Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by CWE-862
Total 1368 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-42777 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2023-01-10 N/A 7.8 HIGH
In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.
CVE-2022-44434 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2023-01-10 N/A 5.5 MEDIUM
In messaging service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed.
CVE-2022-44439 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2023-01-10 N/A 5.5 MEDIUM
In messaging service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed.
CVE-2022-44435 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2023-01-10 N/A 5.5 MEDIUM
In messaging service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed.
CVE-2022-44436 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2023-01-10 N/A 5.5 MEDIUM
In messaging service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed.
CVE-2022-44437 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2023-01-10 N/A 5.5 MEDIUM
In messaging service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed.
CVE-2022-44438 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2023-01-10 N/A 5.5 MEDIUM
In messaging service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed.
CVE-2022-38683 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2023-01-10 N/A 5.5 MEDIUM
In contacts service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed.
CVE-2022-38682 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2023-01-10 N/A 5.5 MEDIUM
In contacts service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed.
CVE-2022-38684 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2023-01-10 N/A 5.5 MEDIUM
In contacts service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed.
CVE-2022-38678 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2023-01-10 N/A 5.5 MEDIUM
In contacts service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed.
CVE-2022-44423 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2023-01-10 N/A 5.5 MEDIUM
In music service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed.
CVE-2022-44424 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2023-01-10 N/A 5.5 MEDIUM
In music service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed.
CVE-2022-44422 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2023-01-10 N/A 5.5 MEDIUM
In music service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed.
CVE-2022-39104 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2023-01-10 N/A 5.5 MEDIUM
In contacts service, there is a missing permission check. This could lead to local denial of service in Contacts service with no additional execution privileges needed.
CVE-2021-30874 1 Apple 3 Ipados, Iphone Os, Macos 2023-01-09 5.0 MEDIUM 7.5 HIGH
An authorization issue was addressed with improved state management. This issue is fixed in iOS 15 and iPadOS 15. A VPN configuration may be installed by an app without user permission.
CVE-2022-2841 1 Crowdstrike 1 Falcon 2022-12-29 N/A 2.7 LOW
A vulnerability was found in CrowdStrike Falcon 6.31.14505.0/6.42.15610/6.44.15806. It has been classified as problematic. Affected is an unknown function of the component Uninstallation Handler. The manipulation leads to missing authorization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 6.40.15409, 6.42.15611 and 6.44.15807 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-206880.
CVE-2022-4124 1 Popup Manager Project 1 Popup Manager 2022-12-22 N/A 4.3 MEDIUM
The Popup Manager WordPress plugin through 1.6.6 does not have authorisation and CSRF checks when deleting popups, which could allow unauthenticated users to delete them
CVE-2022-3961 1 Wpwax 1 Directorist 2022-12-22 N/A 6.5 MEDIUM
The Directorist WordPress plugin before 7.4.4 does not prevent users with low privileges (like subscribers) from accessing sensitive system information.
CVE-2022-4024 1 Genetechsolutions 1 Pie Register 2022-12-22 N/A 6.5 MEDIUM
The Registration Forms WordPress plugin before 3.8.1.3 does not have authorisation and CSRF when deleting users via an init action handler, allowing unauthenticated attackers to delete arbitrary users (along with their posts)