Vulnerabilities > Improper Privilege Management
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2020-05-08 | CVE-2020-7264 | Improper Privilege Management vulnerability in Mcafee Endpoint Security Privilege Escalation vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 Hotfix 199847 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. | 8.4 |
| 2020-05-07 | CVE-2020-6652 | Improper Privilege Management vulnerability in Eaton Intelligent Power Manager 1.6/1.67 Incorrect Privilege Assignment vulnerability in Eaton's Intelligent Power Manager (IPM) v1.67 & prior allow non-admin users to upload the system configuration files by sending specially crafted requests. | 7.8 |
| 2020-05-07 | CVE-2020-12689 | Improper Privilege Management vulnerability in multiple products An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. | 8.8 |
| 2020-05-06 | CVE-2019-4266 | Improper Privilege Management vulnerability in IBM Maximo Anywhere IBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 does not have device jailbreak detection which could result in an attacker gaining sensitive information about the device. | 2.4 |
| 2020-04-30 | CVE-2019-19216 | Improper Privilege Management vulnerability in Bmcsoftware Control-M/Agent 7.0.00.000 BMC Control-M/Agent 7.0.00.000 has an Insecure File Copy. | 8.8 |
| 2020-04-28 | CVE-2018-21226 | Improper Privilege Management vulnerability in Netgear products Certain NETGEAR devices are affected by authentication bypass. | 8.8 |
| 2020-04-28 | CVE-2019-15790 | Improper Privilege Management vulnerability in multiple products Apport reads and writes information on a crashed process to /proc/pid with elevated privileges. | 3.3 |
| 2020-04-23 | CVE-2020-12074 | Improper Privilege Management vulnerability in Webtoffee Import Export Wordpress Users The users-customers-import-export-for-wp-woocommerce plugin before 1.3.9 for WordPress allows subscribers to import administrative accounts via CSV. | 8.8 |
| 2020-04-22 | CVE-2018-21124 | Improper Privilege Management vulnerability in Netgear Wac505 Firmware and Wac510 Firmware NETGEAR WAC510 devices before 5.0.0.17 are affected by privilege escalation. | 8.8 |
| 2020-04-22 | CVE-2020-8474 | Improper Privilege Management vulnerability in ABB 800Xa Base System 5.1/6.0/6.0.0 Weak Registry permissions in ABB System 800xA Base allow low privileged users to read and modify registry settings related to control system functionality, allowing an authenticated attacker to cause system functions to stop or malfunction. | 7.8 |