Vulnerabilities (CVE)

Filtered by CWE-862
Total 4886 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-34819 1 Moreconvert 1 Woocommerce Wishlist 2024-11-21 N/A 5.3 MEDIUM
Missing Authorization vulnerability in MoreConvert MC Woocommerce Wishlist.This issue affects MC Woocommerce Wishlist: from n/a through 1.7.2.
CVE-2024-34815 2024-11-21 N/A 5.4 MEDIUM
Missing Authorization vulnerability in Codection Import and export users and customers.This issue affects Import and export users and customers: from n/a through 1.26.5.
CVE-2024-34813 2024-11-21 N/A 5.3 MEDIUM
Missing Authorization vulnerability in MoreConvert MC Woocommerce Wishlist.This issue affects MC Woocommerce Wishlist: from n/a through 1.7.8.
CVE-2024-34804 2024-11-21 N/A 5.4 MEDIUM
Missing Authorization vulnerability in Tagembed.This issue affects Tagembed: from n/a through 5.8.
CVE-2024-34803 2024-11-21 N/A 4.3 MEDIUM
Missing Authorization vulnerability in Fastly.This issue affects Fastly: from n/a through 1.2.25.
CVE-2024-34802 1 Wpfoxly 1 Adfoxly 2024-11-21 N/A 5.3 MEDIUM
Missing Authorization vulnerability in AdFoxly AdFoxly – Ad Manager, AdSense Ads & Ads.Txt.This issue affects AdFoxly – Ad Manager, AdSense Ads & Ads.Txt: from n/a through 1.8.5.
CVE-2024-34768 2024-11-21 N/A 5.3 MEDIUM
Missing Authorization vulnerability in Fastly.This issue affects Fastly: from n/a through 1.2.25.
CVE-2024-34763 2024-11-21 N/A 5.3 MEDIUM
Missing Authorization vulnerability in Tobias Conrad Builder for WooCommerce reviews shortcodes – ReviewShort.This issue affects Builder for WooCommerce reviews shortcodes – ReviewShort: from n/a through 1.01.5.
CVE-2024-34758 2024-11-21 N/A 5.3 MEDIUM
Missing Authorization vulnerability in Wpmet WP Fundraising Donation and Crowdfunding Platform.This issue affects WP Fundraising Donation and Crowdfunding Platform: from n/a through 1.6.4.
CVE-2024-34753 1 Softlabbd 1 Radio Player 2024-11-21 N/A 5.3 MEDIUM
Missing Authorization vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73.
CVE-2024-34691 1 Sap 1 S\/4 Hana 2024-11-21 N/A 6.5 MEDIUM
Manage Incoming Payment Files (F1680) of SAP S/4HANA does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. As a result, it has high impact on integrity and no impact on the confidentiality and availability of the system.
CVE-2024-34690 1 Sap 1 Student Life Cycle Management 2024-11-21 N/A 5.4 MEDIUM
SAP Student Life Cycle Management (SLcM) fails to conduct proper authorization checks for authenticated users, leading to the potential escalation of privileges. On successful exploitation it could allow an attacker to access and edit non-sensitive report variants that are typically restricted, causing minimal impact on the confidentiality and integrity of the application.
CVE-2024-34444 1 Themepunch 1 Slider Revolution 2024-11-21 N/A 7.1 HIGH
Missing Authorization vulnerability in ThemePunch OHG Slider Revolution.This issue affects Slider Revolution: from n/a before 6.7.0.
CVE-2024-34442 2024-11-21 N/A 5.3 MEDIUM
Missing Authorization vulnerability in weDevs weDocs.This issue affects weDocs: from n/a through 2.1.4.
CVE-2024-34378 2024-11-21 N/A 8.6 HIGH
Missing Authorization vulnerability in LeadConnector.This issue affects LeadConnector: from n/a through 1.7.
CVE-2024-34377 2024-11-21 N/A 4.3 MEDIUM
Missing Authorization vulnerability in A WP Life Video Gallery – Api Gallery, YouTube and Vimeo, Link Gallery.This issue affects Video Gallery – Api Gallery, YouTube and Vimeo, Link Gallery: from n/a through 1.5.3.
CVE-2024-34371 2024-11-21 N/A 4.3 MEDIUM
Missing Authorization vulnerability in Hamid Alinia – idehweb Login with phone number.This issue affects Login with phone number: from n/a through 1.7.18.
CVE-2024-34146 2024-11-21 N/A 6.5 MEDIUM
Jenkins Git server Plugin 114.v068a_c7cc2574 and earlier does not perform a permission check for read access to a Git repository over SSH, allowing attackers with a previously configured SSH public key but lacking Overall/Read permission to access these repositories.
CVE-2024-33956 2024-11-21 N/A 4.3 MEDIUM
Missing Authorization vulnerability in ThemeLocation Custom WooCommerce Checkout Fields Editor.This issue affects Custom WooCommerce Checkout Fields Editor: from n/a through 1.3.0.
CVE-2024-33944 2024-11-21 N/A 6.5 MEDIUM
Missing Authorization vulnerability in Kestrel WooCommerce AWeber Newsletter Subscription.This issue affects WooCommerce AWeber Newsletter Subscription: from n/a through 4.0.2.