The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
2,834 vulnerabilities with CWE-269
CVE-2022-3088
HIGH
UC-8100A-ME-T <v3.5 - Path Traversal
CVSS 7.8
CVE-2022-41923
CRITICAL
Grails Spring Security Core Privilege Escalation via Endpoint Authorization Bypass
CVSS 9.1
CVE-2022-0222
HIGH
Modicon M340 - Privilege Escalation
CVSS 7.5
CVE-2022-42459
HIGH
Image Hover Effects Ultimate <= 9.7.1 - Authenticated WordPress Options Change
CVSS 7.2
CVE-2022-43308
HIGH
INTELBRAS SG 2404 MR - Privilege Escalation
CVSS 7.8
CVE-2022-43138
CRITICAL
Dolibarr Open Source ERP & CRM <14.0.1 - Privilege Escalation
CVSS 9.8
CVE-2022-45183
HIGH
PowerShell Universal 2.0.0-2.12.5 - Privilege Escalation via App Token ID Retrieval
CVSS 8.8
CVE-2022-41339
HIGH
Zoho ManageEngine Mobile Device Manager Plus <10.1.2207.5 - Privile...
CVSS 7.8
CVE-2022-39395
CRITICAL
go-vela/server < 0.16.0, go-vela/worker < 0.16.0, go-vela/ui < 0.17.0 - Privilege Escalation
CVSS 9.6
CVE-2022-37015
CRITICAL
Symantec Endpoint Detection and Response < 4.7.0 - Privilege Escalation
CVSS 9.8
CVE-2022-44733
HIGH
Acronis Cyber Protect Home Office < 39900 - Local Privilege Escalation via Insecure Folder Permissions
CVSS 7.8
CVE-2022-44732
HIGH
Acronis Cyber Protect Home Office < 39900 - Local Privilege Escalation via Insecure Folder Permissions
CVSS 7.8
CVE-2022-42796
HIGH
iPadOS < 15.7 - Privilege Escalation
CVSS 7.8
CVE-2022-32907
HIGH
iPhone OS < 16.0 - Arbitrary Code Execution with Kernel Privileges
CVSS 7.8
CVE-2022-32794
HIGH
macOS 10.15-10.15.6 and 11.0-11.6.5 - Privilege Escalation via Logic Issue
CVSS 7.8
CVE-2022-3369
HIGH
Bitdefender Engines <7.92659 - Privilege Escalation
CVSS 8.6
CVE-2022-3419
MEDIUM
Automatic User Roles Switcher < 1.1.2 - Authenticated Privilege Escalation via Missing Authorization
CVSS 6.5
CVE-2022-41974
HIGH
multipath-tools 0.7.0-0.9.1 - Local Privilege Escalation via Repeated Keyword
CVSS 7.8
CVE-2022-39286
HIGH
Jupyter Core <4.11.2 - Code Injection
CVSS 8.8
CVE-2022-43749
MEDIUM
Synology Presto File Server <2.1.2-1601 - Privilege Escalation
CVSS 4.3
CVE-2022-28169
HIGH
Brocade Fabric OS 8.0.0-8.2.3c - Privilege Escalation via Operator Session ID Spoofing
CVSS 8.8
CVE-2022-34438
MEDIUM
Dell PowerScale OneFS 9.1.0.0-9.1.0.21 - Authenticated Privilege Escalation
CVSS 6.7
CVE-2022-41835
HIGH
F5OS-A/F5OS-C <1.1.0/<1.5.0 - Privilege Escalation
CVSS 7.3
CVE-2022-39422
HIGH
Oracle VM VirtualBox < 6.1.38 - Authenticated Privilege Escalation
CVSS 7.5
CVE-2022-22239
HIGH
Juniper Networks Junos OS Evolved - Privilege Escalation
CVSS 8.2
Details
Vulnerabilities
2,834
Exploit Likelihood
Medium