Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CWE-285 (授权机制不恰当) — Vulnerability Class 972

972 vulnerabilities classified as CWE-285 (授权机制不恰当). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2022-4062 Schneider Electric EcoStruxure Power Commission 授权问题漏洞 — EcoStruxure Power Commission 7.8 High2023-02-01
CVE-2023-0609 Improper Authorization in wallabag/wallabag — wallabag/wallabag--2023-02-01
CVE-2023-0610 Improper Authorization in wallabag/wallabag — wallabag/wallabag--2023-02-01
CVE-2022-34405 Dell Client 安全漏洞 — CPG Drivers 7.3 High2023-01-25
CVE-2023-22480 KubeOperator is vulnerable to unauthorized access to system API — KubeOperator 7.3 High2023-01-14
CVE-2022-4701 Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Plugin Activation — Royal Addons for Elementor – Addons and Templates Kit for Elementor 4.3 Medium2023-01-10
CVE-2023-21549 Windows SMB Witness Service Elevation of Privilege Vulnerability — Windows 10 Version 1809 8.8 High2023-01-10
CVE-2015-10033 jvvlee MerlinsBoard Grade improper authorization — MerlinsBoard 3.5 Low2023-01-09
CVE-2022-4879 Forged Alliance Forever Vote improper authorization — Forged Alliance Forever 4.6 Medium2023-01-06
CVE-2022-4868 Improper Authorization in froxlor/froxlor — froxlor/froxlor 4.3 -2022-12-31
CVE-2022-4804 Improper Authorization in usememos/memos — usememos/memos 4.3 -2022-12-28
CVE-2022-4688 Improper Authorization in usememos/memos — usememos/memos 5.4 -2022-12-23
CVE-2022-3187 Dataprobe iBoot-PDU 授权问题漏洞 — iBoot-PDU FW 5.3 Medium2022-12-21
CVE-2022-23542 OpenFGA Authorization Bypass — openfga 7.7 High2022-12-20
CVE-2022-2536 Transposh WordPress Translation <= 1.0.9.6 - Authorization Bypass — Transposh WordPress Translation 5.3 Medium2022-12-15
CVE-2022-39902 SAMSUNG Mobile devices 安全漏洞 — Samsung Mobile Devices 6.5 Medium2022-12-08
CVE-2022-39905 SAMSUNG Mobile devices 安全漏洞 — Samsung Mobile Devices 4.0 Medium2022-12-08
CVE-2022-39879 SAMSUNG Mobile devices 安全漏洞 — Samsung Mobile Devices 5.9 Medium2022-11-09
CVE-2022-39883 SAMSUNG Mobile devices 安全漏洞 — Samsung Mobile Devices 4.0 Medium2022-11-09
CVE-2022-39890 Samsung Billing 安全漏洞 — Samsung Billing 6.2 Medium2022-11-09
CVE-2022-39356 Discourse user account takeover via email and invite link — discourse 8.9 High2022-11-02
CVE-2022-27583 SICK Flexi Compact 安全漏洞 — SICK FlexiCompact 9.1 -2022-10-31
CVE-2022-39329 Profile of disabled user stays accessible — security-advisories 3.5 Low2022-10-27
CVE-2022-39322 @keystone-6/core vulnerable to field-level access-control bypass for multiselect field — keystone 9.1 Critical2022-10-25
CVE-2022-39340 OpenFGA Information Disclosure — openfga 5.3 Medium2022-10-25
CVE-2022-39341 OpenFGA Authorization Bypass — openfga 5.9 Medium2022-10-25
CVE-2022-39342 OpenFGA Authorization Bypass — openfga 5.9 Medium2022-10-25
CVE-2022-34434 Cloud Mobility for Dell EMC Storage 安全漏洞 — Cloud Mobility for Dell Storage 6.7 Medium2022-10-11
CVE-2022-39862 SAMSUNG Mobile devices 安全漏洞 — Samsung Mobile Devices 5.3 Medium2022-10-07
CVE-2022-39873 SAMSUNG Mobile devices 安全漏洞 — Samsung Internet 4.3 Medium2022-10-07

Vulnerabilities classified as CWE-285 (授权机制不恰当) represent 972 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.