Vulnerabilities (CVE)

Filtered by CWE-862
Total 4842 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-44009 1 Stackstorm 1 Stackstorm 2025-04-24 N/A 7.5 HIGH
Improper access control in Key-Value RBAC in StackStorm version 3.7.0 didn't check the permissions in Jinja filters, allowing attackers to access K/V pairs of other users, potentially leading to the exposure of sensitive Information.
CVE-2022-39102 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-04-24 N/A 7.8 HIGH
In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.
CVE-2022-39101 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-04-24 N/A 7.8 HIGH
In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.
CVE-2022-39100 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-04-24 N/A 7.8 HIGH
In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.
CVE-2022-42766 2 Google, Unisoc 14 Android, S8011, Sc7731e and 11 more 2025-04-23 N/A 5.5 MEDIUM
In wlan driver, there is a possible missing permission check, This could lead to local information disclosure.
CVE-2024-3893 1 Radiustheme 1 Classified Listing 2025-04-23 N/A 5.3 MEDIUM
The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the rtcl_fb_gallery_image_delete AJAX action in all versions up to, and including, 3.0.10.3. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete arbitrary attachements.
CVE-2022-42782 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-04-23 N/A 5.5 MEDIUM
In wlan driver, there is a possible missing permission check, This could lead to local information disclosure.
CVE-2022-42778 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-04-23 N/A 7.8 HIGH
In windows manager service, there is a missing permission check. This could lead to set up windows manager service with no additional execution privileges needed.
CVE-2022-42777 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-04-23 N/A 7.8 HIGH
In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.
CVE-2022-42776 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-04-23 N/A 7.8 HIGH
In UscAIEngine service, there is a missing permission check. This could lead to set up UscAIEngine service with no additional execution privileges needed.
CVE-2025-26853 1 Descor 1 Infocad 2025-04-23 N/A 10.0 CRITICAL
DESCOR INFOCAD 3.5.1 and before and fixed in v.3.5.2.0 has a broken authorization schema.
CVE-2024-33606 1 Microdicom 1 Dicom Viewer 2025-04-23 N/A 8.8 HIGH
An attacker could retrieve sensitive files (medical images) as well as plant new medical images or overwrite existing medical images on a MicroDicom DICOM Viewer system. User interaction is required to exploit this vulnerability.
CVE-2025-25953 2025-04-23 N/A 6.5 MEDIUM
Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 was discovered to contain an Azure JWT access token exposure. This vulnerability allows authenticated attackers to escalate privileges and access sensitive information.
CVE-2022-39099 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-04-23 N/A 7.8 HIGH
In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.
CVE-2022-39098 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-04-23 N/A 7.8 HIGH
In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.
CVE-2022-39097 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-04-23 N/A 7.8 HIGH
In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.
CVE-2022-39096 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-04-23 N/A 7.8 HIGH
In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.
CVE-2022-39095 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-04-23 N/A 7.8 HIGH
In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.
CVE-2022-39094 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-04-23 N/A 7.8 HIGH
In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.
CVE-2022-39093 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-04-23 N/A 7.8 HIGH
In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.