CWE-1220

A vulnerability in the web application allows standard users to escalate their privileges to those of a super administra

A flaw was found in ArgoCD Image Updater. This vulnerability allows an attacker, with permissions to create or modify an

A vulnerability in MLflow versions <=3.10.1.dev0 allows unauthorized access to multipart upload (MPU) endpoints when the

Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a ne

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) th

Insufficient granularity of access control in Windows Event Logging Service allows an authorized attacker to execute cod

Missing protection mechanism for alternate hardware interface in the Intel(R) Quick Assist Technology for some Intel(R)

Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges loc

Insufficient granularity of access control in Microsoft Surface allows an authorized attacker to elevate privileges loca

Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privi

Insufficient granularity of access control in Microsoft Exchange Server allows an authorized attacker to elevate privile

Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker

Insufficient granularity of access control in Windows Filtering Platform (WFP) allows an authorized attacker to elevate

Insufficient granularity of access control in User-Mode Power Service (UMPS) allows an authorized attacker to elevate pr

Vite is a frontend tooling framework for JavaScript. From 6.0.0 to before 6.4.2, 7.3.2, and 8.0.5, if it is possible to

When using Google Secrets Manager as a backend for the Spring Cloud Config server a client can craft a request to the co

docker-socket-proxy fails to properly gate read endpoints in the /containers Docker API namespace when the CONTAINERS en

Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to

In lunary-ai/lunary version 1.2.13, an insufficient granularity of access control vulnerability allows users to delete p

FastMCP is the standard framework for building MCP applications. Prior to version 2.14.2, the server does not properly r

The Google Cloud Secret Manager secrets backend in Apache Airflow's Google provider never applied the team scope when re

A vulnerability in the Object Model CLI component of Cisco Application Policy Infrastructure Controller (APIC) could all

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.4 before 18.5.5, 18.6 before 18.6.3, and 1

A heap-buffer-overflow flaw was found in Directory Server (389-ds-base). When a DN contains a legacy-quoted value, the s

The authenticated /ui/dags endpoint did not enforce per-DAG access control on embedded Human-in-the-Loop (HITL) and Task

The asset dependency graph did not restrict nodes by the viewer's DAG read permissions: a user with read access to at le

A flaw was found in Keycloak. A broken access control vulnerability in the Account Resources user lookup endpoint allows

A flaw was found in the Fine-Grained Admin Permissions (FGAP) v2 implementation within Keycloak's administrative service

A flaw was found in org.keycloak.services. An administrator with delegated access to read group memberships and users ca

Asseco InfoMedica is a comprehensive solution used to manage both administrative and medical tasks in the healthcare sec

On a Cryptobox platform where administrator segregation based on entities is used, some vulnerabilities in Ercom Cryptob

Insufficient Granularity of Access Control in SEV firmware can allow a privileged attacker to create a SEV-ES Guest to a

Insufficient Granularity of Access Control in SEV firmware could allow a privileged user with a malicious hypervisor to

An insufficient granularity of access control vulnerability exists in PingIDM (formerly ForgeRock Identity Management) w

Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location potent

Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user sp

Insufficient granularity of access control in some subsystem for some Intel(R) Xeon(R) 6 Scalable processors with Intel(

A vulnerability exists in the interaction between a Endpoint Privilege Management (Windows Deployment) support utility a