Vulnerabilities > Incorrect Authorization
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2018-09-21 | CVE-2018-16597 | Incorrect Authorization vulnerability in Linux Kernel An issue was discovered in the Linux kernel before 4.8. | 4.9 |
| 2018-09-18 | CVE-2018-7929 | Incorrect Authorization vulnerability in Huawei Mate RS Firmware Huawei Mate RS smartphones with the versions before NEO-AL00D 8.1.0.167(C786) have a lock-screen bypass vulnerability. | 4.6 |
| 2018-08-23 | CVE-2018-1999047 | Incorrect Authorization vulnerability in Jenkins A improper authorization vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in UpdateCenter.java that allows attackers to cancel a Jenkins restart scheduled through the update center. | 4.0 |
| 2018-08-17 | CVE-2018-15468 | Incorrect Authorization vulnerability in XEN An issue was discovered in Xen through 4.11.x. | 4.9 |
| 2018-08-09 | CVE-2018-10925 | Incorrect Authorization vulnerability in multiple products It was discovered that PostgreSQL versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 failed to properly check authorization on certain statements involved with "INSERT ... | 8.1 |
| 2018-08-08 | CVE-2018-3778 | Incorrect Authorization vulnerability in Aedes Project Aedes Improper authorization in aedes version <0.35.0 will publish a LWT in a channel when a client is not authorized. | 5.3 |
| 2018-08-03 | CVE-2018-5489 | Incorrect Authorization vulnerability in Netapp 7-Mode Transition Tool NetApp 7-Mode Transition Tool allows users with valid credentials to access functions and information which may have been intended to be restricted to administrators or privileged users. | 4.0 |
| 2018-07-31 | CVE-2018-7957 | Incorrect Authorization vulnerability in Huawei Victoria-Al00 Firmware Victoriaal008.0.0.336A(C00) Huawei smartphones with software Victoria-AL00 8.0.0.336a(C00) have an information leakage vulnerability. | 2.1 |
| 2018-07-31 | CVE-2017-17708 | Incorrect Authorization vulnerability in Pleasantsolutions Pleasant Password Server Because of insufficient authorization checks it is possible for any authenticated user to change profile data of other users in Pleasant Password Server before 7.8.3. | 4.0 |
| 2018-07-27 | CVE-2017-2632 | Incorrect Authorization vulnerability in Redhat Cloudforms and Cloudforms Management Engine A logic error in valid_role() in CloudForms role validation before 5.7.1.3 could allow a tenant administrator to create groups with a higher privilege level than the tenant administrator should have. | 4.0 |