The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
2,830 vulnerabilities with CWE-269
CVE-2024-1764
HIGH
Devolutions Server < 2023.3.16.0 - Improper Privilege Management in JIT Elevation Module
CVSS 7.6
CVE-2024-25847
CRITICAL
MyPrestaModules Product Catalog Import < 6.5.0 - SQL Injection & Privilege Escalation
CVSS 9.8
CVE-2024-25842
HIGH
Presta World Account Manager < 9.0.0 - Privilege Escalation & Info Disclosure
CVSS 7.5
CVE-2024-0819
HIGH
TeamViewer <15.51.5 - Privilege Escalation
CVSS 7.3
CVE-2024-0197
HIGH
Thales SafeNet Sentinel HASP LDK < 9.16 - Privilege Escalation via Installer
CVSS 7.8
CVE-2024-24402
CRITICAL
Nagios XI 2024R1.01 - Privilege Escalation via npcd Script Injection
CVSS 9.8
CVE-2024-0439
HIGH
AnythingLLM < 1.0.0 - Improper Privilege Management via HTTP Request
CVSS 8.8
CVE-2024-22235
MEDIUM
VMware Aria Operations - Privilege Escalation
CVSS 6.7
CVE-2024-21892
HIGH
Node.js 18.0.0-18.19.1 - Privilege Escalation via Incorrect CAP_NET_BIND_SERVICE Exception
CVSS 7.8
CVE-2024-0622
HIGH
OpenText Operations Agent <12.25 - Privilege Escalation
CVSS 8.8
CVE-2024-0353
HIGH
ESET Endpoint Antivirus < 8.1.2062.0 - Local Privilege Escalation via File Deletion
CVSS 7.8
CVE-2024-25106
CRITICAL
OpenObserve < 0.8.0 - Authenticated Unauthorized User Removal via /api/{org_id}/users/{email_id} Endpoint
CVSS 9.1
CVE-2024-24830
CRITICAL
OpenObserve < 0.8.0 - Authenticated Privilege Escalation via User Creation Endpoint
CVSS 9.9
CVE-2024-23764
MEDIUM
WithSecure Client Security 15 and later - Local Privilege Escalation
CVSS 6.7
CVE-2024-22795
HIGH
Forescout SecureConnector <11.3.06.0063 - Privilege Escalation
CVSS 7.0
CVE-2024-22239
MEDIUM
Aria Operations for Networks - Privilege Escalation
CVSS 5.3
CVE-2024-22237
HIGH
Aria Operations for Networks - Privilege Escalation
CVSS 7.8
CVE-2024-24747
HIGH
MinIO < 0.0.0-20240131185645-0ae4915a9391 - Improper Privilege Management via Access Key Permission Inheritance
CVSS 8.8
CVE-2024-21888
HIGH
Ivanti Connect Secure 9.x, 22.x and Policy Secure 9.x, 22.x - Privilege Escalation
CVSS 8.8
CVE-2024-0833
HIGH
Telerik Test Studio <v2023.3.1330 - Privilege Escalation
CVSS 7.8
CVE-2024-0832
HIGH
Telerik Reporting <2024 R1 - Privilege Escalation
CVSS 7.8
CVE-2024-0219
HIGH
Telerik JustDecompile < 2019.1.118.0 - Privilege Escalation via Installer Manipulation
CVSS 7.8
CVE-2024-0674
MEDIUM
Lamassu Bitcoin ATM Douro 7.1 - Privilege Escalation
CVSS 6.3
CVE-2024-21985
HIGH
ONTAP 9 <9.9.1P18-9.13.1P4 - Privilege Escalation
CVSS 7.6
CVE-2024-23620
HIGH
IBM Merge Healthcare eFilm Workstation < 4.2 - Authenticated Privilege Escalation
CVSS 8.8
Details
Vulnerabilities
2,830
Exploit Likelihood
Medium