CVE Vulnerability

CWE-284

CVE-2022-0824

by

Improper Access Control to Remote Code Execution in GitHub repository webmin/webmin prior to 1.990.

CVE-2022-0541

by

The flo-launch WordPress plugin before 2.4.1 injects code into wp-config.php when creating a cloned site, allowing any attacker to initiate a new site install by setting the flo_custom_table_prefix cookie to an arbitrary value.

CVE-2022-0580

by

Improper Access Control in Packagist librenms/librenms prior to 22.2.0.

CVE-2022-0405

by

Improper Access Control in GitHub repository janeczku/calibre-web prior to 0.6.16.

CVE-2022-0273

by

Improper Access Control in Pypi calibreweb prior to 0.6.16.

CVE-2022-0170

by

peertube is vulnerable to Improper Access Control