Vulnerabilities (CVE)

Filtered by CWE-862
Total 11535 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-34691 1 Sap 1 S\/4 Hana 2026-06-17 N/A 6.5 MEDIUM
Manage Incoming Payment Files (F1680) of SAP S/4HANA does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. As a result, it has high impact on integrity and no impact on the confidentiality and availability of the system.
CVE-2024-34690 1 Sap 1 Student Life Cycle Management 2026-06-17 N/A 5.4 MEDIUM
SAP Student Life Cycle Management (SLcM) fails to conduct proper authorization checks for authenticated users, leading to the potential escalation of privileges. On successful exploitation it could allow an attacker to access and edit non-sensitive report variants that are typically restricted, causing minimal impact on the confidentiality and integrity of the application.
CVE-2024-34444 1 Themepunch 1 Slider Revolution 2026-06-17 N/A 7.1 HIGH
Missing Authorization vulnerability in ThemePunch OHG Slider Revolution.This issue affects Slider Revolution: from n/a before 6.7.0.
CVE-2024-34442 2026-06-17 N/A 5.3 MEDIUM
Missing Authorization vulnerability in weDevs weDocs.This issue affects weDocs: from n/a through 2.1.4.
CVE-2024-34438 2026-06-17 N/A 5.3 MEDIUM
Missing Authorization vulnerability in Anssi Laitila Shared Files shared-files.This issue affects Shared Files: from n/a through <= 1.7.19.
CVE-2024-34435 1 Coderevolution 1 Aiomatic 2026-06-17 N/A 4.3 MEDIUM
Missing Authorization vulnerability in CodeRevolution Aiomatic.This issue affects Aiomatic: from n/a through 1.9.3.
CVE-2024-34389 1 Afthemes 1 Wp Post Author 2026-06-17 N/A 4.3 MEDIUM
Missing Authorization vulnerability in AF themes WP Post Author.This issue affects WP Post Author: from n/a through 3.6.4.
CVE-2024-34387 1 Afthemes 1 Wp Post Author 2026-06-17 N/A 4.3 MEDIUM
Missing Authorization vulnerability in AF themes WP Post Author.This issue affects WP Post Author: from n/a through 3.6.4.
CVE-2024-34378 2026-06-17 N/A 8.6 HIGH
Missing Authorization vulnerability in LeadConnector.This issue affects LeadConnector: from n/a through 1.7.
CVE-2024-34377 2026-06-17 N/A 4.3 MEDIUM
Missing Authorization vulnerability in A WP Life Video Gallery – Api Gallery, YouTube and Vimeo, Link Gallery.This issue affects Video Gallery – Api Gallery, YouTube and Vimeo, Link Gallery: from n/a through 1.5.3.
CVE-2024-34372 1 Addonmaster 1 Post Grid Master 2026-06-17 N/A 5.3 MEDIUM
Missing Authorization vulnerability in AddonMaster Post Grid Master.This issue affects Post Grid Master: from n/a through 3.4.7.
CVE-2024-34371 2026-06-17 N/A 4.3 MEDIUM
Missing Authorization vulnerability in Hamid Alinia Login with phone number login-with-phone-number.This issue affects Login with phone number: from n/a through <= 1.7.18.
CVE-2024-34146 1 Jenkins 1 Git Server 2026-06-17 N/A 6.5 MEDIUM
Jenkins Git server Plugin 114.v068a_c7cc2574 and earlier does not perform a permission check for read access to a Git repository over SSH, allowing attackers with a previously configured SSH public key but lacking Overall/Read permission to access these repositories.
CVE-2024-33956 2026-06-17 N/A 4.3 MEDIUM
Missing Authorization vulnerability in ThemeLocation Custom WooCommerce Checkout Fields Editor.This issue affects Custom WooCommerce Checkout Fields Editor: from n/a through 1.3.0.
CVE-2024-33944 2026-06-17 N/A 6.5 MEDIUM
Missing Authorization vulnerability in Kestrel WooCommerce AWeber Newsletter Subscription.This issue affects WooCommerce AWeber Newsletter Subscription: from n/a through 4.0.2.
CVE-2024-33942 2026-06-17 N/A 4.3 MEDIUM
Missing Authorization vulnerability in Eric Alli Google Typography.This issue affects Google Typography: from n/a through 1.1.2.
CVE-2024-33941 2026-06-17 N/A 5.3 MEDIUM
Missing Authorization vulnerability in Avirtum iPanorama 360 WordPress Virtual Tour Builder.This issue affects iPanorama 360 WordPress Virtual Tour Builder: from n/a through 1.8.1.
CVE-2024-33938 2026-06-17 N/A 6.5 MEDIUM
Missing Authorization vulnerability in codename065 Sliding Widgets allows Cross-Site Scripting (XSS).This issue affects Sliding Widgets: from n/a through 1.5.0.
CVE-2024-33937 2026-06-17 N/A 4.3 MEDIUM
Missing Authorization vulnerability in Nico Martin Progressive WordPress (PWA).This issue affects Progressive WordPress (PWA): from n/a through 2.1.13.
CVE-2024-33931 2026-06-17 N/A 6.5 MEDIUM
Missing Authorization vulnerability in ilGhera JW Player for WordPress.This issue affects JW Player for WordPress: from n/a through 2.3.3.