The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
2,830 vulnerabilities with CWE-269
CVE-2024-22922
CRITICAL
Projectworlds Vistor Management System <1.0 - Privilege Escalation
CVSS 9.8
CVE-2024-0751
HIGH
Firefox < 122 and Firefox ESR < 115.7 - Privilege Escalation via Malicious DevTools Extension
CVSS 8.8
CVE-2024-21638
CRITICAL
Azure IPAM < 3.0.0 - Unauthenticated Privilege Escalation via Token Validation Bypass
CVSS 9.1
CVE-2024-21622
MEDIUM
Craft CMS 3.0.0-3.9.5 and 4.0.0-RC1-4.4.15 - Privilege Escalation
CVSS 5.4
CVE-2023-7343
HIGH
Belden Industrial HiVision Arbitrary Code Execution via Malicious Project File
CVSS 7.8
CVE-2023-7342
HIGH
Belden HiSecOS Web Server Privilege Escalation
CVSS 8.8
CVE-2023-53908
HIGH
HiSecOS 04.0.01 - Privilege Escalation
CVSS 8.8
CVE-2023-50450
HIGH
Sensopart Visor Vision Sensors Firmware < 2.10.0.2 - Improper Privilege Management
CVSS 8.4
CVE-2023-32197
MEDIUM
Rancher 2.7.0-2.7.13 and 2.8.0-2.8.4 - Privilege Escalation via RoleTemplate External Setting
CVSS 6.6
CVE-2023-41076
HIGH
macOS < 14.0 - Privilege Escalation
CVSS 7.3
CVE-2023-38614
MEDIUM
iPadOS < 17.0 - Unprotected User Data Exposure via Permissions Issue
CVSS 4.3
CVE-2023-32196
MEDIUM
Rancher 2.7.0-2.7.13 and 2.8.0-2.8.4 - Privilege Escalation via RoleTemplate External Check Bypass
CVSS 6.6
CVE-2023-32194
HIGH
Rancher 2.6.0-2.6.13, 2.7.0-2.7.9, 2.8.0-2.8.1 - Improper Privilege Management in Global Role Assignment
CVSS 7.2
CVE-2023-22576
HIGH
Dell Repository Manager < 3.4.3 - Local Privilege Escalation via Installation Module
CVSS 7.0
CVE-2023-48171
HIGH
OWASP DefectDojo < 1.5.3.1 - Privilege Escalation via User Permissions Component
CVSS 8.8
CVE-2023-52209
HIGH
WPForms <2.1.0 - Privilege Escalation
CVSS 8.0
CVE-2023-50700
HIGH
Deepin dde-file-manager <6.0.54 - Privilege Escalation
CVSS 7.8
CVE-2023-4976
CRITICAL
PureStorage FlashBlade Privilege Escalation via Unintended Authentication
CVE-2023-21114
HIGH
Android - Local Privilege Escalation via Confused Deputy in Wifi Module
CVSS 7.8
CVE-2023-21113
HIGH
Android - Local Privilege Escalation via Confused Deputy
CVSS 7.8
CVE-2023-51776
HIGH
Jungo WinDriver <12.1.0 - Privilege Escalation
CVSS 7.8
CVE-2023-37058
CRITICAL
Jlink AX1800 1.0 - Privilege Escalation via Crafted Command
CVSS 9.8
CVE-2023-47837
HIGH
ARMember < 4.0.10 - Privilege Escalation
CVSS 8.3
CVE-2023-46810
HIGH
Ivanti Secure Access Client for Linux <22.7R1 - Privilege Escalation
CVSS 7.3
CVE-2023-43845
CRITICAL
Aten PE6208 <2.3.228-2.4.232 - Privilege Escalation
CVSS 9.8
Details
Vulnerabilities
2,830
Exploit Likelihood
Medium