CWE-269

Openapi generator is a java tool which allows generation of API client libraries (SDK generation), server stubs, documen

There is a improper privilege management vulnerability in some Huawei smartphone. Successful exploitation of this vulner

Privilege escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.8 allows an authenticated user to gain eleva

In Directus 8.x through 8.8.1, an attacker can switch to the administrator role (via the PATCH method) without any contr

System Center Operations Manager Elevation of Privilege Vulnerability

Privilege Escalation in LiteSpeed Technologies OpenLiteSpeed web server version 1.7.8 allows attackers to gain root term

A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.19), Mendix Applications

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series

There is functionality in the Store Locator Plus for WordPress plugin through 5.5.14 that made it possible for authentic

Successful exploitation of this vulnerability could give an authenticated Metasys user an unintended level of access to

Multiple privilege escalation vulnerabilities in RaspAP 1.5 to 2.6.5 could allow an authenticated remote attacker to inj

An improper access control vulnerability has been reported to affect QNAP NAS. If exploited, this vulnerability allows r

If a Blob URL was loaded through some unusual user interaction, it could have been loaded by the System Principal and gr

In Weidmueller Industrial WLAN devices in multiple versions an exploitable improper access control vulnerability exists

Successful exploitation of this vulnerability could give an authenticated Facility Explorer SNC Series Supervisory Contr

Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generat

A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file

TechSmith Snagit 19.1.0.2653 uses Object Linking and Embedding (OLE) which can allow attackers to obfuscate and embed cr

A failure in resetting the security context in some transaction actions in Neo4j Graph Database 4.2 and 4.3 could allow

An issue was discovered in Comelit "App lejos de casa (web)" 2.8.0. It allows privilege escalation via modified domus an

Netskope Client through 77 allows low-privileged users to elevate their privileges to NT AUTHORITY\SYSTEM.

The HM Multiple Roles WordPress plugin before 1.3 does not have any access control to prevent low privilege users to set

The management interface of BenQ smart wireless conference projector does not properly control user's privilege. Attacke

A logic issue was addressed with improved state management. This issue is fixed in Security Update 2021-002 Catalina, Se

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.14.1), RUGGEDCOM ROX RX1400 (All versions

Windows Bind Filter Driver Elevation of Privilege Vulnerability

Privilege Escalation vulnerability in a Windows system driver of McAfee Drive Encryption (DE) prior to 7.3.0 could allow

NTFS Elevation of Privilege Vulnerability

Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains a privilege escalation vulnerability

certain VT-d IOMMUs may not work in shared page table mode For efficiency reasons, address translation control structure

MinIO is a Kubernetes native application for cloud storage. Prior to version `RELEASE.2021-12-27T07-23-18Z`, a malicious

Amazon Kindle e-reader prior to and including version 5.13.4 improperly manages privileges, allowing the framework user

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkD

A component of the HarmonyOS has a Improper Privilege Management vulnerability. Local attackers may exploit this vulnera

A flaw was found in qemu. A host privilege escalation issue was found in the virtio-fs shared file system daemon where a

Improper Access Control vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update

Arbitrary Process Execution vulnerability in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain

Improper access control vulnerability in the repair process for McAfee Agent for Windows prior to 5.7.4 could allow a lo

a12n-server is an npm package which aims to provide a simple authentication system. A new HAL-Form was added to allow ed

A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Applicat

HashiCorp Vault and Vault Enterprise 1.8.x through 1.8.4 may have an unexpected interaction between glob-related policie

Improper privilege validation vulnerability in COM Interface of Gallagher Command Centre Server allows authenticated unp

Microsoft SharePoint Elevation of Privilege Vulnerability

Microsoft SharePoint Elevation of Privilege Vulnerability

A privilege escalation vulnerability was discovered in Avaya Aura Utility Services that may potentially allow a local us

Contao is an open source CMS that allows creation of websites and scalable web applications. In affected versions it is

Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability

Windows Nearby Sharing Elevation of Privilege Vulnerability

Microsoft Exchange Server Elevation of Privilege Vulnerability