Vulnerabilities > Missing Authorization

DATE CVE VULNERABILITY TITLE RISK
2020-05-14 CVE-2020-10612 Missing Authorization vulnerability in Opto22 Softpac Project 9.6
Opto 22 SoftPAC Project Version 9.6 and prior.
network
low complexity
opto22 CWE-862
critical
9.1
2020-05-14 CVE-2020-0109 Missing Authorization vulnerability in Google Android 10.0/9.0
In simulatePackageSuspendBroadcast of NotificationManagerService.java, there is a missing permission check.
local
low complexity
google CWE-862
7.8
2020-05-14 CVE-2020-0106 Missing Authorization vulnerability in Google Android 10.0
In getCellLocation of PhoneInterfaceManager.java, there is a possible permission bypass due to a missing SDK version check.
local
low complexity
google CWE-862
5.5
2020-05-14 CVE-2020-0105 Missing Authorization vulnerability in Google Android 10.0/9.0
In onKeyguardVisibilityChanged of key_store_service.cpp, there is a missing permission check.
local
low complexity
google CWE-862
7.8
2020-05-13 CVE-2020-1996 Missing Authorization vulnerability in Paloaltonetworks Pan-Os
A missing authorization vulnerability in the management server component of PAN-OS Panorama allows a remote unauthenticated user to inject messages into the management server ms.log file.
network
low complexity
paloaltonetworks CWE-862
5.3
2020-05-13 CVE-2020-12700 Missing Authorization vulnerability in DKD Direct Mail
The direct_mail extension through 5.2.3 for TYPO3 allows Information Disclosure via a newsletter subscriber data Special Query.
network
low complexity
dkd CWE-862
4.3
2020-05-13 CVE-2020-12698 Missing Authorization vulnerability in DKD Direct Mail
The direct_mail extension through 5.2.3 for TYPO3 has Broken Access Control for newsletter subscriber tables.
network
low complexity
dkd CWE-862
4.3
2020-05-12 CVE-2020-6259 Missing Authorization vulnerability in SAP Adaptive Server Enterprise 15.7/16.0
Under certain conditions SAP Adaptive Server Enterprise, versions 15.7, 16.0, allows an attacker to access information which would otherwise be restricted leading to Missing Authorization Check.
network
low complexity
sap CWE-862
6.5
2020-05-12 CVE-2020-6258 Missing Authorization vulnerability in SAP Identity Management 8.0
SAP Identity Management, version 8.0, does not perform necessary authorization checks for an authenticated user, allowing the attacker to view certain sensitive information of the victim, leading to Missing Authorization Check.
network
low complexity
sap CWE-862
6.5
2020-05-12 CVE-2020-6256 Missing Authorization vulnerability in SAP Master Data Governance
SAP Master Data Governance, versions - 748, 749, 750, 751, 752, 800, 801, 802, 803, 804, allows users to display change request details without having required authorizations, due to Missing Authorization Check.
network
low complexity
sap CWE-862
4.3