CWE-284
Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
5,300 vulnerabilities with CWE-284
CVE-2024-25830
CRITICAL
F-logic DataCube3 v1.0 - Unauthenticated Path Traversal via Configuration File URI
CVSS 9.8
CVE-2024-20291
MEDIUM
Cisco NX-OS - Unauthenticated Access Control Bypass via Port Channel Subinterface ACL Programming
CVSS 5.8
CVE-2024-1492
MEDIUM
WPify Woo Czech <= 4.0.8 - Unauthenticated Unauthorized Data Access via maybe_send_to_packeta Function
CVSS 5.3
CVE-2024-1475
MEDIUM
Coming Soon Maintenance Mode <1.0.5 - Info Disclosure
CVSS 5.3
CVE-2024-1472
MEDIUM
WP Maintenance <6.1.6 - Info Disclosure
CVSS 5.3
CVE-2024-1294
MEDIUM
Sunshine Photo Cart: Free Client Galleries for Photographers <3.0.2...
CVSS 5.3
CVE-2024-1288
MEDIUM
Schema & Structured Data for WP & AMP <1.27 - Privilege Escalation
CVSS 4.3
CVE-2024-1044
MEDIUM
Customer Reviews for WooCommerce <= 5.38.12 - Unauthenticated Arbitrary Review Submission via Missing Capability Check
CVSS 5.3
CVE-2024-0978
MEDIUM
My Private Site <3.0.14 - Info Disclosure
CVSS 5.3
CVE-2024-25169
CRITICAL
Mezzanine 6.0.0 - Improper Access Control in Admin Panel
CVSS 9.8
CVE-2024-1632
HIGH
Progress Sitefinity < 13.3.7649 - Authenticated Sensitive Information Exposure in Administrative Area
CVSS 8.8
CVE-2024-22459
MEDIUM
Dell ECS <3.6.2.5-3.7.0.6-3.8.0.4 - Privilege Escalation
CVSS 6.8
CVE-2024-1476
MEDIUM
Acurax WordPress <2.6 - Info Disclosure
CVSS 5.3
CVE-2024-0975
MEDIUM
WordPress Access Control <4.0.13 - Info Disclosure
CVSS 5.3
CVE-2024-0766
MEDIUM
Envo's Elementor Templates & Widgets - Info Disclosure
CVSS 4.3
CVE-2024-25723
HIGH
ZenML ZenML Server - Improper Authentication
CVSS 8.8
CVE-2024-0551
HIGH
AnythingLLM < 1.0.0 - Authenticated Improper Access Control via Database Export Endpoint
CVSS 7.1
CVE-2024-24568
MEDIUM
Suricata 7.0.0-7.0.2 - Improper Access Control via HTTP2 Header Inspection Bypass
CVSS 5.3
CVE-2024-1823
MEDIUM
CodeAstro Simple Voting System 1.0 - Improper Access Control in Backend users.php
CVSS 5.3
CVE-2024-1053
MEDIUM
Event Tickets and Registration <= 5.8.1 - Authenticated Unauthorized Data Access via Email Action
CVSS 4.3
CVE-2024-25251
HIGH
code-projects Agro-School Management System 1.0 - Info Disclosure
CVSS 8.8
CVE-2024-26310
MEDIUM
Archer Platform 6.8-6.14.0.2 - Authenticated Improper Access Control
CVSS 4.3
CVE-2024-20325
MEDIUM
Cisco Unified Intelligence Center - Info Disclosure
CVSS 5.1
CVE-2024-1701
MEDIUM
keerti1924 PHP-MYSQL-User-Login-System 1.0 - Improper Access Control in /edit.php
CVSS 5.3
CVE-2024-1675
HIGH
Google Chrome < 122.0.6261.57 - Insufficient Policy Enforcement in Download
CVSS 8.8
Details
Vulnerabilities
5,300