CWE-274.

Apache Accumulo: A user can trigger a graceful shutdown of services without the relevant system permissions

• Apache Software Foundation Apache Accumulo
• CWE-274

Improper handling of insufficient privileges in the AMD Secure Processor (ASP) could allow an attacker to provide an input value to a function without sufficient privileges and successfully write dat…

• AMD MI-25
• AMD Instinct™ MI250
• CWE-274

Apache OpenMeetings has an Improper Handling of Insufficient Privileges vulnerability

• CWE-274

>=3.10, <9.0.0 · fixed in 9.0.0

Mastodon streaming API fails to disconnect disabled and suspended users

• mastodon
• CWE-273
• CWE-274

Improper handling of insufficiency privileges in the ASP could allow a privileged attacker to modify Translation Map Registers (TMRs) potentially resulting in loss of confidentiality or integrity.

• AMD Instinct™ MI250
• AMD Instinct™ MI210
• CWE-274

spimsimulator spim v9.1.24 and before is vulnerable to Buffer Overflow in READ_STRING_SYSCALL.

• Memory corruption
• CWE-274

A permissions issue was addressed with additional restrictions.

• Apple macOS
• CWE-274

Cisco IOS XR Software Image Verification Bypass Vulnerability

• Cisco IOS XR Software
• CWE-274

GPU DDK - Arbitrary write of read-only dmabuf

• Imagination Technologies Graphics DDK
• Privilege escalation
• CWE-274

Cisco Meeting Management Client-Server Privilege Escalation Vulnerability

• Cisco Meeting Management
• CWE-274

ClassCMS User Management Page admin insufficient privileges

• ClassCMS
• Privilege escalation
• CWE-274

NVIDIA ConnectX Host Firmware for the BlueField Data Processing Unit (DPU) contains a vulnerability where an attacker may cause an improper handling of insufficient privileges issue.

• NVIDIA BlueField 1
• NVIDIA BlueField GA
• CWE-274

NVIDIA ConnectX Firmware contains a vulnerability where an attacker may cause an improper handling of insufficient privileges issue.

• NVIDIA ConnectX4
• NVIDIA ConnectX4 LX
• CWE-274

Amazon CloudWatch Agent for Windows has Privilege Escalation Vector in github.com/aws/amazon-cloudwatch-agent

• CWE-274

<1.247355.0 · fixed in 1.247355.0

JupyterHub has a privilege escalation vulnerability with the `admin:users` scope

• CWE-274

<4.1.6 || >=5.0.0, <5.1.0 · fixed in 4.1.6, 5.1.0

Cisco IOS XE Software: A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated…

• Cisco IOS XE Software
• CWE-274

XWiki has no right protection on rollback action

• CWE-274

>=15.0-rc-1, <15.5.3 || >=15.6-rc-1, <15.8-rc-1 · fixed in 15.5.3, 15.8-rc-1

SiberianCMS - CWE-274: Improper Handling of Insufficient Privileges

• SiberianCMS
• CWE-274

Dell PowerScale OneFS: Dell PowerScale OneFS, 8.0.x-9.5.x, contains an improper handling of insufficient…

• Dell PowerScale OneFS
• CWE-274

Nextcloud user scoped external storage can be used to gather credentials of other users

• nextcloud security-advisories
• CWE-274

Dell PowerScale OneFS: Dell PowerScale OneFS 9.0.0.x - 9.4.0.x…

• Dell PowerScale OneFS
• CWE-274

JFrog Artifactory: JFrog Artifactory prior to 7.37.13 is vulnerable to Authentication Bypass…

• JFrog Artifactory
• CWE-274

Insufficient privilege checks on object access and updates.

• Secomea GateManager
• CWE-274

Dell PowerScale OneFS: Dell PowerScale OneFS, versions 8.2.0-9.3.0…

• Dell PowerScale OneFS
• CWE-274

GateManager information leak for LinkManager Users

• Secomea GateManager
• CWE-274
• CWE-275

Insufficient Security Control Vulnerability

• Hitachi Energy Relion 670 Series
• Hitachi Energy Relion 670/650 Series
• CWE-274

Insecure Windows Services in Symphony Plus

• ABB Ability™ Symphony® Plus Operations
• ABB Ability™ Symphony® Plus Historian
• CWE-274

Privilege Escalation vulnerability in McAfee Total Protection (MTP)

• McAfee,LLC McAfee Total Protection (MTP)
• CWE-274

Privilege Escalation vulnerability in MAR for Linux

• McAfee,LLC McAfee Active Response (MAR) for Linux
• CWE-274

Privilege Escalation vulnerability MAR for Mac

• McAfee,LLC McAfee Active Response (MAR) for Mac
• CWE-274

Privilege Escalation vulnerability in EDR for Linux

• McAfee,LLC McAfee Exploit Detection and Response (EDR) for Linux
• CWE-274

Privilege Escalation vulnerability in EDR for Mac

• McAfee,LLC McAfee Exploit Detection and Response (EDR) for Mac
• CWE-274

Privilege Escalation vulnerability in MAR for Windows

• McAfee,LLC McAfee Active Response (MAR) for Windows
• CWE-274

Privilege Escalation vulnerability in MVISION Endpoint

• McAfee,LLC McAfee MVISION Endpoint
• CWE-274

Privilege Escalation vulnerability in EDR for Windows

• McAfee,LLC McAfee Exploit Detection and Response (EDR) for Windows
• CWE-274

Privilege Escalation vulnerability through symbolic links in VSEL

• McAfee,LLC McAfee VirusScan Enterprise (VSE) for Linux
• CWE-274

Privilege Escalation vulnerability through symbolic links in VSE for Windows

• McAfee,LLC McAfee VirusScan Enterprise (VSE) for Windows
• CWE-274

Privilege Escalation vulnerability through symbolic links in ENSM

• McAfee,LLC McAfee Endpoint Security (ENS) for Mac
• CWE-274

Privilege Escalation vulnerability through symbolic links in ENS for Windows

• McAfee,LLC McAfee Endpoint Security (ENS) for Windows
• CWE-274

Endpoint Security for Linux Threat Prevention (ENSLTP) privilege escalation vulnerability

• McAfee Endpoint Security for Linux Threat Prevention (ENSLTP)
• CWE-274
• CWE-363

McAfee Application Control and Change Control (MACC) - password management security feature bypass (SFB) leading to an authentication bypass

• McAfee Application Control and Change Control (MACC)
• CWE-274

Privilege escalation vulnerability in McAfee VSE when McTray run with elevated privileges

• McAfee, LLC VirusScan Enterprise (VSE)
• Privilege escalation
• CWE-264