62Bu hafta | CVE-2021-37976Silahlaştırılmış | Inappropriate implementation in Memory in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to obtain potentially sensitive infogoogle · chrome · CWE-862 | Orta6,5 | KEV | %19,9 | 8 Eki 2021 |
60Bu hafta | CVE-2022-23944Kavram kanıtı | Apache ShenYu 2.4.1 Improper access controlapache · shenyu · CWE-862 | Kritik9,1 | — | %79,0 | 25 Oca 2022 |
60Bu hafta | CVE-2021-45467Kavram kanıtı | In CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1107, an unauthenticated attacker can use %00 bytes to cause /user/loader.phcontrol-webpanel · webpanel · CWE-862 | Kritik9,8 | — | %70,7 | 26 Ara 2022 |
60Bu hafta | CVE-2017-9232Silahlaştırılmış | Juju before 1.25.12, 2.0.x before 2.0.4, and 2.1.x before 2.1.3 uses a UNIX domain socket without setting appropriate permissions, allowing canonical · juju · CWE-862 | Kritik9,8 | — | %48,5 | 27 May 2017 |
60Bu hafta | CVE-2021-4374Silahlaştırılmış | WordPress Automatic Plugin <= 3.53.2 - Unauthenticated Arbitrary Options Updatevalvepress · wordpress automatic plugin · CWE-862 | Kritik9,8 | — | %16,4 | 6 Haz 2023 |
60Bu hafta | CVE-2023-6020Silahlaştırılmış | Ray Static File Local File Includeray project · ray · CWE-862 | Yüksek7,5 | — | %14,6 | 16 Kas 2023 |
60Bu hafta | CVE-2023-5612Silahlaştırılmış | Missing Authorization in GitLabgitlab · gitlab · CWE-862 | Orta5,3 | — | %4,8 | 25 Oca 2024 |
60Bu hafta | CVE-2015-10143Silahlaştırılmış | Platform < 1.4.4 - Missing Authorization to Unauthenticated Arbitrary Options Updatepagelines · platform theme · CWE-862 | Kritik9,8 | — | %3,0 | 24 Tem 2025 |
60Bu hafta | CVE-2026-28515Silahlaştırılmış | openDCIM <= 23.04 Missing Authorization in install.phpopendcim · opendcim · CWE-862 | Kritik9,3 | — | %1,2 | 27 Şub 2026 |
59Planlayın | CVE-2021-32172Kavram kanıtı | Maian Cart v3.8 contains a preauthorization remote code execution (RCE) exploit via a broken access control issue in the Elfinder plugin.maianscriptworld · maian cart · CWE-862 | Kritik9,8 | — | %66,4 | 7 Eki 2021 |
57Planlayın | CVE-2024-31997İstismar yok | XWiki Platform remote code execution from account through UIExtension parametersxwiki · xwiki · CWE-862 | Yüksek8,8 | — | %73,9 | 10 Nis 2024 |
57Planlayın | CVE-2025-11833Kavram kanıtı | Post SMTP – Complete SMTP Solution with Logs, Alerts, Backup SMTP & Mobile App <= 3.6.0 - Missing Authorization to Account Takeover via Unauthenticated Email Losaadiqbal · post smtp – complete email deliverability and smtp solution with email logs, alerts, backup smtp & mobile app · CWE-862 | Kritik9,8 | — | %61,4 | 1 Kas 2025 |
- CVE-2022-0543100Hemen
It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escape
KritikCVSS 10,0KEVSilahlaştırılmışEPSS %99redis · redis18 Şub 2022
- CVE-2023-5216394Hemen
Digiever DS-2105 Pro 3.1.0.71-11 devices allow time_tzsetup.cgi Command Injection.
YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %97digiever · ds-2105 pro firmware3 Şub 2025
- CVE-2025-2036290Hemen
Update: On November 5, 2025, Cisco became aware of a new attack variant against devices running Cisco Secure ASA Software or Cisco Secure FT
YüksekCVSS 8,6KEVSilahlaştırılmışEPSS %86cisco · adaptive security appliance software25 Eyl 2025
- CVE-2024-5772689Hemen
SimpleHelp remote support software v5.5.7 and before has a vulnerability that allows low-privileges technicians to create API keys with exce
KritikCVSS 9,9KEVSilahlaştırılmışEPSS %66simple-help · simplehelp15 Oca 2025
- CVE-2025-620586Hemen
Missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025
KritikCVSS 9,1KEVSilahlaştırılmışEPSS %673ds · delmia apriso4 Ağu 2025
- CVE-2021-3065773Bu hafta
A logic issue was addressed with improved state management.
OrtaCVSS 5,5KEVSilahlaştırılmışEPSS %68apple · mac os x8 Eyl 2021
- CVE-2021-2130766Bu hafta
Remote Code Exploit in Lucee Admin
KritikCVSS 9,8SilahlaştırılmışEPSS %89lucee · lucee server11 Şub 2021
- CVE-2020-877265Bu hafta
The InfiniteWP Client plugin before 1.9.4.5 for WordPress has a missing authorization check in iwp_mmb_set_request in init.php.
KritikCVSS 9,8SilahlaştırılmışEPSS %87revmakx · infinitewp client6 Şub 2020
- CVE-2018-600065Bu hafta
An issue was discovered in AsusWRT before 3.0.0.4.384_10007.
KritikCVSS 9,8SilahlaştırılmışEPSS %85asus · asuswrt22 Oca 2018
- CVE-2023-2603563Bu hafta
ZoneMinder vulnerable to Missing Authorization
KritikCVSS 9,8SilahlaştırılmışEPSS %80zoneminder · zoneminder24 Şub 2023
- CVE-2019-1595463Bu hafta
An issue was discovered in Total.js CMS 12.0.0.
KritikCVSS 9,9SilahlaştırılmışEPSS %78totaljs · total.js cms5 Eyl 2019
- CVE-2021-3071363Bu hafta
A permissions issue was addressed with improved validation.
YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %7apple · mac os x8 Eyl 2021
- CVE-2024-4173062Bu hafta
Missing Authentication check in SAP BusinessObjects Business Intelligence Platform
KritikCVSS 9,8İstismar yokEPSS %75sap · business objects business intelligence platform13 Ağu 2024
- CVE-2021-3797662Bu hafta
Inappropriate implementation in Memory in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to obtain potentially sensitive info
OrtaCVSS 6,5KEVSilahlaştırılmışEPSS %19google · chrome8 Eki 2021
- CVE-2022-2394460Bu hafta
Apache ShenYu 2.4.1 Improper access control
KritikCVSS 9,1Kavram kanıtıEPSS %79apache · shenyu25 Oca 2022
- CVE-2021-4546760Bu hafta
In CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1107, an unauthenticated attacker can use %00 bytes to cause /user/loader.ph
KritikCVSS 9,8Kavram kanıtıEPSS %70control-webpanel · webpanel26 Ara 2022
- CVE-2017-923260Bu hafta
Juju before 1.25.12, 2.0.x before 2.0.4, and 2.1.x before 2.1.3 uses a UNIX domain socket without setting appropriate permissions, allowing
KritikCVSS 9,8SilahlaştırılmışEPSS %48canonical · juju27 May 2017
- CVE-2021-437460Bu hafta
WordPress Automatic Plugin <= 3.53.2 - Unauthenticated Arbitrary Options Update
KritikCVSS 9,8SilahlaştırılmışEPSS %16valvepress · wordpress automatic plugin6 Haz 2023
- CVE-2023-602060Bu hafta
Ray Static File Local File Include
YüksekCVSS 7,5SilahlaştırılmışEPSS %14ray project · ray16 Kas 2023
- CVE-2023-561260Bu hafta
Missing Authorization in GitLab
OrtaCVSS 5,3SilahlaştırılmışEPSS %4gitlab · gitlab25 Oca 2024
- CVE-2015-1014360Bu hafta
Platform < 1.4.4 - Missing Authorization to Unauthenticated Arbitrary Options Update
KritikCVSS 9,8SilahlaştırılmışEPSS %3pagelines · platform theme24 Tem 2025
- CVE-2026-2851560Bu hafta
openDCIM <= 23.04 Missing Authorization in install.php
KritikCVSS 9,3SilahlaştırılmışEPSS %1opendcim · opendcim27 Şub 2026
- CVE-2021-3217259Planlayın
Maian Cart v3.8 contains a preauthorization remote code execution (RCE) exploit via a broken access control issue in the Elfinder plugin.
KritikCVSS 9,8Kavram kanıtıEPSS %66maianscriptworld · maian cart7 Eki 2021
- CVE-2024-3199757Planlayın
XWiki Platform remote code execution from account through UIExtension parameters
YüksekCVSS 8,8İstismar yokEPSS %73xwiki · xwiki10 Nis 2024
- CVE-2025-1183357Planlayın
Post SMTP – Complete SMTP Solution with Logs, Alerts, Backup SMTP & Mobile App <= 3.6.0 - Missing Authorization to Account Takeover via Unauthenticated Email Lo
KritikCVSS 9,8Kavram kanıtıEPSS %61saadiqbal · post smtp – complete email deliverability and smtp solution with email logs, alerts, backup smtp & mobile app1 Kas 2025