The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
2,837 vulnerabilities with CWE-269
CVE-2019-16202
MEDIUM
MISP <2.4.115 - Privilege Escalation
CVSS 6.5
CVE-2019-6997
MEDIUM
GitLab <11.5.8-11.7.1 - Info Disclosure
CVSS 4.3
CVE-2019-6996
MEDIUM
GitLab EE <11.5.8-11.7.1 - Info Disclosure
CVSS 4.3
CVE-2019-6794
MEDIUM
GitLab < 11.5.8, 11.6.x < 11.6.6, 11.7.x < 11.7.1 - Information Disclosure via Default Branch Commit Status
CVSS 4.3
CVE-2019-6789
MEDIUM
GitLab < 11.5.8, 11.6.x < 11.6.6, 11.7.x < 11.7.1 - Information Disclosure via Project Move Notification
CVSS 4.3
CVE-2019-9443
MEDIUM
Android kernel - Permissions Bypass
CVSS 6.7
CVE-2019-1939
HIGH
Cisco Webex Teams < 3.0.12427.0 - Unauthenticated Remote Code Execution via Software Logging Feature
CVSS 8.8
CVE-2019-4536
MEDIUM
IBM i - Improper Privilege Management during Restore User Profile
CVSS 6.3
CVE-2019-15720
HIGH
CloudBerry Backup < 6.1.2.34 - Local Privilege Escalation via Pre/Post Backup Action
CVSS 7.8
CVE-2019-4448
HIGH
IBM DB2 High Performance Unload <6.1 - RCE
CVSS 7.8
CVE-2019-11551
MEDIUM
Code42 Enterprise <6.9.1 - Info Disclosure
CVSS 5.5
CVE-2019-11521
HIGH
Open-Xchange App Suite 7.10.1 - Content Spoofing
CVSS 8.1
CVE-2019-12889
HIGH
SailPoint Desktop Password Reset 7.2 - Unauthenticated Privilege Escalation via Password Reset Functionality
CVSS 7.0
CVE-2019-1177
HIGH
Windows - Elevation of Privilege via rpcss.dll Memory Handling
CVSS 7.0
CVE-2019-1175
HIGH
Windows 10 and Windows Server 2016/2019 - Privilege Escalation in psmsrv.dll
CVSS 7.0
CVE-2019-1162
HIGH
Windows - Elevation of Privilege via ALPC Call Handling
CVSS 7.8
CVE-2019-12618
CRITICAL
HashiCorp Nomad 0.9.0-0.9.1 - Incorrect Access Control via Exec Driver
CVSS 9.8
CVE-2019-11270
HIGH
Pivotal Software Application Service - Improper Privilege Management
CVSS 7.5
CVE-2019-1010178
CRITICAL
Fred MODX Revolution < 1.0.0-beta5 - RCE
CVSS 9.8
CVE-2019-11553
HIGH
Code42 for Enterprise <6.8.4 - Privilege Escalation
CVSS 8.8
CVE-2019-1010066
HIGH
LLNL model_specific_registers-safe < 1.2.0 - Unauthenticated MSR Modification via ioctl Bypass
CVSS 7.5
CVE-2019-12731
HIGH
Mikogo < 5.10.2 - Privilege Escalation
CVSS 7.8
CVE-2019-7278
MEDIUM
Optergy Proton/Enterprise - Unauthenticated SMS Sending
CVSS 6.5
CVE-2019-3735
HIGH
Dell SupportAssist 2.0-3.2.1 Privilege Escalation via Thread Handle Inheritance
CVSS 7.8
CVE-2019-4177
LOW
IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, 10.4.0 - Unprotected User Data Exposure via Local Web Page Storage
CVSS 3.3
Details
Vulnerabilities
2,837
Exploit Likelihood
Medium