Vulnerability index

Browse CVEs

3,012 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Improper Privilege ManagementCWE-269 × clear
Emc Isilon Onefs HIGH 7.8
CVE-2020-26181

Dell EMC Isilon OneFS versions 8.1 and later and Dell EMC PowerScale OneFS version 9.0.0 contain a privilege escalation vulnerability on a SmartLock …

Fix: after 8.1.0.0
Fix from $1,950 2021-01-05
Ultimate Member CRITICAL 9.8
CVE-2020-36155EPSS 9%

An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Unauthenticated Privilege Escalation via User Meta. An attacke…

Fix: 2.1.12+
Fix from $2,300 2021-01-04
Ultimate Member HIGH 8.8
CVE-2020-36156

An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Authenticated Privilege Escalation via Profile Update. Any use…

Fix: 2.1.12+
Fix from $1,950 2021-01-04
Backblaze HIGH 7.8
CVE-2020-8290

Backblaze for Windows and Backblaze for macOS before 7.0.0.439 suffer from improper privilege management in `bztransmit` helper due to lack of permis…

Fix: 7.0.0.439+
Fix from $1,950 2020-12-27
Nport Iaw5000a I\/o Firmware HIGH 8.8
CVE-2020-25194

The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower has improper privilege management, which may allow an attacker with…

Fix: after 2.1
Fix from $1,950 2020-12-23
Symphony \+ Historian HIGH 8.8
CVE-2020-24678

An authenticated user might execute malicious code under the user context and take control of the system. S+ Operations or S+ Historian database is a…

Mitigation only
Fix from $1,950 2020-12-22
Supremo HIGH 7.8
CVE-2020-25106

Nanosystems SupRemo 4.1.3.2348 allows attackers to obtain LocalSystem access because File Manager can be used to rename Supremo.exe and then upload a…

No fix yet
Fix from $1,950 2020-12-22
Cam HIGH 8.8
CVE-2020-13512

A privilege escalation vulnerability exists in the WinRing0x64 Driver Privileged I/O Write IRPs functionality of NZXT CAM 4.8.0. A specially crafted …

No fix yet
Fix from $1,950 2020-12-18
Cam HIGH 8.8
CVE-2020-13513

A privilege escalation vulnerability exists in the WinRing0x64 Driver Privileged I/O Write IRPs functionality of NZXT CAM 4.8.0. A specially crafted …

No fix yet
Fix from $1,950 2020-12-18
Cam HIGH 8.8
CVE-2020-13514

A privilege escalation vulnerability exists in the WinRing0x64 Driver Privileged I/O Write IRPs functionality of NZXT CAM 4.8.0. A specially crafted …

No fix yet
Fix from $1,950 2020-12-18
Cam HIGH 8.8
CVE-2020-13515

A privilege escalation vulnerability exists in the WinRing0x64 Driver IRP 0x9c40a148 functionality of NZXT CAM 4.8.0. A specially crafted I/O request…

No fix yet
Fix from $1,950 2020-12-18
Cam HIGH 8.8
CVE-2020-13519

A privilege escalation vulnerability exists in the WinRing0x64 Driver IRP 0x9c402088 functionality of NZXT CAM 4.8.0. A specially crafted I/O request…

No fix yet
Fix from $1,950 2020-12-18
Cam MEDIUM 6.5
CVE-2020-13509

An information disclosure vulnerability exists in the WinRing0x64 Driver Privileged I/O Read IRPs functionality of NZXT CAM 4.8.0. A specially crafte…

No fix yet
Fix from $1,600 2020-12-18
Cam MEDIUM 6.5
CVE-2020-13510

An information disclosure vulnerability exists in the WinRing0x64 Driver Privileged I/O Read IRPs functionality of NZXT CAM 4.8.0. A specially crafte…

No fix yet
Fix from $1,600 2020-12-18
Cam MEDIUM 6.5
CVE-2020-13511

An information disclosure vulnerability exists in the WinRing0x64 Driver Privileged I/O Read IRPs functionality of NZXT CAM 4.8.0. A specially crafte…

No fix yet
Fix from $1,600 2020-12-18
Cam MEDIUM 6.5
CVE-2020-13516

An information disclosure vulnerability exists in the WinRing0x64 Driver IRP 0x9c406144 functionality of NZXT CAM 4.8.0. A specially crafted I/O requ…

No fix yet
Fix from $1,600 2020-12-18
Cam MEDIUM 5.5
CVE-2020-13517

An information disclosure vulnerability exists in the WinRing0x64 Driver IRP 0x9c406104 functionality of NZXT CAM 4.8.0. A specially crafted I/O requ…

No fix yet
Fix from $1,600 2020-12-18
Cam MEDIUM 6.5
CVE-2020-13518

An information disclosure vulnerability exists in the WinRing0x64 Driver IRP 0x9c402084 functionality of NZXT CAM 4.8.0. A specially crafted I/O requ…

No fix yet
Fix from $1,600 2020-12-18
Plcnext Firmware CRITICAL 9.8
CVE-2020-12519

On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an attacker can use this vulnerability i.e. to open a reverse shell with root p…

Fix: 2021.0+
Fix from $2,300 2020-12-17
Debian Linux HIGH 8.8
CVE-2020-29481

An issue was discovered in Xen through 4.14.x. Access rights of Xenstore nodes are per domid. Unfortunately, existing granted access rights are not r…

Fix: after 4.14.0
Fix from $1,950 2020-12-15
Gateway Plug In CRITICAL 9.8
CVE-2020-8257

Improper privilege management on services run by Citrix Gateway Plug-in for Windows, versions before and including 13.0-61.48 and 12.1-58.15, lead to…

Fix: after 13.0-61.48
Fix from $2,300 2020-12-14
Gateway Plug In HIGH 7.5
CVE-2020-8258

Improper privilege management on services run by Citrix Gateway Plug-in for Windows, versions before and including 13.0-61.48 and 12.1-58.15, allows …

Fix: after 13.0-61.48
Fix from $1,950 2020-12-14
Virtual Apps And Desktops HIGH 8.8
CVE-2020-8283

An authorised user on a Windows host running Citrix Universal Print Server can perform arbitrary command execution as SYSTEM in CVAD versions before …

Fix: 7.6 / 7.15+
Fix from $1,950 2020-12-14
Jabber CRITICAL 9.9
CVE-2020-27132

Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary …

No fix yet
Fix from $2,300 2020-12-11
Jabber CRITICAL 9.9
CVE-2020-27133

Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary …

No fix yet
Fix from $2,300 2020-12-11
Jabber CRITICAL 9.9
CVE-2020-27127

Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary …

Mitigation only
Fix from $2,300 2020-12-11
Windows 10 HIGH 7.0
CVE-2020-17103EPSS 27%

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Patch available
Fix from $1,950 2020-12-10
Total Protection HIGH 7.8
CVE-2020-7335

Privilege Escalation vulnerability in Microsoft Windows client McAfee Total Protection (MTP) prior to 16.0.29 allows local users to gain elevated pri…

Fix: 16.0.29+
Fix from $1,950 2020-12-01
Fusioncompute HIGH 7.8
CVE-2020-9114

FusionCompute versions 6.3.0, 6.3.1, 6.5.0, 6.5.1 and 8.0.0 have a privilege escalation vulnerability. Due to improper privilege management, an attac…

Mitigation only
Fix from $1,950 2020-12-01
Pcmanager HIGH 7.8
CVE-2020-8351

A privilege escalation vulnerability was reported in Lenovo PCManager prior to version 3.0.50.9162 that could allow an authenticated user to execute …

Fix: 3.0.50.9162+
Fix from $1,950 2020-11-30