Vulnerabilities > Incorrect Authorization
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-12-30 | CVE-2021-20149 | Incorrect Authorization vulnerability in Trendnet Tew-827Dru Firmware 2.08B01 Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient access controls for the WAN interface. | 9.8 |
| 2021-12-27 | CVE-2021-45339 | Incorrect Authorization vulnerability in Avast Antivirus Privilege escalation vulnerability in Avast Antivirus prior to 20.4 allows a local user to gain elevated privileges by "hollowing" trusted process which could lead to the bypassing of Avast self-defense. | 7.8 |
| 2021-12-23 | CVE-2021-23175 | Incorrect Authorization vulnerability in Nvidia Geforce Experience NVIDIA GeForce Experience contains a vulnerability in user authorization, where GameStream does not correctly apply individual user access controls for users on the same device, which, with user intervention, may lead to escalation of privileges, information disclosure, data tampering, and denial of service, affecting other resources beyond the intended security authority of GameStream. | 8.2 |
| 2021-12-23 | CVE-2021-38016 | Incorrect Authorization vulnerability in multiple products Insufficient policy enforcement in background fetch in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to bypass same origin policy via a crafted HTML page. | 8.8 |
| 2021-12-23 | CVE-2021-38017 | Incorrect Authorization vulnerability in multiple products Insufficient policy enforcement in iframe sandbox in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. | 8.8 |
| 2021-12-17 | CVE-2021-23803 | Incorrect Authorization vulnerability in Nette Latte This affects the package latte/latte before 2.10.6. | 9.8 |
| 2021-12-16 | CVE-2021-45102 | Incorrect Authorization vulnerability in Wisc Htcondor An issue was discovered in HTCondor 9.0.x before 9.0.4 and 9.1.x before 9.1.2. | 8.8 |
| 2021-12-15 | CVE-2021-0649 | Incorrect Authorization vulnerability in Google Android 11.0 In stopVpnProfile of Vpn.java, there is a possible VPN profile reset due to a permissions bypass. | 7.8 |
| 2021-12-13 | CVE-2021-39918 | Incorrect Authorization vulnerability in Gitlab Incorrect Authorization in GitLab EE affecting all versions starting from 11.1 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2, allows a user to add comments to a vulnerability which cannot be accessed. | 4.3 |
| 2021-12-13 | CVE-2021-39930 | Incorrect Authorization vulnerability in Gitlab Missing authorization in GitLab EE versions between 12.4 and 14.3.6, between 14.4.0 and 14.4.4, and between 14.5.0 and 14.5.2 allowed an attacker to access a user's custom project and group templates | 4.3 |