The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
2,835 vulnerabilities with CWE-269
CVE-2022-30526
HIGH
Zyxel Firewall Firmware - Privilege Escalation via CLI Command
CVSS 7.8
CVE-2022-26118
MEDIUM
FortiManager & FortiAnalyzer <7.0.4 - Privilege Escalation
CVSS 6.7
CVE-2022-34754
MEDIUM
Acti9 PowerTag Link C (A9XELC10-A) < 1.7.5 & (A9XELC10-B) < 2.12.0 - Unauthenticated Privilege Escalation
CVSS 6.8
CVE-2022-33710
HIGH
Galaxy Store <4.5.41.8 - Privilege Escalation
CVSS 7.8
CVE-2022-33709
HIGH
Galaxy Store <4.5.41.8 - Privilege Escalation
CVSS 7.8
CVE-2022-33708
HIGH
Galaxy Store <4.5.41.8 - Privilege Escalation
CVSS 7.8
CVE-2022-23720
HIGH
PingID Windows Login <2.8 - Privilege Escalation
CVSS 7.5
CVE-2022-31039
MEDIUM
Greenlight <2.12.6 - Info Disclosure
CVSS 4.3
CVE-2022-22390
HIGH
IBM Db2 9.7, 10.1, 10.5, 11.1, 11.5 - Information Disclosure via Table Function
CVSS 7.5
CVE-2022-2104
CRITICAL
SEPCOs Control and Protection Relay Firmware 1.23.0-1.23.21 - Improper Privilege Management via Sudo Configuration
CVSS 9.9
CVE-2022-1517
CRITICAL
Illumina Local Run Manager 1.3 to 3.1 - Unauthenticated Remote Code Execution
CVSS 10.0
CVE-2022-32536
HIGH
Bosch PRA-ES8P2S Firmware < 1.01.05 - Improper Privilege Management
CVSS 8.8
CVE-2022-32535
MEDIUM
Bosch Ethernet switch PRA-ES8P2S <1.01.05 - Privilege Escalation
CVSS 4.8
CVE-2022-29526
MEDIUM
GO < 1.17.10 - Improper Privilege Management
CVSS 5.3
CVE-2022-1823
HIGH
McAfee Consumer Product Removal Tool < 10.4.128 - Privilege Escalation via Configuration File Tampering
CVSS 7.9
CVE-2022-26668
HIGH
ASUS Control Center API - Privilege Escalation
CVSS 7.3
CVE-2022-2023
CRITICAL
polonel/trudesk <1.2.4 - Privilege Escalation
CVSS 9.8
CVE-2022-34006
HIGH
TitanFTP NextGen <1.2.1050 - Privilege Escalation
CVSS 7.8
CVE-2022-26057
MEDIUM
Mint WorkBench - Privilege Escalation
CVSS 6.7
CVE-2022-20819
MEDIUM
Cisco Identity Services Engine - Authenticated Sensitive Information Exposure via Web Management Interface
CVSS 6.5
CVE-2022-31594
MEDIUM
SUID-root Program - Privilege Escalation
CVSS 6.7
CVE-2022-29614
MEDIUM
SAP Host Agent - Local Privilege Escalation via sapuxuserchk Helper Program
CVSS 5.0
CVE-2022-24077
HIGH
Naver Cloud Explorer Beta - Code Injection
CVSS 7.8
CVE-2022-1654
HIGH
Jupiter Theme <= 6.10.1 and JupiterX Core Plugin <= 2.0.7 - Authenticated Privilege Escalation via AJAX Actions
CVSS 8.8
CVE-2022-2063
HIGH
nocodb < 0.91.7 - Improper Privilege Management
CVSS 8.8
Details
Vulnerabilities
2,835
Exploit Likelihood
Medium