Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CWE-284 (访问控制不恰当) — Vulnerability Class 2041

2041 vulnerabilities classified as CWE-284 (访问控制不恰当). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2023-22600 InHand Networks InRouter302 安全漏洞 — InRouter 302 10.0 Critical2023-01-12
CVE-2023-22487 Post mentions can be used to read any post on the forum without access control — framework 7.7 High2023-01-11
CVE-2022-4703 Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Import Deletion — Royal Addons for Elementor – Addons and Templates Kit for Elementor 4.3 Medium2023-01-10
CVE-2022-4705 Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Activation — Royal Addons for Elementor – Addons and Templates Kit for Elementor 4.3 Medium2023-01-10
CVE-2022-4704 Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Import — Royal Addons for Elementor – Addons and Templates Kit for Elementor 5.4 Medium2023-01-10
CVE-2022-4708 Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Conditions Modification — Royal Addons for Elementor – Addons and Templates Kit for Elementor 4.3 Medium2023-01-10
CVE-2022-4711 Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Menu Settings Update — Royal Addons for Elementor – Addons and Templates Kit for Elementor 4.3 Medium2023-01-10
CVE-2022-4702 Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Plugin Deactivation — Royal Addons for Elementor – Addons and Templates Kit for Elementor 5.4 Medium2023-01-10
CVE-2022-4700 Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Theme Activation — Royal Addons for Elementor – Addons and Templates Kit for Elementor 5.4 Medium2023-01-10
CVE-2022-4709 Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Kit Import — Royal Addons for Elementor – Addons and Templates Kit for Elementor 4.3 Medium2023-01-10
CVE-2023-0017 Improper access control in SAP NetWeaver AS for Java — NetWeaver AS for Java 9.4 Critical2023-01-10
CVE-2023-0012 Local Privilege Escalation in SAP Host Agent (Windows) — Host Agent (Windows) 6.4 Medium2023-01-10
CVE-2023-21752 Windows Backup Service Elevation of Privilege Vulnerability — Windows 10 Version 22H2 7.1 High2023-01-10
CVE-2023-21750 Windows Kernel Elevation of Privilege Vulnerability — Windows 10 Version 1809 7.1 High2023-01-10
CVE-2023-21742 Microsoft SharePoint Server Remote Code Execution Vulnerability — Microsoft SharePoint Enterprise Server 2016 8.8 High2023-01-10
CVE-2023-21531 Azure Service Fabric Container Elevation of Privilege Vulnerability — Azure Service Fabric 8.2 7.0 High2023-01-10
CVE-2023-22473 Passcode bypass on Talk-Android app — security-advisories 2.1 Low2023-01-09
CVE-2022-23508 GitOps Run allows for Kubernetes workload injection — weave-gitops 8.9 High2023-01-09
CVE-2014-125054 koroket RedditOnRails Vote access control — RedditOnRails 4.3 Medium2023-01-07
CVE-2021-4300 ghostlander Halcyon Block Verification main.cpp AddToBlockIndex access control — Halcyon 6.3 Medium2023-01-04
CVE-2022-34672 NVIDIA Control Panel 安全漏洞 — vGPU software (guest driver) - Windows, NVIDIA Cloud Gaming (guest driver) 7.8 High2022-12-30
CVE-2022-4807 Improper Access Control in usememos/memos — usememos/memos 4.3 -2022-12-28
CVE-2022-4809 Improper Access Control in usememos/memos — usememos/memos 4.3 -2022-12-28
CVE-2022-4810 Improper Access Control in usememos/memos — usememos/memos 4.3 -2022-12-28
CVE-2022-4814 Improper Access Control in usememos/memos — usememos/memos 4.3 -2022-12-28
CVE-2022-41654 Ghost CMS访问控制错误漏洞 — Ghost 8.1 -2022-12-23
CVE-2022-44565 Ubiquiti airMAX和airFiber安全漏洞 — UISP Wireless 5.3 -2022-12-23
CVE-2022-4684 Improper Access Control in usememos/memos — usememos/memos 5.4 -2022-12-23
CVE-2022-4689 Improper Access Control in usememos/memos — usememos/memos 5.4 -2022-12-23
CVE-2022-4724 Improper Access Control in ikus060/rdiffweb — ikus060/rdiffweb 7.5 -2022-12-23

Vulnerabilities classified as CWE-284 (访问控制不恰当) represent 2041 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.