Vulnerability index

Browse CVEs

3,012 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Improper Privilege ManagementCWE-269 × clear
Xxl Job HIGH 8.8
CVE-2022-36157

XXL-JOB all versions as of 11 July 2022 are vulnerable to Insecure Permissions resulting in the ability to execute admin function with low Privilege …

Fix: after 2.3.1
Fix from $1,950 2022-08-19
Octopus Server MEDIUM 5.3
CVE-2022-1901

In affected versions of Octopus Deploy it is possible to unmask sensitive variables by using variable preview.

Fix: 2022.1.3009 / 2022.2.7244+
Fix from $1,600 2022-08-19
Ansible Automation Platform MEDIUM 6.5
CVE-2022-2568

A privilege escalation flaw was found in the Ansible Automation Platform. This flaw allows a remote authenticated user with 'change user' permissions…

No fix yet
Fix from $1,600 2022-08-18
Security Scan Plus HIGH 7.8
CVE-2022-37025

An improper privilege management vulnerability in McAfee Security Scan Plus (MSS+) before 4.1.262.1 could allow a local user to modify a configuratio…

Fix: 4.1.262.1+
Fix from $1,950 2022-08-18
Apb HIGH 7.8
CVE-2020-10728

A flaw was found in automationbroker/apb container in versions up to and including 2.0.4-1. This container grants all users sudoer permissions allowi…

Fix: after 2.0.4-1
Fix from $1,950 2022-08-16
Emui CRITICAL 9.8
CVE-2022-37002

The SystemUI module has a privilege escalation vulnerability. Successful exploitation of this vulnerability can cause malicious applications to pop u…

No fix yet
Fix from $2,300 2022-08-10
Vrealize Operations HIGH 7.2
CVE-2022-31672

VMware vRealize Operations contains a privilege escalation vulnerability. A malicious actor with administrative network access can escalate privilege…

Fix: 8.6.4+
Fix from $1,950 2022-08-10
Android CRITICAL 9.8
CVE-2022-20361

In btif_dm_auth_cmpl_evt of btif_dm.cc, there is a possible vulnerability in Cross-Transport Key Derivation due to Weakness in Bluetooth Standard. Th…

Patch available
Fix from $2,300 2022-08-10
Android HIGH 7.8
CVE-2022-20356

In shouldAllowFgsWhileInUsePermissionLocked of ActiveServices.java, there is a possible way to start foreground service from background due to improp…

Patch available
Fix from $1,950 2022-08-10
Android HIGH 7.8
CVE-2022-20360

In setChecked of SecureNfcPreferenceController.java, there is a missing permission check. This could lead to local escalation of privilege from the g…

Patch available
Fix from $1,950 2022-08-10
Android CRITICAL 9.8
CVE-2022-20239

remap_pfn_range' here may map out of size kernel memory (for example, may map the kernel area), and because the 'vma->vm_page_prot' can also be contr…

Mitigation only
Fix from $2,300 2022-08-10
Android HIGH 8.8
CVE-2022-20347

In onAttach of ConnectedDeviceDashboardFragment.java, there is a possible permission bypass due to a confused deputy. This could lead to remote escal…

Patch available
Fix from $1,950 2022-08-10
Windows 10 HIGH 7.8
CVE-2022-35764

Storage Spaces Direct Elevation of Privilege Vulnerability

No fix yet
Fix from $1,950 2022-08-09
Windows 10 HIGH 7.8
CVE-2022-35765

Storage Spaces Direct Elevation of Privilege Vulnerability

No fix yet
Fix from $1,950 2022-08-09
Windows 10 HIGH 7.8
CVE-2022-35768

Windows Kernel Elevation of Privilege Vulnerability

No fix yet
Fix from $1,950 2022-08-09
Windows 10 HIGH 7.8
CVE-2022-35771

Windows Defender Credential Guard Elevation of Privilege Vulnerability

No fix yet
Fix from $1,950 2022-08-09
Azure Site Recovery Vmware To Azure MEDIUM 6.5
CVE-2022-35775

Azure Site Recovery Elevation of Privilege Vulnerability

Fix: 9.50.6419.1+
Fix from $1,600 2022-08-09
Azure Site Recovery Vmware To Azure MEDIUM 6.5
CVE-2022-35780

Azure Site Recovery Elevation of Privilege Vulnerability

Fix: 9.50.6419.1+
Fix from $1,600 2022-08-09
Azure Site Recovery Vmware To Azure MEDIUM 6.5
CVE-2022-35781

Azure Site Recovery Elevation of Privilege Vulnerability

Fix: 9.50.6419.1+
Fix from $1,600 2022-08-09
Azure Site Recovery Vmware To Azure MEDIUM 6.5
CVE-2022-35782

Azure Site Recovery Elevation of Privilege Vulnerability

Fix: 9.50.6419.1+
Fix from $1,600 2022-08-09
Windows 10 HIGH 7.8
CVE-2022-34706

Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability

Mitigation only
Fix from $1,950 2022-08-09
Windows 10 HIGH 7.8
CVE-2022-35761

Windows Kernel Elevation of Privilege Vulnerability

No fix yet
Fix from $1,950 2022-08-09
Windows 10 HIGH 7.8
CVE-2022-35762

Storage Spaces Direct Elevation of Privilege Vulnerability

Mitigation only
Fix from $1,950 2022-08-09
Windows 10 HIGH 7.8
CVE-2022-35763

Storage Spaces Direct Elevation of Privilege Vulnerability

No fix yet
Fix from $1,950 2022-08-09
Open Management Infrastructure HIGH 7.8
CVE-2022-33640

System Center Operations Manager: Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability

Fix: 1.6.10-2+
Fix from $1,950 2022-08-09
Azure Batch HIGH 7.0
CVE-2022-33646

Azure Batch Node Agent Elevation of Privilege Vulnerability

Fix: 1.9.27+
Fix from $1,950 2022-08-09
Windows 10 HIGH 8.8
CVE-2022-34691

Active Directory Domain Services Elevation of Privilege Vulnerability

No fix yet
Fix from $1,950 2022-08-09
Windows 10 HIGH 7.8
CVE-2022-34699

Windows Win32k Elevation of Privilege Vulnerability

Mitigation only
Fix from $1,950 2022-08-09
Windows 10 HIGH 7.8
CVE-2022-34703

Windows Partition Management Driver Elevation of Privilege Vulnerability

No fix yet
Fix from $1,950 2022-08-09
Gameoptimizingservice HIGH 7.8
CVE-2022-36833

Improper Privilege Management vulnerability in Game Optimizing Service prior to versions 3.3.04.0 in Android 10, and 3.5.04.8 in Android 11 and above…

Fix: 3.3.04.0 / 3.5.04.8+
Fix from $1,950 2022-08-05