The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
2,830 vulnerabilities with CWE-269
CVE-2024-23710
HIGH
Android - Local Privilege Escalation via InstallPackageHelper Logic Error
CVSS 7.8
CVE-2024-0024
HIGH
Android - Improper Privilege Management in UserManagerService
CVSS 7.8
CVE-2024-29210
LOW
Phish Alert Button for Outlook - Privilege Escalation
CVSS 2.8
CVE-2024-29150
HIGH
Alcatel-Lucent ALE NOE deskphones <86x8_NOE-R300.1.40.12.4180 - Pri...
CVSS 8.8
CVE-2024-20021
MEDIUM
Android - Local Privilege Escalation via Physical Memory Remapping
CVSS 6.7
CVE-2024-33398
HIGH
piraeus-operator <= 2.5.0 - Improper Privilege Management via ClusterRole Secrets Access
CVSS 7.5
CVE-2024-34146
MEDIUM
Jenkins Git server Plugin <114.v068a_c7cc2574 - Privilege Escalation
CVSS 6.5
CVE-2024-33393
MEDIUM
spidernet-io spiderpool <0.9.3 - RCE
CVSS 6.2
CVE-2024-23457
HIGH
Zscaler Client Connector <4.2.0.209 - Info Disclosure
CVSS 7.8
CVE-2024-33775
CRITICAL
Nagios XI 2024R1.01 - Privilege Escalation via Autodiscover Dashlet
CVSS 9.8
CVE-2024-33308
CRITICAL
TVS Motor Company Limited TVS Connet <5.0.0 - Privilege Escalation
CVSS 9.1
CVE-2024-33522
MEDIUM
Calico < 3.26.5 - Improper Privilege Management
CVSS 6.7
CVE-2024-27518
HIGH
SUPERAntiSpyware Professional X 10.0.1262-10.0.1264 - Privilege Escalation
CVSS 7.8
CVE-2024-31502
HIGH
Insurance Management System <1.0.0 - Privilege Escalation
CVSS 8.1
CVE-2024-25343
CRITICAL
Tenda N300 F3 - Privilege Escalation
CVSS 9.1
CVE-2024-28241
HIGH
glpi_agent < 1.7.2 - Privilege Escalation via DLL Modification
CVSS 7.3
CVE-2024-32418
CRITICAL
flusity CMS 2.33 - Remote Code Execution via add_addon.php
CVSS 9.8
CVE-2024-4018
HIGH
BeyondTrust U-Series <4.0.3 - Privilege Escalation
CVSS 8.8
CVE-2024-4017
HIGH
BeyondTrust U-Series <4.0.3 - Privilege Escalation
CVSS 8.8
CVE-2024-3470
MEDIUM
GitHub Enterprise Server 3.11.0-3.11.7 - Improper Privilege Management via Deploy Key Ruleset Bypass
CVSS 5.9
CVE-2024-21989
HIGH
ONTAP Select Deploy <9.14.1.x - Privilege Escalation
CVSS 8.1
CVE-2024-21121
MEDIUM
Oracle VM VirtualBox < 7.0.16 - Unauthorized Data Access via Core Component
CVSS 6.5
CVE-2024-21118
MEDIUM
Oracle Outside In Technology 8.5.6 and 8.5.7 - Improper Privilege Management in Outside In Core
CVSS 5.3
CVE-2024-21111
HIGH
Oracle VM VirtualBox < 7.0.16 - Privilege Escalation via Core Component
CVSS 7.8
CVE-2024-21101
LOW
MySQL Cluster <= 7.5.33, <= 7.6.29, <= 8.0.36, 8.3.0 - Unauthorized Data Access via Network Protocols
CVSS 2.2
Details
Vulnerabilities
2,830
Exploit Likelihood
Medium