The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
2,832 vulnerabilities with CWE-269
CVE-2023-40106
HIGH
Android - Local Privilege Escalation via Background Activity Launch Bypass
CVSS 7.8
CVE-2023-45581
HIGH
FortiClientEMS 7.2.0-7.2.2 and < 7.0.10 - Authenticated Privilege Escalation via HTTP Requests
CVSS 8.8
CVE-2023-25535
HIGH
Dell SupportAssist for Home PCs < 3.13.2.19 - Local Privilege Escalation via Installer Executable
CVSS 7.2
CVE-2023-52431
HIGH
Plack::Middleware::XSRFBlock < 0.0.19 - CSRF Protection Bypass via Empty Form Value and Cookie
CVSS 8.8
CVE-2023-47132
CRITICAL
n-able n-central < 2023.7 - Privilege Escalation via API Calls
CVSS 9.8
CVE-2023-32451
HIGH
Dell Display Manager <2.1.1.17 - Code Injection
CVSS 7.3
CVE-2023-28049
MEDIUM
Dell Command | Monitor < 10.9.1 - Authenticated Arbitrary Folder Deletion
CVSS 4.7
CVE-2023-31005
MEDIUM
IBM Security Verify Access - Privilege Escalation
CVSS 6.2
CVE-2023-36496
HIGH
Delegated Admin Privilege - Privilege Escalation
CVSS 7.7
CVE-2023-43317
HIGH
Coign CRM Portal <6.06 - Privilege Escalation
CVSS 8.8
CVE-2023-52337
HIGH
Trend Micro Deep Security 20.0 - Privilege Escalation via Improper Access Control
CVSS 7.8
CVE-2023-52093
HIGH
Trend Micro Apex One - Privilege Escalation
CVSS 7.8
CVE-2023-47201
HIGH
Trend Micro Apex One < 14.0.12737 - Local Privilege Escalation via Plug-in Manager Origin Validation
CVSS 7.8
CVE-2023-52105
HIGH
Huawei HarmonyOS - Privilege Escalation
CVSS 7.5
CVE-2023-52116
HIGH
Multi-Screen Interaction Module - Info Disclosure
CVSS 7.5
CVE-2023-52114
HIGH
Huawei EMUI and HarmonyOS - Data Confidentiality Vulnerability in ScreenReader Module
CVSS 7.5
CVE-2023-52107
HIGH
Huawei EMUI and HarmonyOS - Improper Privilege Management in WMS Module
CVSS 7.5
CVE-2023-6740
HIGH
Checkmk < 2.2.0p18, 2.1.0p38, 2.0.0p39 - Privilege Escalation via jar_signature Agent Plugin
CVSS 8.8
CVE-2023-6735
HIGH
Checkmk < 2.2.0p18, 2.1.0p38, 2.0.0p39 - Privilege Escalation via mk_tsm Agent Plugin
CVSS 8.8
CVE-2023-44250
HIGH
FortiProxy 7.4.0-7.4.1 and 7.2.5 - Authenticated Privilege Escalation via HTTP/HTTPS Requests
CVSS 8.8
CVE-2023-47145
HIGH
IBM Db2 10.5-11.5 - Privilege Escalation via MSI Repair Functionality
CVSS 8.4
CVE-2023-41784
MEDIUM
ZTE Red Magic 8 Pro Firmware - Improper Privilege Management
CVSS 6.6
CVE-2023-30617
MEDIUM
Kruise <1.3.1-1.5.2 - Privilege Escalation
CVSS 6.5
CVE-2023-50921
CRITICAL
GL.iNet Firmware - Unauthenticated Privilege Escalation via add_user Interface
CVSS 9.8
CVE-2023-41776
MEDIUM
ZTE ZXCLOUD iRAI < 7.23.32 - Local Privilege Escalation via Fake Process Creation
CVSS 6.7
Details
Vulnerabilities
2,832
Exploit Likelihood
Medium