The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
2,830 vulnerabilities with CWE-269
CVE-2024-21059
HIGH
Oracle Solaris 11 - Privilege Escalation in Utility Component
CVSS 7.8
CVE-2024-21034
MEDIUM
Oracle Complex Maintenance, Repair, and Overhaul 12.2.3-12.2.13 - Unauthenticated Improper Privilege Management in LOV
CVSS 6.1
CVE-2024-32003
HIGH
wn-dusk-plugin < 2.1.0 - Unauthenticated Privilege Escalation via Dusk Login Route
CVSS 8.8
CVE-2024-3388
MEDIUM
Palo Alto Networks PAN-OS - Privilege Escalation
CVSS 4.1
CVE-2024-29052
HIGH
Windows 10/11, Server 2022 Elevation of Privilege in Storage
CVSS 7.8
CVE-2024-28905
HIGH
Windows Server 2022 23H2 < 10.0.25398.830 - Elevation of Privilege in Brokering File System
CVSS 7.8
CVE-2024-28904
HIGH
Windows Server 2022 23H2 < 10.0.25398.830 - Elevation of Privilege in Brokering File System
CVSS 7.8
CVE-2024-21324
HIGH
Microsoft Defender for IoT < 24.1.3 - Elevation of Privilege
CVSS 7.2
CVE-2024-0082
HIGH
NVIDIA ChatRTX < 0.2.1 - Privilege Escalation via Open File Request
CVSS 8.2
CVE-2024-29741
HIGH
pblS2mpuResume - Privilege Escalation
CVSS 7.8
CVE-2024-31498
HIGH
Yubico ykman-gui <1.2.6 - Privilege Escalation
CVSS 8.8
CVE-2024-20282
MEDIUM
Cisco Nexus Dashboard - Privilege Escalation
CVSS 6.0
CVE-2024-0172
HIGH
Dell PowerEdge Server BIOS < 1.5.6 - Unauthenticated Privilege Escalation
CVSS 7.9
CVE-2024-3137
HIGH
uvdesk/community-skeleton - Privilege Escalation
CVSS 7.1
CVE-2024-29667
CRITICAL
Tongtianxing Technology Co., Ltd CMSV6 <7.31.0.3 - SQL Injection
CVSS 9.8
CVE-2024-23537
HIGH
Apache Fineract < 1.9.0 - Improper Privilege Management
CVSS 8.4
CVE-2024-25961
MEDIUM
Dell PowerScale OneFS 8.2.2.x-9.7.0.x - Privilege Escalation
CVSS 6.0
CVE-2024-28247
HIGH
Pi-hole < 5.18 - Authenticated Arbitrary File Read via Adlist Local File Update
CVSS 7.6
CVE-2024-1973
HIGH
Content Manager - Privilege Escalation
CVSS 8.5
CVE-2024-24892
HIGH
openEuler migration-tools <1.0.1 - Command Injection
CVSS 8.1
CVE-2024-26247
MEDIUM
Microsoft Edge < 123.0.2420.53 - Security Feature Bypass
CVSS 4.7
CVE-2024-2228
HIGH
Lifecycle Manager - Privilege Escalation
CVSS 7.1
CVE-2024-1908
MEDIUM
GitHub Enterprise Server <3.12 - Privilege Escalation
CVSS 6.3
CVE-2024-2390
HIGH
Nessus Plugin - Privilege Escalation
CVSS 7.8
CVE-2024-28851
MEDIUM
snowflake_hive_metastore_connector < 2024-02-09 - Privilege Escalation via Helper Script
CVSS 4.0
Details
Vulnerabilities
2,830
Exploit Likelihood
Medium