Vulnerabilities > Incorrect Authorization
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-05-26 | CVE-2022-26767 | Incorrect Authorization vulnerability in Apple Macos The issue was addressed with additional permissions checks. | 4.3 |
| 2022-05-23 | CVE-2022-30016 | Incorrect Authorization vulnerability in Rescue Dispatch Management System Project Rescue Dispatch Management System 1.0 Rescue Dispatch Management System 1.0 is vulnerable to Incorrect Access Control via http://localhost/rdms/admin/?page=system_info. | 6.5 |
| 2022-05-19 | CVE-2022-22978 | Incorrect Authorization vulnerability in multiple products In Spring Security versions 5.5.6 and 5.6.3 and older unsupported versions, RegexRequestMatcher can easily be misconfigured to be bypassed on some servlet containers. | 9.8 |
| 2022-05-18 | CVE-2021-3956 | Incorrect Authorization vulnerability in Lenovo Xclarity Controller A read-only authentication bypass vulnerability was reported in the Third Quarter 2021 release of Lenovo XClarity Controller (XCC) firmware affecting XCC devices configured in LDAP Authentication Only Mode and using an LDAP server that supports “unauthenticated bind”, such as Microsoft Active Directory. | 4.3 |
| 2022-05-17 | CVE-2022-1706 | Incorrect Authorization vulnerability in multiple products A vulnerability was found in Ignition where ignition configs are accessible from unprivileged containers in VMs running on VMware products. | 6.5 |
| 2022-05-17 | CVE-2022-1753 | Incorrect Authorization vulnerability in Wowonder A vulnerability, which was classified as critical, was found in WoWonder. | 4.0 |
| 2022-05-16 | CVE-2022-0574 | Incorrect Authorization vulnerability in Publify Project Publify Improper Access Control in GitHub repository publify/publify prior to 9.2.8. | 6.4 |
| 2022-05-16 | CVE-2022-1553 | Incorrect Authorization vulnerability in Publify Project Publify Leaking password protected articles content due to improper access control in GitHub repository publify/publify prior to 9.2.8. | 4.0 |
| 2022-05-13 | CVE-2022-29854 | Incorrect Authorization vulnerability in Mitel Minet Firmware 1.8.0.12 A vulnerability in Mitel 6900 Series IP (MiNet) phones excluding 6970, versions 1.8 (1.8.0.12) and earlier, could allow a unauthenticated attacker with physical access to the phone to gain root access due to insufficient access control for test functionality during system startup. | 6.8 |
| 2022-05-13 | CVE-2022-27134 | Incorrect Authorization vulnerability in B1 Eosio Batdappboomx 327C04Cf EOSIO batdappboomx v327c04cf has an Access-control vulnerability in the `transfer` function of the smart contract which allows remote attackers to win the cryptocurrency without paying ticket fee via the `std::string memo` parameter. | 5.0 |