Vulnerabilities > Improper Privilege Management

DATE CVE VULNERABILITY TITLE RISK
2019-09-10 CVE-2019-16202 Improper Privilege Management vulnerability in Misp
MISP before 2.4.115 allows privilege escalation in certain situations.
network
low complexity
misp CWE-269
6.5
2019-09-10 CVE-2017-18596 Improper Privilege Management vulnerability in Elementor Page Builder
The elementor plugin before 1.8.0 for WordPress has incorrect access control for internal functions.
network
low complexity
elementor CWE-269
8.8
2019-09-09 CVE-2019-6997 Improper Privilege Management vulnerability in Gitlab
An issue was discovered in GitLab Community and Enterprise Edition 10.x (starting in 10.7) and 11.x before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1.
network
low complexity
gitlab CWE-269
4.3
2019-09-09 CVE-2019-6996 Improper Privilege Management vulnerability in Gitlab
An issue was discovered in GitLab Enterprise Edition 10.x (starting in 10.6) and 11.x before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1.
network
low complexity
gitlab CWE-269
4.3
2019-09-09 CVE-2019-6794 Improper Privilege Management vulnerability in Gitlab
An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1.
network
low complexity
gitlab CWE-269
4.3
2019-09-09 CVE-2019-6789 Improper Privilege Management vulnerability in Gitlab
An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1.
network
low complexity
gitlab CWE-269
4.3
2019-09-09 CVE-2018-21013 Improper Privilege Management vulnerability in Upperthemes Swape 1.1/1.2
The Swape theme before 1.2.1 for WordPress has incorrect access control, as demonstrated by allowing new administrator accounts via vectors involving xmlPath to wp-admin/admin-ajax.php.
network
low complexity
upperthemes CWE-269
critical
9.8
2019-09-06 CVE-2019-9443 Improper Privilege Management vulnerability in Google Android
In the Android kernel in the vl53L0 driver there is a possible out of bounds write due to a permissions bypass.
local
low complexity
google CWE-269
6.7
2019-09-05 CVE-2019-1939 Improper Privilege Management vulnerability in Cisco Webex Teams 3.0.4533
A vulnerability in the Cisco Webex Teams client for Windows could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected system.
network
low complexity
cisco CWE-269
8.8
2019-08-29 CVE-2019-4536 Improper Privilege Management vulnerability in IBM I 7.4
IBM i 7.4 users who have done a Restore User Profile (RSTUSRPRF) on a system which has been configured with Db2 Mirror for i might have user profiles with elevated privileges caused by incorrect processing during a restore of multiple user profiles.
local
high complexity
ibm CWE-269
6.3