Vulnerabilities (CVE)

Filtered by CWE-269
Total 1767 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-5622 1 Tenable 1 Nessus Network Monitor 2024-11-21 N/A 7.1 HIGH
Under certain conditions, Nessus Network Monitor could allow a low privileged user to escalate privileges to NT AUTHORITY\SYSTEM on Windows hosts by replacing a specially crafted file.
CVE-2023-5549 2 Fedoraproject, Moodle 3 Extra Packages For Enterprise Linux, Fedora, Moodle 2024-11-21 N/A 3.3 LOW
Insufficient web service capability checks made it possible to move categories a user had permission to manage, to a parent category they did not have the capability to manage.
CVE-2023-5402 1 Schneider-electric 1 C-bus Toolkit 2024-11-21 N/A 9.8 CRITICAL
A CWE-269: Improper Privilege Management vulnerability exists that could cause a remote code execution when the transfer command is used over the network.
CVE-2023-5214 1 Puppet 1 Bolt 2024-11-21 N/A 6.5 MEDIUM
In Puppet Bolt versions prior to 3.27.4, a path to escalate privileges was identified.
CVE-2023-52716 2024-11-21 N/A 7.5 HIGH
Vulnerability of starting activities in the background in the ActivityManagerService (AMS) module. Impact: Successful exploitation of this vulnerability will affect availability.
CVE-2023-52543 2024-11-21 N/A 6.2 MEDIUM
Permission verification vulnerability in the system module. Impact: Successful exploitation of this vulnerability will affect availability.
CVE-2023-52431 1 Plack\ 1 \ 2024-11-21 N/A 8.8 HIGH
The Plack::Middleware::XSRFBlock package before 0.0.19 for Perl allows attackers to bypass a CSRF protection mechanism via an empty form value and an empty cookie (if signed cookies are disabled).
CVE-2023-52114 1 Huawei 2 Emui, Harmonyos 2024-11-21 N/A 7.5 HIGH
Data confidentiality vulnerability in the ScreenReader module. Successful exploitation of this vulnerability may affect service integrity.
CVE-2023-52105 1 Huawei 1 Harmonyos 2024-11-21 N/A 7.5 HIGH
The nearby module has a privilege escalation vulnerability. Successful exploitation of this vulnerability may affect availability.
CVE-2023-52093 1 Trendmicro 1 Apex One 2024-11-21 N/A 7.8 HIGH
An exposed dangerous function vulnerability in the Trend Micro Apex One agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
CVE-2023-51546 2024-11-21 N/A 7.2 HIGH
Improper Privilege Management vulnerability in WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels allows Privilege Escalation.This issue affects WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels: from n/a through 4.2.1.
CVE-2023-51483 2024-11-21 N/A 9.8 CRITICAL
Improper Privilege Management vulnerability in Glowlogix WP Frontend Profile allows Privilege Escalation.This issue affects WP Frontend Profile: from n/a through 1.3.1.
CVE-2023-51481 2024-11-21 N/A 9.8 CRITICAL
Improper Privilege Management vulnerability in powerfulwp Local Delivery Drivers for WooCommerce allows Privilege Escalation.This issue affects Local Delivery Drivers for WooCommerce: from n/a through 1.9.0.
CVE-2023-51479 2024-11-21 N/A 8.8 HIGH
Improper Privilege Management vulnerability in Abdul Hakeem Build App Online allows Privilege Escalation.This issue affects Build App Online: from n/a through 1.0.19.
CVE-2023-51476 2024-11-21 N/A 9.8 CRITICAL
Improper Privilege Management vulnerability in IOSS WP MLM Unilevel allows Privilege Escalation.This issue affects WP MLM Unilevel: from n/a through 4.0.
CVE-2023-51435 1 Hihonor 1 Magic Ui 2024-11-21 N/A 7.1 HIGH
Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.
CVE-2023-51433 1 Hihonor 1 Magic Ui 2024-11-21 N/A 2.9 LOW
Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.
CVE-2023-51430 1 Hihonor 1 Magic Ui 2024-11-21 N/A 4.4 MEDIUM
Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.
CVE-2023-51429 1 Hihonor 1 Magic Os 2024-11-21 N/A 6.0 MEDIUM
Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.
CVE-2023-51425 2024-11-21 N/A 9.8 CRITICAL
Improper Privilege Management vulnerability in Jacques Malgrange Rencontre – Dating Site allows Privilege Escalation.This issue affects Rencontre – Dating Site: from n/a through 3.10.1.