Vulnerabilities > Improper Privilege Management

DATE CVE VULNERABILITY TITLE RISK
2023-03-16 CVE-2023-21458 Improper Privilege Management vulnerability in Samsung Android 11.0/12.0/13.0
Improper privilege management vulnerability in PhoneStatusBarPolicy in System UI prior to SMR Mar-2023 Release 1 allows attacker to turn off Do not disturb via unprotected intent.
local
low complexity
samsung CWE-269
3.3
2023-03-16 CVE-2023-24760 Improper Privilege Management vulnerability in Ofcms Project Ofcms 1.1.4
An issue found in Ofcms v.1.1.4 allows a remote attacker to to escalate privileges via the respwd method in SysUserController.
network
low complexity
ofcms-project CWE-269
8.8
2023-03-12 CVE-2022-48365 Improper Privilege Management vulnerability in Ibexa Digital Experience Platform and EZ Platform Kernel
An issue was discovered in eZ Platform Ibexa Kernel before 1.3.26.
network
low complexity
ibexa CWE-269
7.2
2023-03-07 CVE-2022-39953 Improper Privilege Management vulnerability in Fortinet Fortinac
A improper privilege management in Fortinet FortiNAC version 9.4.0 through 9.4.1, FortiNAC version 9.2.0 through 9.2.6, FortiNAC version 9.1.0 through 9.1.8, FortiNAC all versions 8.8, FortiNAC all versions 8.7, FortiNAC all versions 8.6, FortiNAC all versions 8.5, FortiNAC version 8.3.7 allows attacker to escalation of privilege via specially crafted commands.
local
low complexity
fortinet CWE-269
7.8
2023-03-03 CVE-2022-45988 Improper Privilege Management vulnerability in Starsoftcomm Coocare 5.304
starsoftcomm CooCare 5.304 allows local attackers to escalate privileges and execute arbitrary commands via a crafted file upload.
local
low complexity
starsoftcomm CWE-269
7.8
2023-03-02 CVE-2023-26475 Improper Privilege Management vulnerability in Xwiki
XWiki Platform is a generic wiki platform.
network
low complexity
xwiki CWE-269
8.8
2023-03-01 CVE-2022-27677 Improper Privilege Management vulnerability in AMD Ryzen Master 2.2.0.1543
Failure to validate privileges during installation of AMD Ryzen™ Master may allow an attacker with low privileges to modify files potentially leading to privilege escalation and code execution by the lower privileged user.
local
low complexity
amd CWE-269
7.8
2023-02-27 CVE-2022-48283 Improper Privilege Management vulnerability in Huawei Hilink AI Life 12.0.2.305
A piece of Huawei whole-home intelligence software has an Incorrect Privilege Assignment vulnerability.
network
low complexity
huawei CWE-269
critical
9.8
2023-02-27 CVE-2022-48284 Improper Privilege Management vulnerability in Huawei Hilink AI Life 12.0.2.305
A piece of Huawei whole-home intelligence software has an Incorrect Privilege Assignment vulnerability.
network
low complexity
huawei CWE-269
critical
9.8
2023-02-17 CVE-2022-43927 Improper Privilege Management vulnerability in IBM DB2 10.5/11.1/11.5
IBM Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 is vulnerable to information Disclosure due to improper privilege management when a specially crafted table access is used.
network
low complexity
ibm CWE-269
7.5