Vulnerabilities > Incorrect Authorization

DATE CVE VULNERABILITY TITLE RISK
2022-03-10 CVE-2022-24609 Incorrect Authorization vulnerability in Luocms Project Luocms 2.0
Luocms v2.0 is affected by an incorrect access control vulnerability.
network
low complexity
luocms-project CWE-863
critical
9.8
2022-03-09 CVE-2022-24748 Incorrect Authorization vulnerability in Shopware
Shopware is an open commerce platform based on the Symfony php Framework and the Vue javascript framework.
network
low complexity
shopware CWE-863
7.5
2022-03-08 CVE-2022-24714 Incorrect Authorization vulnerability in Icinga web 2
Icinga Web 2 is an open source monitoring web interface, framework and command-line interface.
network
low complexity
icinga CWE-863
5.3
2022-03-08 CVE-2021-41241 Incorrect Authorization vulnerability in Nextcloud Server
Nextcloud server is a self hosted system designed to provide cloud style services.
network
low complexity
nextcloud CWE-863
4.3
2022-03-07 CVE-2021-24824 Incorrect Authorization vulnerability in Custom Content Shortcode Project Custom Content Shortcode
The [field] shortcode included with the Custom Content Shortcode WordPress plugin before 4.0.1, allows authenticated users with a role as low as contributor, to access arbitrary post metadata.
network
low complexity
custom-content-shortcode-project CWE-863
4.3
2022-03-02 CVE-2021-3658 Incorrect Authorization vulnerability in multiple products
bluetoothd from bluez incorrectly saves adapters' Discoverable status when a device is powered down, and restores it when powered up.
low complexity
bluez fedoraproject CWE-863
6.5
2022-03-02 CVE-2022-24306 Incorrect Authorization vulnerability in Zohocorp Manageengine Sharepoint Manager Plus
Zoho ManageEngine SharePoint Manager Plus before 4329 allows account takeover because authorization is mishandled.
network
low complexity
zohocorp CWE-863
critical
9.8
2022-03-02 CVE-2022-0577 Incorrect Authorization vulnerability in multiple products
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository scrapy/scrapy prior to 2.6.1.
network
low complexity
scrapy debian CWE-863
6.5
2022-02-26 CVE-2022-0762 Incorrect Authorization vulnerability in Microweber
Incorrect Authorization in GitHub repository microweber/microweber prior to 1.3.
network
low complexity
microweber CWE-863
4.3
2022-02-24 CVE-2019-25058 Incorrect Authorization vulnerability in multiple products
An issue was discovered in USBGuard before 1.1.0.
7.8