Vulnerabilities > Improper Privilege Management

DATE CVE VULNERABILITY TITLE RISK
2023-06-14 CVE-2023-26062 Improper Privilege Management vulnerability in Nokia web Element Manager 21B
A mobile network solution internal fault is found in Nokia Web Element Manager before 22 R1, in which an authenticated, unprivileged user can execute administrative functions.
local
low complexity
nokia CWE-269
7.8
2023-06-07 CVE-2019-25151 Improper Privilege Management vulnerability in Cartflows
The Funnel Builder plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the activate_plugin function in versions up to, and including, 1.3.0.
network
low complexity
cartflows CWE-269
4.3
2023-06-06 CVE-2023-2833 Improper Privilege Management vulnerability in Wpdeveloper Reviewx
The ReviewX plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.6.13 due to insufficient restriction on the 'rx_set_screen_options' function.
network
low complexity
wpdeveloper CWE-269
8.8
2023-06-05 CVE-2023-3027 Improper Privilege Management vulnerability in Redhat Advanced Cluster Management for Kubernetes 2.5/2.6/2.7
The grc-policy-propagator allows security escalation within the cluster.
local
low complexity
redhat CWE-269
7.8
2023-06-01 CVE-2023-32713 Improper Privilege Management vulnerability in Splunk APP for Stream
In Splunk App for Stream versions below 8.1.1, a low-privileged user could use a vulnerability in the streamfwd process within the Splunk App for Stream to escalate their privileges on the machine that runs the Splunk Enterprise instance, up to and including the root user.
network
low complexity
splunk CWE-269
critical
9.9
2023-05-30 CVE-2023-29734 Improper Privilege Management vulnerability in MWM Edjing MIX 7.09.01
An issue found in edjing Mix v.7.09.01 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the database.
network
low complexity
mwm CWE-269
critical
9.8
2023-05-30 CVE-2023-32696 Improper Privilege Management vulnerability in Okfn Ckan
CKAN is an open-source data management system for powering data hubs and data portals.
network
low complexity
okfn CWE-269
8.8
2023-05-20 CVE-2023-1693 Improper Privilege Management vulnerability in Huawei Emui and Harmonyos
The Settings module has the file privilege escalation vulnerability.Successful exploitation of this vulnerability may affect confidentiality.
network
low complexity
huawei CWE-269
7.5
2023-05-20 CVE-2023-1694 Improper Privilege Management vulnerability in Huawei Emui and Harmonyos
The Settings module has the file privilege escalation vulnerability.Successful exploitation of this vulnerability may affect confidentiality.
network
low complexity
huawei CWE-269
7.5
2023-05-12 CVE-2023-29819 Improper Privilege Management vulnerability in Webroot Secureanywhere
An issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before allows a local attacker to bypass protections via a crafted payload.
local
low complexity
webroot CWE-269
5.5