Advisories · Weakness
CWE-280.
Every Advisory and CVE whose sources give the weakness CWE-280, newest first.
- CVSS 5.9 Medium
Improper Handling of Insufficient Permissions or Privileges in zephyr
- zephyr
- CWE-280
- CVSS 7.1 High
Insecure Direct Object Reference in GateManager WebUI can cause privilege escalation
- Secomea GateManager
- CWE-280
- CVSS 5.3 Medium
Dell PowerScale OneFS: Dell EMC PowerScale OneFS versions 8.1.2…
- Dell PowerScale OneFS
- CWE-280
- CVSS 6.6 Medium
Duo Authentication for Windows Logon and RDP Privilege Escalation Vulnerability
- Cisco Duo Authentication for Windows Logon and RDP
- CWE-280
-
Pulse Connect Secure: An insufficient permission check vulnerability exists in Pulse Connect Secure <9.1R8 that…
- Pulse Connect Secure
- CWE-280
-
Nextcloud Server: Improper preservation of permissions in Nextcloud Server 14.0.3 causes the event details…
- Nextcloud Server
- CWE-280
- CVSS 7.8 High
PAN-OS: Custom-role users may escalate privileges
- Palo Alto Networks PAN-OS
- CWE-280
-
floragunn Search Guard: Search Guard versions before 24.3 had an issue when Cross Cluster Search (CCS) was…
- floragunn Search Guard
- CWE-280
-
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0).
- Siemens SINEMA Remote Connect Server
- CWE-280
- CVSS 5.3 Medium
Jboss enterprise application platform: jboss eap: jbeap: jboss enterprise application platform: unauthorized ejb access via authorization module bypass
- Red Hat JBoss Enterprise Application Platform 6.0
- Red Hat JBoss Enterprise Application Platform 6 for RHEL 5
- CWE-280