Vulnerabilities > Improper Privilege Management

DATE CVE VULNERABILITY TITLE RISK
2023-04-28 CVE-2023-30024 Improper Privilege Management vulnerability in Magicjack A921 Firmware 1.4
The MagicJack device, a VoIP solution for internet phone calls, contains a hidden NAND flash memory partition allowing unauthorized read/write access.
low complexity
magicjack CWE-269
6.6
2023-04-27 CVE-2023-26244 Improper Privilege Management vulnerability in Hyundai Gen5W L In-Vehicle Infotainment System Firmware 5W.Xxx.S5Wl.001.001.221129/Aeepeeur.S5Wl001.001.211214
An issue was discovered in the Hyundai Gen5W_L in-vehicle infotainment system AE_E_PE_EUR.S5W_L001.001.211214.
local
low complexity
hyundai CWE-269
7.8
2023-04-27 CVE-2023-26245 Improper Privilege Management vulnerability in Hyundai Gen5W L In-Vehicle Infotainment System Firmware 5W.Xxx.S5Wl.001.001.221129/Aeepeeur.S5Wl001.001.211214
An issue was discovered in the Hyundai Gen5W_L in-vehicle infotainment system AE_E_PE_EUR.S5W_L001.001.211214.
local
low complexity
hyundai CWE-269
7.8
2023-04-27 CVE-2023-26246 Improper Privilege Management vulnerability in Hyundai Gen5W L In-Vehicle Infotainment System Firmware 5W.Xxx.S5Wl.001.001.221129/Aeepeeur.S5Wl001.001.211214
An issue was discovered in the Hyundai Gen5W_L in-vehicle infotainment system AE_E_PE_EUR.S5W_L001.001.211214.
local
low complexity
hyundai CWE-269
7.8
2023-04-24 CVE-2023-30622 Improper Privilege Management vulnerability in Clusternet
Clusternet is a general-purpose system for controlling Kubernetes clusters across different environments.
local
low complexity
clusternet CWE-269
8.8
2023-04-24 CVE-2023-25133 Improper Privilege Management vulnerability in Cyberpower Powerpanel
Improper privilege management vulnerability in default.cmd file in PowerPanel Business Local/Remote for Windows v4.8.6 and earlier, PowerPanel Business Management for Windows v4.8.6 and earlier, PowerPanel Business Local/Remote for Linux 32bit v4.8.6 and earlier, PowerPanel Business Local/Remote for Linux 64bit v4.8.6 and earlier, PowerPanel Business Management for Linux 32bit v4.8.6 and earlier, PowerPanel Business Management for Linux 64bit v4.8.6 and earlier, PowerPanel Business Local/Remote for MacOS v4.8.6 and earlier, and PowerPanel Business Management for MacOS v4.8.6 and earlier allows remote attackers to execute operation system commands via unspecified vectors.
network
low complexity
cyberpower CWE-269
critical
9.8
2023-04-22 CVE-2023-2240 Improper Privilege Management vulnerability in Microweber
Improper Privilege Management in GitHub repository microweber/microweber prior to 1.3.4.
network
low complexity
microweber CWE-269
8.8
2023-04-21 CVE-2022-47505 Improper Privilege Management vulnerability in Solarwinds Orion Platform
The SolarWinds Platform was susceptible to the Local Privilege Escalation Vulnerability.
local
low complexity
solarwinds CWE-269
7.8
2023-04-18 CVE-2023-1548 Improper Privilege Management vulnerability in Schneider-Electric Ecostruxure Control Expert 15.1
A CWE-269: Improper Privilege Management vulnerability exists that could cause a local user to perform a denial of service through the console server service that is part of EcoStruxure Control Expert.
local
low complexity
schneider-electric CWE-269
5.5
2023-04-17 CVE-2023-22946 Improper Privilege Management vulnerability in Apache Spark
In Apache Spark versions prior to 3.4.0, applications using spark-submit can specify a 'proxy-user' to run as, limiting privileges.
network
low complexity
apache CWE-269
critical
9.9