Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-284 (访问控制不恰当) — Vulnerability Class 2041

2041 vulnerabilities classified as CWE-284 (访问控制不恰当). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2021-28129 DEB packaging for Apache OpenOffice 4.1.8 installed with a non-root userid and groupid — Apache OpenOffice 7.1 -2021-10-07
CVE-2021-38392 Improper Access Control for Boston Scientific Zoom Latitude — ZOOM LATITUDE 6.5 Medium2021-10-04
CVE-2021-41298 ECOA BAS controller - Improper Access Control — ECS Router Controller ECS (FLASH) 8.8 High2021-09-30
CVE-2020-12030 Emerson WirelessHART Gateway — Wireless 1410 Gateway 10.0 Critical2021-09-29
CVE-2021-20034 Sonicwall SMA100 路径遍历漏洞 — SMA100 9.1 -2021-09-27
CVE-2021-22941 Citrix Systems Citrix ShareFile 安全漏洞 — Citrix ShareFile storage zones controller 9.4 -2021-09-23
CVE-2021-1419 Cisco Access Points SSH Management Privilege Escalation Vulnerability — Cisco Wireless LAN Controller (WLC) 7.8 High2021-09-23
CVE-2021-34724 Cisco IOS XE SD-WAN Software Privilege Escalation Vulnerability — Cisco IOS XE SD-WAN Software 6.0 Medium2021-09-23
CVE-2021-34696 Cisco ASR 900 and ASR 920 Series Aggregation Services Routers Access Control List Bypass Vulnerability — Cisco IOS XE Software 5.8 Medium2021-09-23
CVE-2021-1625 Cisco IOS XE Software Zone-Based Policy Firewall ICMP and UDP Inspection Vulnerability — Cisco IOS XE Software 5.8 Medium2021-09-23
CVE-2021-24635 Visual Link Preview < 2.2.3 - Unauthorised AJAX Calls — Visual Link Preview 5.4 -2021-09-20
CVE-2021-24583 Timetable and Event Schedule by MotoPress < 2.4.2 - Unauthorised Event TimeSlot Deletion — Timetable and Event Schedule by MotoPress 3.5 -2021-09-20
CVE-2021-37183 Siemens SINEMA Remote Connect Server 访问控制错误漏洞 — SINEMA Remote Connect Server 6.5 -2021-09-14
CVE-2021-25463 SAMSUNG PENUP 安全漏洞 — PENUP 4.0 Medium2021-09-09
CVE-2021-35213 Orion User setting Improper Access Control Privilege Escalation Vulnerability — Orion Platform 8.9 High2021-08-31
CVE-2021-35221 ImportAlert Improper Access Control Tampering Vulnerability — Orion Platform 6.3 Medium2021-08-31
CVE-2021-1591 Cisco Nexus 9500 Series Switches Access Control List Bypass Vulnerability — Cisco NX-OS Software 5.8 Medium2021-08-25
CVE-2021-1583 Cisco Nexus 9000 Series Fabric Switches ACI Mode Arbitrary File Read Vulnerability — Cisco NX-OS System Software in ACI Mode 4.4 Medium2021-08-25
CVE-2021-1581 Cisco Application Policy Infrastructure Controller Command Injection and File Upload Vulnerabilities — Cisco Application Policy Infrastructure Controller (APIC) 6.5 Medium2021-08-25
CVE-2021-1580 Cisco Application Policy Infrastructure Controller Command Injection and File Upload Vulnerabilities — Cisco Application Policy Infrastructure Controller (APIC) 6.5 Medium2021-08-25
CVE-2021-1577 Cisco Application Policy Infrastructure Controller Arbitrary File Read and Write Vulnerability — Cisco Application Policy Infrastructure Controller (APIC) 9.1 Critical2021-08-25
CVE-2021-25956 Improper User Access Control in "Dolibarr" Leads to Account Takeover — dolibarr 4.7 Medium2021-08-17
CVE-2021-1113 NVIDIA Jetson 权限许可和访问控制问题漏洞 — Jetson AGX Xavier series, Jetson Xavier NX, Jetson TX2 series, Jetson TX2 NX, Jetson Nano, Jetson Nano 2GB, Jetson TX1 4.7 Medium2021-08-11
CVE-2021-25954 Improper Access Control in “Dolibarr” — dolibarr 4.3 Medium2021-08-09
CVE-2021-32002 SiteManager troubleshooter allows access without authentication from local network — SiteManager 4.3 Medium2021-08-05
CVE-2021-22920 Citrix Application Delivery Controller安全漏洞 — Citrix ADC, Citrix Gateway 6.5 -2021-08-05
CVE-2021-25448 SAMSUNG Smart Touch Call 安全漏洞 — Smart Touch Call 5.3 -2021-08-05
CVE-2021-25447 SAMSUNG SmartThings 安全漏洞 — Smart Things 8.2 -2021-08-05
CVE-2021-25446 SAMSUNG SmartThings 安全漏洞 — Smart Things 5.3 -2021-08-05
CVE-2021-1600 Cisco Intersight Virtual Appliance IPv4 and IPv6 Forwarding Vulnerabilities — Cisco Intersight Virtual Appliance 8.3 High2021-07-22

Vulnerabilities classified as CWE-284 (访问控制不恰当) represent 2041 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.