Vulnerabilities (CVE)

Filtered by CWE-863
Total 1963 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-41939 1 Siemens 1 Sinec Nms 2024-08-14 N/A 8.8 HIGH
A vulnerability has been identified in SINEC NMS (All versions < V3.0). The affected application does not properly enforce authorization checks. This could allow an authenticated attacker to bypass the checks and elevate their privileges on the application.
CVE-2024-43131 2024-08-13 N/A 7.5 HIGH
Incorrect Authorization vulnerability in WPWeb Docket (WooCommerce Collections / Wishlist / Watchlist) allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Docket (WooCommerce Collections / Wishlist / Watchlist): from n/a before 1.7.0.
CVE-2024-6782 2024-08-06 N/A 9.8 CRITICAL
Improper access control in Calibre 6.9.0 ~ 7.14.0 allow unauthenticated attackers to achieve remote code execution.