CWE-269

A vulnerability in the SOAP API of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker

Privilege escalation vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2020 Update al

<p>A remote code execution vulnerability exists in Microsoft Exchange server due to improper validation of cmdlet argume

MH-WikiBot (an IRC Bot for interacting with the Miraheze API), had a bug that allowed any unprivileged user to access th

PackageKit's apt backend mistakenly treated all local debs as trusted. The apt security model is based on repository tru

The Enlightenment system service in Tizen allows an unprivileged process to fully control or capture windows, due to imp

The system-popup system service in Tizen allows an unprivileged process to perform popup-related system actions, due to

GitLab 12.5 through 12.8.1 has Insecure Permissions. Depending on particular group settings, it was possible for invited

An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. It allows attackers to gain privileges by u

A vulnerability has been identified in Camstar Enterprise Platform (All versions), Opcenter Execution Core (All versions

An issue was discovered in rConfig 3.9.3. The install script updates the /etc/sudoers file for rconfig specific tasks. A

A privilege escalation vulnerability exists when loading DLLs during boot up and reboot in Symantec IT Management Suite

CA Automic Dollar Universe 5.3.3 contains a vulnerability, related to the uxdqmsrv binary being setuid root, that allows

A Privilege Escalation vulnerability exists in the SDBagent service in Safend Data Protector Agent 3.4.5586.9772, which

A Privilege Escalation vulnerability exists in the unquoted Service Binary in SDPAgent or SDBAgent in Safend Data Protec

An elevation of privilege vulnerability exists in Microsoft Windows when Windows fails to properly handle certain symbol

DeleGate 9.9.13 allows local users to gain privileges as demonstrated by the dgcpnod setuid program.

Silicon Integrated Systems XGI WindowsXP Display Manager (aka XGI VGA Driver Manager and VGA Display Manager) 6.14.10.10

Juniper Junos OS 13.2 before 13.2R5, 13.2X51, 13.2X52, and 13.3 before 13.3R3 allow local users to bypass intended restr

Splunk 5.0.3 has an Unquoted Service Path in Windows for Universal Forwarder which can allow an attacker to escalate pri

FastTrack Admin By Request 6.1.0.0 supports group policies that are supposed to allow only a select range of users to el

Citrix XenServer 4.1, 6.0, 5.6 SP2, 5.6 Feature Pack 1, 5.6 Common Criteria, 5.6, 5.5, 5.0, and 5.0 Update 3 contains a

Soapbox through 0.3.1: Sandbox bypass - runs a second instance of Soapbox within a sandboxed Soapbox.

The System Management Mode (SMM) implementation in Dell Latitude E6430 BIOS Revision A09, HP EliteBook 850 G1 BIOS revis

An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability

An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'W

Honeywell INNCOM INNControl 3 allows workstation users to escalate application user privileges through the modification

In Emerson ValveLink v12.0.264 to v13.4.118, a vulnerability in the ValveLink software may allow a local, unprivileged,

An elevation of privilege vulnerability exists in Microsoft Windows when the Windows kernel fails to properly handle par

v2rayL 2.1.3 allows local users to achieve root access because /etc/v2rayL/add.sh and /etc/v2rayL/remove.sh are owned by

v2rayL 2.1.3 allows local users to achieve root access because /etc/v2rayL/config.json is owned by a low-privileged user

VMware Fusion (11.x before 11.5.2), VMware Remote Console for Mac (11.x and prior before 11.0.1) and Horizon Client for

A vulnerability in Cisco SD-WAN Solution software could allow an authenticated, local attacker to elevate privileges to

MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A local privilege escalation vulnera

MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A local privilege escalation vulnera

MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A local privilege escalation vulnera

Local Privilege Escalation can occur in PHOENIX CONTACT PORTICO SERVER through 3.0.7 when installed to run as a service.

An insecure temporary file vulnerability in Palo Alto Networks Traps allows a local authenticated Windows user to escala

An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.6.1. The

An elevation of privilege vulnerability exists in the Microsoft Windows Update Client when it does not properly handle p

Certain NETGEAR devices are affected by privilege escalation. This affects M4300-28G before 12.0.2.15, M4300-52G before

Certain NETGEAR devices are affected by vertical privilege escalation. This affects M4300-28G before 12.0.2.15, M4300-52

Certain NETGEAR devices are affected by vertical privilege escalation. This affects M4300-28G before 12.0.2.15, M4300-52

Certain NETGEAR devices are affected by vertical privilege escalation. This affects M4300-28G before 12.0.2.15, M4300-52

Certain NETGEAR devices are affected by vertical privilege escalation. This affects M4300-28G before 12.0.2.15, M4300-52

Certain NETGEAR devices are affected by vertical privilege escalation. This affects M4300-28G before 12.0.2.15, M4300-52

Weak Registry permissions in ABB System 800xA Base allow low privileged users to read and modify registry settings relat

Incorrect Privilege Assignment vulnerability in Eaton's Intelligent Power Manager (IPM) v1.67 & prior allow non-admin us

Privilege Escalation vulnerability in McAfee MVISION Endpoint prior to 20.5.0.94 allows a malicious script or program to

Privilege Escalation vulnerability in McAfee Exploit Detection and Response (EDR) for Windows prior to 3.1.0 Hotfix 1 al