Vulnerabilities (CVE)

Filtered by CWE-862
Total 4584 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-44439 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-04-10 N/A 5.5 MEDIUM
In messaging service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed.
CVE-2022-44438 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-04-10 N/A 5.5 MEDIUM
In messaging service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed.
CVE-2022-44436 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-04-10 N/A 5.5 MEDIUM
In messaging service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed.
CVE-2022-44434 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-04-10 N/A 5.5 MEDIUM
In messaging service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed.
CVE-2022-44424 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-04-10 N/A 5.5 MEDIUM
In music service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed.
CVE-2022-44423 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-04-10 N/A 5.5 MEDIUM
In music service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed.
CVE-2022-44422 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-04-10 N/A 5.5 MEDIUM
In music service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed.
CVE-2022-39104 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-04-10 N/A 5.5 MEDIUM
In contacts service, there is a missing permission check. This could lead to local denial of service in Contacts service with no additional execution privileges needed.
CVE-2022-39088 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-04-10 N/A 6.7 MEDIUM
In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed.
CVE-2022-39087 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-04-10 N/A 6.7 MEDIUM
In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed.
CVE-2022-39086 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-04-10 N/A 6.7 MEDIUM
In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed.
CVE-2022-39085 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-04-10 N/A 6.7 MEDIUM
In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed.
CVE-2023-41848 1 Majeedraza 1 Carousel Slider 2025-04-10 N/A 5.3 MEDIUM
Missing Authorization vulnerability in Majeed Raza Carousel Slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Carousel Slider: from n/a through 2.2.2.
CVE-2025-32624 2025-04-09 N/A 7.1 HIGH
Missing Authorization vulnerability in czater Czater.pl – live chat i telefon allows Cross Site Request Forgery. This issue affects Czater.pl – live chat i telefon: from n/a through 1.0.5.
CVE-2025-31377 2025-04-09 N/A 7.5 HIGH
Missing Authorization vulnerability in Asaquzzaman mishu Woo Product Feed For Marketing Channels allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Woo Product Feed For Marketing Channels: from n/a through 1.9.0.
CVE-2025-31012 2025-04-09 N/A 5.3 MEDIUM
Missing Authorization vulnerability in Phil Age Gate allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Age Gate: from n/a through 3.5.4.
CVE-2025-31004 2025-04-09 N/A 4.3 MEDIUM
Missing Authorization vulnerability in Croover.inc Rich Table of Contents allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Rich Table of Contents: from n/a through 1.4.0.
CVE-2025-31042 2025-04-09 N/A 5.3 MEDIUM
Missing Authorization vulnerability in rtakao Sandwich Adsense allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Sandwich Adsense: from n/a through 4.0.2.
CVE-2025-32684 2025-04-09 N/A 5.0 MEDIUM
Missing Authorization vulnerability in RomanCode MapSVG Lite allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects MapSVG Lite: from n/a through 8.5.32.
CVE-2022-4102 1 Royal-elementor-addons 1 Royal Elementor Addons 2025-04-09 N/A 3.1 LOW
The Royal Elementor Addons WordPress plugin before 1.3.56 does not have authorization and CSRF checks when deleting a template and does not ensure that the post to be deleted is a template. This could allow any authenticated users, such as subscribers, to delete arbitrary posts assuming they know the related slug.