Vulnerabilities > Missing Authorization

DATE CVE VULNERABILITY TITLE RISK
2022-05-10 CVE-2022-20004 Missing Authorization vulnerability in Google Android
In checkSlicePermission of SliceManagerService.java, it is possible to access any slice URI due to improper input validation.
local
low complexity
google CWE-862
7.8
2022-05-10 CVE-2022-20011 Missing Authorization vulnerability in Google Android
In getArray of NotificationManagerService.java , there is a possible leak of one user notifications to another due to missing check.
local
low complexity
google CWE-862
2.1
2022-05-10 CVE-2022-20115 Missing Authorization vulnerability in Google Android 12.0/12.1
In broadcastServiceStateChanged of TelephonyRegistry.java, there is a possible way to learn base station information without location permission due to a missing permission check.
local
low complexity
google CWE-862
2.1
2022-05-05 CVE-2022-29176 Missing Authorization vulnerability in Rubygems Rubygems.Org
Rubygems is a package registry used to supply software for the Ruby language ecosystem.
network
high complexity
rubygems CWE-862
7.5
2022-05-05 CVE-2021-44055 Missing Authorization vulnerability in Qnap Video Station
An missing authorization vulnerability has been reported to affect QNAP device running Video Station.
network
low complexity
qnap CWE-862
7.5
2022-05-03 CVE-2022-20102 Missing Authorization vulnerability in Google Android 11.0/12.0
In aee daemon, there is a possible information disclosure due to a missing permission check.
local
low complexity
google CWE-862
2.1
2022-05-03 CVE-2022-20084 Missing Authorization vulnerability in Google Android 10.0/11.0/12.0
In telephony, there is a possible way to disable receiving emergency broadcasts due to a missing permission check.
local
low complexity
google CWE-862
4.6
2022-05-03 CVE-2022-20093 Missing Authorization vulnerability in Google Android 10.0/11.0/12.0
In telephony, there is a possible way to disable receiving SMS messages due to a missing permission check.
local
low complexity
google CWE-862
4.6
2022-05-03 CVE-2022-20098 Missing Authorization vulnerability in Google Android 11.0/12.0
In aee daemon, there is a possible information disclosure due to a missing permission check.
local
low complexity
google CWE-862
2.1
2022-05-03 CVE-2022-20100 Missing Authorization vulnerability in Google Android 11.0/12.0
In aee daemon, there is a possible information disclosure due to a missing permission check.
local
low complexity
google CWE-862
2.1