The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
2,833 vulnerabilities with CWE-269
CVE-2023-30988
HIGH
IBM i 7.2-7.5 - Local Privilege Escalation via Facsimile Support
CVSS 8.4
CVE-2023-3514
HIGH
Razer RazerCentral <=7.11.0.558 - Privilege Escalation
CVSS 7.8
CVE-2023-3513
HIGH
Razer RazerCentral <7.11.0.558 - Privilege Escalation
CVSS 7.8
CVE-2023-24491
HIGH
Citrix Secure Access - Privilege Escalation
CVSS 7.8
CVE-2023-30765
HIGH
InfraSuite Device Master < 1.0.7 - Privilege Escalation via Improper Access Controls
CVSS 8.8
CVE-2023-29256
MEDIUM
IBM Db2 10.5, 11.1, 11.5 - Information Disclosure via Federation Feature Privilege Mismanagement
CVSS 5.3
CVE-2023-27558
HIGH
IBM Db2 10.5, 11.1, 11.5 - Privilege Escalation via Unquoted Service Path
CVSS 8.4
CVE-2023-30642
MEDIUM
Samsung Android Galaxy Themes Service - Improper Privilege Management
CVSS 6.2
CVE-2023-25521
HIGH
NVIDIA DGX A100/A800 Firmware < 1.21 - Privilege Escalation via SBIOS Input Parameter Validation
CVSS 7.5
CVE-2023-21513
MEDIUM
CC Mode <SMR Jun-2023 Release 1 - Privilege Escalation
CVSS 6.1
CVE-2023-21512
LOW
Knox ID <SMR Jun-2023 Release 1 - Info Disclosure
CVSS 2.4
CVE-2023-20136
MEDIUM
Cisco Secure Workload - Privilege Escalation
CVSS 4.3
CVE-2023-34148
HIGH
Trend Micro Apex One/Apex One as a Service - Privilege Escalation
CVSS 7.8
CVE-2023-34147
HIGH
Trend Micro Apex One/Apex One as a Service - Privilege Escalation
CVSS 7.8
CVE-2023-34146
HIGH
Trend Micro Apex One/Apex One as a Service - Privilege Escalation
CVSS 7.8
CVE-2023-34465
CRITICAL
XWiki 11.8-rc-1-14.4.7 - Authenticated Privilege Escalation via Mail.MailConfig Page
CVSS 9.9
CVE-2023-31469
HIGH
Apache StreamPipes <0.92.0 - Privilege Escalation
CVSS 8.8
CVE-2023-25188
MEDIUM
NOKIA Airscale ASIKA Single RAN < 21B - Unauthenticated Privilege Escalation via AaShell Diagnostic Tool
CVSS 5.1
CVE-2023-25185
LOW
NOKIA Airscale ASIKA Single RAN < 21B - Improper Privilege Management
CVSS 3.8
CVE-2023-2847
HIGH
ESET Cyber Security/Endpoint Antivirus/Server Security <8.1.12.0 - Local Privilege Escalation
CVSS 7.8
CVE-2023-26062
HIGH
Nokia Web Element Manager <22 R1 - Privilege Escalation
CVSS 7.0
CVE-2023-2833
HIGH
ReviewX plugin <1.6.13 - Privilege Escalation
CVSS 8.8
CVE-2023-3027
HIGH
Grc-policy-propagator - Privilege Escalation
CVSS 7.8
CVE-2023-32713
HIGH
Splunk App for Stream < 8.1.1 - Privilege Escalation via streamfwd Process
CVSS 7.8
CVE-2023-33966
HIGH
Deno 1.34.0 - Improper Privilege Management in Node HTTP/HTTPS Modules
CVSS 8.6
Details
Vulnerabilities
2,833
Exploit Likelihood
Medium