Vulnerabilities > Execution with Unnecessary Privileges

DATE CVE VULNERABILITY TITLE RISK
2021-05-28 CVE-2020-27826 Execution with Unnecessary Privileges vulnerability in Redhat Keycloak
A flaw was found in Keycloak before version 12.0.0 where it is possible to update the user's metadata attributes using Account REST API.
network
high complexity
redhat CWE-250
4.2
2021-01-20 CVE-2020-26278 Execution with Unnecessary Privileges vulnerability in Weave
Weave Net is open source software which creates a virtual network that connects Docker containers across multiple hosts and enables their automatic discovery.
high complexity
weave CWE-250
8.0
2020-09-09 CVE-2020-10056 Execution with Unnecessary Privileges vulnerability in Siemens License Management Utility 2.3.745
A vulnerability has been identified in License Management Utility (LMU) (All versions < V2.4).
local
low complexity
siemens CWE-250
7.8
2018-07-10 CVE-2018-10872 Execution with Unnecessary Privileges vulnerability in Redhat products
A flaw was found in the way the Linux kernel handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions.
local
low complexity
redhat CWE-250
5.5
2018-07-06 CVE-2018-10892 Execution with Unnecessary Privileges vulnerability in multiple products
The default OCI linux spec in oci/defaults{_linux}.go in Docker/Moby from 1.11 to current does not block /proc/acpi pathnames.
network
low complexity
docker mobyproject redhat opensuse CWE-250
5.3