The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
2,838 vulnerabilities with CWE-269
CVE-2019-7155
MEDIUM
GitLab <11.5.8-11.7.1 - Privilege Escalation
CVSS 6.5
CVE-2019-6525
HIGH
AVEVA Wonderware System Platform < 2017 Update 2 - Improper Privilege Management via ArchestrA Network User Account
CVSS 8.8
CVE-2019-6287
HIGH
Rancher 2.0.0-2.1.5 - Improper Privilege Management
CVSS 8.1
CVE-2019-0735
HIGH
Windows Client Server Run-Time Subsystem - Privilege Escalation
CVSS 7.8
CVE-2019-10676
MEDIUM
Uniqkey Password Manager 1.14 - Credential Disclosure via Popup Window
CVSS 6.5
CVE-2019-1754
HIGH
Cisco IOS XE - Authenticated Privilege Escalation via Web UI Endpoint
CVSS 8.8
CVE-2019-3849
HIGH
moodle < 3.4.8 - Unauthenticated Privilege Escalation via LTI Request Tampering
CVSS 8.8
CVE-2019-5415
HIGH
serve 6.5.3 - Unauthenticated Directory Listing and File Read via Ignore Feature
CVSS 7.5
CVE-2019-6601
MEDIUM
F5 BIG-IP AAM 11.5.1-11.5.8, 11.6.1-11.6.3.2, 12.1.0-12.1.3.7, 13.0.0 - Privilege Escalation in wamd
CVSS 5.5
CVE-2019-3785
HIGH
Cloudfoundry Capi-release < 1.78.0 - Improper Authorization
CVSS 8.1
CVE-2019-9624
HIGH
Webmin 1.900 - Remote Code Execution via Upload and Download Privilege Abuse
CVSS 7.8
CVE-2019-1588
MEDIUM
Cisco NX-OS < 14.0(1h) - Authenticated Arbitrary File Read
CVSS 4.4
CVE-2019-3475
HIGH
Micro Focus Filr 3.x < Security Update 6 - Authenticated Local Privilege Escalation via famtd Component
CVSS 7.8
CVE-2019-5768
MEDIUM
Chrome < 72.0.3626.81 - Local File Read via Malicious Extension
CVSS 6.5
CVE-2018-9375
HIGH
Android - Local Privilege Escalation via UserDictionaryProvider Confused Deputy
CVSS 7.8
CVE-2018-25044
MEDIUM
uTorrent - Unauthenticated Privilege Escalation via Guest Account
CVSS 6.3
CVE-2018-25041
MEDIUM
uTorrent Web - Privilege Escalation via JSON RPC Server
CVSS 6.3
CVE-2018-25040
MEDIUM
uTorrent Web - Privilege Escalation
CVSS 6.3
CVE-2018-4478
MEDIUM
macOS < 10.13.5 - Privilege Escalation via Physical Access
CVSS 6.8
CVE-2018-16497
HIGH
Versa Analytics - Privilege Escalation via Writable Root Cron Job Script
CVSS 7.8
CVE-2018-9333
HIGH
K7Computing K7AntiVirus Premium 15.1.0.53 - Buffer Overflow in K7TSMngr.exe
CVSS 7.8
CVE-2018-9332
HIGH
K7Computing Antivirus < 16.0.0001 - Improper Privilege Management
CVSS 7.8
CVE-2018-8724
HIGH
K7Computing Antivirus < 16.0.0001 - Privilege Escalation via K7TSMngr.exe
CVSS 7.8
CVE-2018-8044
HIGH
K7Computing Antivirus < 16.0.0001 - Incorrect Access Control in K7Sentry.sys
CVSS 7.8
CVE-2018-11008
MEDIUM
K7Computing K7AntiVirus Premium 15.01.00.53 - Incorrect Access Control
CVSS 5.5
Details
Vulnerabilities
2,838
Exploit Likelihood
Medium