CWE-863

3,070 vulnerabilities with CWE-863

CVE-2024-54010 LOW

HPE Aruba Networking CX 10000 Series Switches - DoS

CVSS 3.4

CVE-2024-39025 HIGH

letta - Incorrect Authorization in /users Endpoint

CVSS 7.5

CVE-2024-47157 LOW

Honor MagicOS 8.0-8.0.0.135 - Incorrect Authorization

CVSS 2.9

CVE-2024-47148 MEDIUM

Honor <version> - Privilege Escalation

CVSS 4.0

CVE-2024-56431 CRITICAL

Theora < 1.2.0 - Invalid Negative Left Shift in oc_huff_tree_unpack

CVSS 9.8

CVE-2024-47102 MEDIUM

IBM AIX 7.2-7.3 and VIOS 3.1-4.1 - Denial of Service via perfstat Kernel Extension

CVSS 5.5

CVE-2024-56350 MEDIUM

JetBrains TeamCity < 2024.12 - Unauthorized Project Access via Build Credentials

CVSS 4.3

CVE-2024-56348 MEDIUM

JetBrains TeamCity < 2024.12 - Incorrect Authorization

CVSS 4.3

CVE-2024-12831 HIGH

Arista NG Firewall - Privilege Escalation via uvm_login Incorrect Authorization

CVSS 7.8

CVE-2024-12539 MEDIUM

Elasticsearch 8.16.0-8.16.1 - Incorrect Authorization Bypass of Document Level Security

CVSS 6.5

CVE-2024-51479 HIGH

Next.js 9.5.5-14.2.14 - Improper Authorization via Pathname-Based Middleware Bypass

CVSS 7.5

CVE-2024-54662 CRITICAL

Dante 1.4.0-1.4.3 - Privilege Escalation

CVSS 9.1

CVE-2024-9654 LOW

Easy Digital Downloads 3.1-3.3.4 - Unauthenticated Improper Authorization via 'verify_guest_email' Function

CVSS 3.7

CVE-2024-37775 HIGH

Sunbird DCIM dcTrack 9.1.2 - Incorrect Authorization via Ticket Location Update

CVSS 7.5

CVE-2024-8650 MEDIUM

GitLab CE/EE <17.4.6-17.6.2 - Info Disclosure

CVSS 5.3

CVE-2024-8116 MEDIUM

GitLab CE/EE <17.4.6-17.6.2 - Info Disclosure

CVSS 5.3

CVE-2024-55662 CRITICAL

XWiki 3.3-15.10.8 - Unauthenticated Remote Code Execution via Extension Repository Application

CVSS 9.9

CVE-2024-55633 MEDIUM

Apache Superset < 4.1.0 - Incorrect Authorization via SQL DML Statement

CVSS 6.5

CVE-2024-10043 LOW

GitLab EE <17.4.6-17.6.2 - Info Disclosure

CVSS 3.1

CVE-2024-54495 MEDIUM

macOS < 14.7.2 and < 15.2 - Unprotected User Data Exposure via Path Handling Issue

CVSS 5.5

CVE-2024-53949 MEDIUM

Apache Superset <4.1.0 - Auth Bypass

CVSS 6.5

CVE-2024-55579 HIGH

Qlik Sense Enterprise for Windows <November 2024 IR - Code Injection

CVSS 8.8

CVE-2024-12247 MEDIUM

Mattermost 9.7.0-9.7.5 9.8.0-9.8.2 9.9.0-9.9.2 - Incorrect Authorization via Permission Scheme Update Propagation

CVSS 4.6

CVE-2024-12196 MEDIUM

Devolutions Server < 2024.3.8.0 - Authenticated Incorrect Authorization in Permission Component

CVSS 6.5

CVE-2024-12148 MEDIUM

Devolutions Server < 2024.3.7.0 - Authenticated Incorrect Authorization in Permission Validation

CVSS 4.3