CWE-266: Incorrect Privilege Assignment
A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.
A kind of CWE-269 Improper Privilege Management.
From the CWE List. © The MITRE Corporation.
Newest
- inspirythemes realhomesWordPress RealHomes theme <= 4.3.6 - Privilege Escalation vulnerability9.8 Critical
- portabilis i-educarPortabilis i-Educar Matricula API matricula improper authorization5.3 Medium
- google androidIn multiple locations, there is a possible way to overlay biometrics due to a tapjacking/overlay...4.0 Medium
- google androidIn createMultiProfilePagerAdapter of ChooserActivity.java , there is a possible way for an app to...4.0 Medium
- portabilis i-educarPortabilis i-Educar processamentoApi improper authorization5.3 Medium
- portabilis i-educarPortabilis i-Educar consulta improper authorization5.3 Medium
- naver mybox explorer, navercorp mybox +1 moreNAVER MYBOX Explorer for Windows before 3.0.8.133 allows a local attacker to escalate privileges...7.7 High
- rockoaXinhu RockOA index.php publicsaveAjax improper authorization5.3 Medium
- favethemes houzezWordPress Houzez Theme <= 4.1.1 - Cross Site Scripting (XSS) Vulnerability8.8 High
- kamleshyadav miraculous core pluginWordPress Miraculous Core Plugin Plugin <= 2.0.7 - Privilege Escalation Vulnerability9.8 Critical
- chandrashekharsahu site offlineWordPress Site Offline plugin <= 1.5.7 - Broken Access Control vulnerability4.3 Medium
- naver mybox explorer, navercorp mybox +1 moreNAVER MYBOX Explorer for Windows before 3.0.8.133 allows a local attacker to escalate privileges...7.8 High
- pfu limited scansnap manager installersIncorrect privilege assignment vulnerability exists in ScanSnap Manager installers versions prior...8.5 High
- No product listedMCSManager 10.5.3 daemon process runs as a root account by default, and its sensitive data ...5.3 Medium
- themepassion support ticketWordPress Support Ticket Plugin <= 1.9 - Privilege Escalation Vulnerability9.8 Critical
- saad iqbal bookifyWordPress Bookify <= 1.0.9 - Privilege Escalation Vulnerability8.8 High
- brainstorm force suredashWordPress SureDash <= 1.0.3 - Privilege Escalation Vulnerability8.8 High
- delucks seoWordPress DELUCKS SEO Plugin <= 2.6.0 - Privilege Escalation Vulnerability8.8 High
- quantumcloud simple business directory proWordPress Simple Business Directory Pro Plugin < 15.6.9 - Privilege Escalation Vulnerability9.8 Critical
- miniorange custom api for wpWordPress Custom API for WP <= 4.2.2 - Privilege Escalation Vulnerability9.9 Critical
- emraan cheema cubewpWordPress CubeWP Framework Plugin <= 1.1.24 - Privilege Escalation Vulnerability8.8 High
- liuyuyang01 thrivex-blogLiuYuYang01 ThriveX-Blog web updateJsonValueByName improper authorization5.3 Medium
- red hat developer hub, developer hub 1.7 +1 moreRhdh: red hat developer hub user permissions6.1 Medium
- buttercup, buttercup buttercup-browser-extension +1 moreButtercup buttercup-browser-extension Vault access control2.3 Low
- gopiplus vertical scroll slideshow gallery v2WordPress Vertical scroll slideshow gallery v2 plugin <= 9.1 - SQL Injection vulnerability8.8 High
- dell supportassist for home pcs, supportassist for business pcs +1 moreSupportAssist for Home PCs versions 4.6.3 and prior and SupportAssist for Business PCs versions 4...2.8 Low
- dell supportassist for business pcsSupportAssist for Business PCs, version(s) 4.5.3 and prior, contain(s) an Incorrect Privilege...6.7 Medium
- dell supportassist for home pcsSupportAssist for Home PCs Installer exe version(s) 4.8.2.29006 and prior, contain(s) an...6.7 Medium
- stellarwp kadence woocommerce email designerWordPress Kadence WooCommerce Email Designer Plugin <= 1.5.16 - Privilege Escalation Vulnerability7.2 High
- gitlabIncorrect Privilege Assignment in GitLab6.7 Medium
- fortinet fortios, siemens ruggedcom ape1808 +1 moreAn incorrect privilege assignment vulnerability [CWE-266] in FortiOS Security Fabric version 7.6...6.8 Medium
- sap se netweaver application server for abap, sap basis +1 moreMissing Authorization check in SAP NetWeaver Application Server for ABAP5.4 Medium
- jishenghua jsherpjshERP Endpoint deleteBatch improper authorization5.3 Medium
- jishenghua jsherpjshERP Endpoint addUser improper authorization5.3 Medium
- litmuschaos litmusLitmusChaos Litmus LocalStorage permission5.3 Medium
- litmuschaos litmusLitmusChaos Litmus login access control5.3 Medium
- litmuschaos litmusLitmusChaos Litmus list_projects improper authorization5.3 Medium
- portabilis i-educarPortabilis i-Educar API Endpoint pessoa improper authorization5.3 Medium
- trendnet tew-822dreTRENDnet TEW-822DRE vsftpd least privilege violation7.3 High
- trendnet tv-ip110wnTRENDnet TV-IP110WN Embedded Boa Web Server boa.conf least privilege violation7.3 High
- tduckcloud tduck-platformTDuckCloud tduck-platform manage preHandle improper authorization5.3 Medium
- openbaoOpenBao Root Namespace Operator May Elevate Token Privileges7.2 High
- atjiu pybbsatjiu pybbs Email Verification improper authorization6.9 Medium
- hashicorp vault, vault enterprise +1 moreVault Root Namespace Operator May Elevate Token Privileges7.2 High
- apple macosThis issue was addressed with improved data protection. This issue is fixed in macOS Sequoia 15.6...5.1 Medium
- palo alto networks globalprotect app, globalprotect uwp app +1 moreGlobalProtect App: Non Admin User Can Disable the GlobalProtect App6.8 Medium
- vaelsys, vaelsys vaelsysv4 +1 moreVaelsys VaelsysV4 User Creation vgrid_server.php improper authorization6.9 Medium
- totolink n600r, x2000r, n600r firmware +1 more +3 moreTOTOLINK N600R/X2000R FTP Service vsftpd.conf least privilege violation8.6 High
- jishenghua jsherpjshERP Account delete improper authorization5.3 Medium
- No product listedAn issue was discovered in AlertEnterprise Guardian 4.1.14.2.2.1. One can elevate to...6.5 Medium
- Show moreLoading…