Vulnerabilities > Improper Privilege Management

DATE CVE VULNERABILITY TITLE RISK
2021-04-09 CVE-2021-20021 Improper Privilege Management vulnerability in Sonicwall Email Security and Hosted Email Security
A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host.
network
low complexity
sonicwall CWE-269
critical
9.8
2021-04-09 CVE-2021-30152 Improper Privilege Management vulnerability in multiple products
An issue was discovered in MediaWiki before 1.31.13 and 1.32.x through 1.35.x before 1.35.2.
network
low complexity
mediawiki debian fedoraproject CWE-269
4.3
2021-04-07 CVE-2021-26758 Improper Privilege Management vulnerability in Litespeedtech Openlitespeed 1.7.8
Privilege Escalation in LiteSpeed Technologies OpenLiteSpeed web server version 1.7.8 allows attackers to gain root terminal access and execute commands on the host system.
network
low complexity
litespeedtech CWE-269
8.8
2021-04-06 CVE-2021-20334 Improper Privilege Management vulnerability in Mongodb Compass
A malicious 3rd party with local access to the Windows machine where MongoDB Compass is installed can execute arbitrary software with the privileges of the user who is running MongoDB Compass.
local
low complexity
mongodb CWE-269
7.8
2021-04-05 CVE-2021-24207 Improper Privilege Management vulnerability in Themeum WP Page Builder
By default, the WP Page Builder WordPress plugin before 1.2.4 allows subscriber-level users to edit and make changes to any and all posts pages - user roles must be specifically blocked from editing posts and pages.
network
low complexity
themeum CWE-269
4.3
2021-04-02 CVE-2021-1802 Improper Privilege Management vulnerability in Apple mac OS X and Macos
A logic issue was addressed with improved state management.
local
low complexity
apple CWE-269
7.8
2021-04-02 CVE-2021-1787 Improper Privilege Management vulnerability in Apple products
Multiple issues were addressed with improved logic.
local
low complexity
apple CWE-269
7.8
2021-04-02 CVE-2021-1750 Improper Privilege Management vulnerability in Apple products
Multiple issues were addressed with improved logic.
local
low complexity
apple CWE-269
7.8
2021-04-02 CVE-2020-29620 Improper Privilege Management vulnerability in Apple mac OS X and Macos
This issue was addressed with improved entitlements.
local
low complexity
apple CWE-269
7.8
2021-04-02 CVE-2020-27938 Improper Privilege Management vulnerability in Apple mac OS X
A logic issue was addressed with improved state management.
local
low complexity
apple CWE-269
7.8