The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
2,836 vulnerabilities with CWE-269
CVE-2020-15390
CRITICAL
Pega Platform 8.4.0.237 - Info Disclosure
CVSS 9.8
CVE-2020-29620
HIGH
macOS 10.14-10.14.5 and 11.0 - Privilege Escalation
CVSS 7.8
CVE-2020-27938
HIGH
macOS < 11.2.0 - Privilege Escalation via Logic Issue
CVSS 7.8
CVE-2020-7467
HIGH
FreeBSD Privilege Escalation via AMD Virtualization Instructions
CVSS 7.6
CVE-2020-4184
HIGH
IBM Security Guardium 11.2 - Improper Privilege Management
CVSS 7.3
CVE-2020-12528
MEDIUM
MymbCONNECT24 <V2.6.2 - Privilege Escalation
CVSS 6.5
CVE-2020-12527
MEDIUM
MymbCONNECT24 <v2.11.2 - Privilege Escalation
CVSS 6.5
CVE-2020-35557
MEDIUM
MB connect line mbCONNECT24 and mymbCONNECT24 <= 2.11.2 - Authenticated Improper Privilege Management
CVSS 6.5
CVE-2020-29031
HIGH
GateManager < 9.2c - Authenticated Privilege Escalation via Password Reset
CVSS 7.1
CVE-2020-26191
HIGH
Dell EMC PowerScale OneFS 8.1.0-9.1.0 - Privilege Escalation via PermissionRepair Job
CVSS 7.8
CVE-2020-35517
HIGH
qemu 5.0.0-5.2.50 - Privilege Escalation via virtio-fs Shared File System Device File Creation
CVSS 8.2
CVE-2020-6024
HIGH
Check Point SmartConsole <R80.10-0.30-0.40-0.41 - Privilege Escalation
CVSS 7.8
CVE-2020-9141
CRITICAL
Huawei EMUI and Magic UI - Improper Privilege Management
CVSS 9.1
CVE-2020-8275
MEDIUM
Citrix Secure Mail for Android <20.11.0 - Info Disclosure
CVSS 4.3
CVE-2020-26181
HIGH
Dell EMC Isilon OneFS <8.1.0.0 and PowerScale OneFS 9.0.0 - Privilege Escalation via SmartLock Compliance Mode
CVSS 7.0
CVE-2020-36156
CRITICAL
Ultimate Member < 2.1.12 - Authenticated Privilege Escalation via Profile Update
CVSS 9.9
CVE-2020-36155
CRITICAL
Ultimate Member < 2.1.12 - Unauthenticated Privilege Escalation via User Meta Registration
CVSS 10.0
CVE-2020-8290
HIGH
Backblaze <7.0.0.439 - Privilege Escalation
CVSS 7.8
CVE-2020-25194
HIGH
MOXA NPort IAW5000A-I/O Firmware < 2.1 - Privilege Escalation via Web Server Requests
CVSS 8.8
CVE-2020-24678
HIGH
S+ Operations/S+ Historian - Privilege Escalation
CVSS 8.8
CVE-2020-25106
HIGH
SupRemo 4.1.3.2348 - Privilege Escalation via File Manager Exploit
CVSS 7.8
CVE-2020-13519
HIGH
NZXT CAM 4.8.0 - Privilege Escalation
CVSS 8.8
CVE-2020-13515
HIGH
NZXT CAM 4.8.0 - Privilege Escalation
CVSS 8.8
CVE-2020-13514
HIGH
NZXT CAM 4.8.0 - Privilege Escalation
CVSS 8.8
CVE-2020-13513
HIGH
NZXT CAM 4.8.0 - Privilege Escalation
CVSS 8.8
Details
Vulnerabilities
2,836
Exploit Likelihood
Medium