CWE-863

3,099 vulnerabilities with CWE-863

CVE-2021-39630 HIGH

Android - Local Privilege Escalation via OverlayManagerService Permissions Bypass

CVSS 7.8

CVE-2021-4194 MEDIUM

BookStack < 21.12.1 - Improper Access Control

CVSS 6.5

CVE-2021-45457 HIGH

Apache Kylin 2.0.0-2.6.6, 3.0.0-3.1.2, 4.0.0 - Incorrect Authorization via Cross-Origin Request Handling

CVSS 7.5

CVE-2021-20868 MEDIUM

KONICA MINOLTA bizhub series - Auth Bypass

CVSS 4.5

CVE-2021-20149 CRITICAL

Trendnet TEW-827DRU 2.08B01 - Unauthenticated WAN Access via IPv6

CVSS 9.8

CVE-2021-43858 HIGH

MinIO <RELEASE.2021-12-27T07-23-18Z - Privilege Escalation

CVSS 8.8

CVE-2021-45339 HIGH

Avast Antivirus < 20.4 - Privilege Escalation via Process Hollowing

CVSS 7.8

CVE-2021-23175 HIGH

NVIDIA GeForce Experience - Privilege Escalation

CVSS 8.2

CVE-2021-38017 HIGH

Google Chrome < 96.0.4664.45 - Insufficient Policy Enforcement in iframe Sandbox

CVSS 8.8

CVE-2021-38016 HIGH

Google Chrome < 96.0.4664.45 - Same Origin Policy Bypass via Background Fetch

CVSS 8.8

CVE-2021-23803 CRITICAL

latte < 2.10.6 - Incorrect Authorization via Control Character Bypass

CVSS 9.8

CVE-2021-45102 HIGH

HTCondor 9.0.x-9.0.4 and 9.1.x-9.1.2 - Incorrect Authorization via SciToken Authentication

CVSS 8.8

CVE-2021-0649 HIGH

Android 11 - Unauthenticated Local Privilege Escalation via VPN Profile Reset

CVSS 7.8

CVE-2021-39945 LOW

GitLab 9.4.0-14.3.5, 14.4.0-14.4.3, 14.5.0-14.5.1 - Incorrect Authorization in Merge Request Approval

CVSS 2.7

CVE-2021-39936 LOW

GitLab 10.7-14.3.5, 14.4-14.4.3, 14.5-14.5.1 - Incorrect Authorization via Deploy Token

CVSS 3.5

CVE-2021-39930 MEDIUM

GitLab EE 12.4-14.3.6 14.4.0-14.4.4 14.5.0-14.5.2 - Unauthenticated Custom Project and Group Template Access

CVSS 4.3

CVE-2021-39918 LOW

GitLab 11.1.0-14.3.5, 14.4.0-14.4.3, 14.5.0-14.5.1 - Incorrect Authorization in Vulnerability Comment Feature

CVSS 3.1

CVE-2021-24872 MEDIUM

Get Custom Field Values <4.0 - Info Disclosure

CVSS 6.5

CVE-2021-24819 MEDIUM

WordPress Plugin <1.0 - Info Disclosure

CVSS 4.3

CVE-2021-41805 HIGH

HashiCorp Consul Enterprise < 1.8.17, 1.9.x < 1.9.11, 1.10.x < 1.10.4 - Incorrect Access Control via Namespace ACL Token

CVSS 8.8

CVE-2021-29678 HIGH

IBM Db2 9.7, 10.1, 10.5, 11.1, 11.5 - Incorrect Authorization

CVSS 8.7

CVE-2021-38503 CRITICAL

Firefox < 94 - Firefox ESR < 91.3 - XSS

CVSS 10.0

CVE-2021-41013 MEDIUM

FortiWeb <6.4.1, <6.3.15 - Info Disclosure

CVSS 5.3

CVE-2021-42758 HIGH

FortiWLC <= 8.6.1 - Authenticated Privilege Escalation via GUI Restriction Bypass

CVSS 8.8

CVE-2021-43781 MEDIUM

Invenio-Drafts-Resources <0.13.7, 0.14.6 - Privilege Escalation

CVSS 6.4