Search Results (11121 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2022-42909 1 Wepanow 1 Print Away 2025-03-26 6.5 Medium
WEPA Print Away does not verify that a user has authorization to access documents before generating print orders and associated release codes. This could allow an attacker to generate print orders and release codes for documents they don“t own and print hem without authorization. In order to exploit this vulnerability, the user must have an account with wepanow.com or any of the institutions they serve, and be logged in.
CVE-2022-47367 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-03-26 4.8 Medium
In bluetooth driver, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2022-47325 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-03-26 6.4 Medium
In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.
CVE-2022-47324 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-03-26 6.4 Medium
In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.
CVE-2023-0678 1 Phpipam 1 Phpipam 2025-03-26 5.3 Medium
Missing Authorization in GitHub repository phpipam/phpipam prior to v1.5.1.
CVE-2022-47361 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-03-26 7.8 High
In firewall service, there is a missing permission check. This could lead to local escalation of privilege with system execution privileges needed.
CVE-2022-47360 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-03-26 5.5 Medium
In log service, there is a missing permission check. This could lead to local denial of service in log service.
CVE-2022-47359 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-03-26 5.5 Medium
In log service, there is a missing permission check. This could lead to local denial of service in log service.
CVE-2022-47358 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-03-26 5.5 Medium
In log service, there is a missing permission check. This could lead to local denial of service in log service.
CVE-2022-47357 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-03-26 5.5 Medium
In log service, there is a missing permission check. This could lead to local denial of service in log service.
CVE-2022-47341 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-03-26 6.7 Medium
In engineermode services, there is a missing permission check. This could lead to local escalation of privilege with system execution privileges needed.
CVE-2022-47339 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-03-26 6.7 Medium
In cmd services, there is a OS command injection issue due to missing permission check. This could lead to local escalation of privilege with system execution privileges needed.
CVE-2022-47329 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-03-26 6.4 Medium
In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.
CVE-2022-47328 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-03-26 6.4 Medium
In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.
CVE-2022-47326 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-03-26 6.4 Medium
In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.
CVE-2022-48166 1 Wavlink 2 Wl-wn530hg4, Wl-wn530hg4 Firmware 2025-03-25 7.5 High
An access control issue in Wavlink WL-WN530HG4 M30HG4.V5030.201217 allows unauthenticated attackers to download configuration data and log files and obtain admin credentials.
CVE-2022-47327 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-03-25 5.5 Medium
In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.
CVE-2022-21953 1 Suse 1 Rancher 2025-03-25 7.4 High
A Missing Authorization vulnerability in of SUSE Rancher allows authenticated user to create an unauthorized shell pod and kubectl access in the local cluster This issue affects: SUSE Rancher Rancher versions prior to 2.5.17; Rancher versions prior to 2.6.10; Rancher versions prior to 2.7.1.
CVE-2024-43045 1 Jenkins 1 Jenkins 2025-03-25 6.3 Medium
Jenkins 2.470 and earlier, LTS 2.452.3 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to access other users' "My Views".
CVE-2023-23696 1 Dell 1 Command \| Intel Vpro Out Of Band 2025-03-25 7 High
Dell Command Intel vPro Out of Band, versions prior to 4.3.1, contain an Improper Authorization vulnerability. A locally authenticated malicious users could potentially exploit this vulnerability in order to write arbitrary files to the system.