CWE-267 · 65 kayıt

Privilege Defined With Unsafe Actions

Bu sınıftaki CVE’ler

65 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
64Bu hafta	CVE-2025-41244Silahlaştırılmış	VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)vmware · aria operations · CWE-267 Yerel yetki yükseltme	Yüksek7,8	KEV	%8,4	29 Eyl 2025
39İzleyin	CVE-2026-29646İstismar yok	In OpenXiangShan NEMU prior to 55295c4, when running with RVH (Hypervisor extension) enabled, a VS-mode guest write to the supervisor interrCWE-267 Kimlik doğrulamasız	Kritik9,8	—	%0,7	20 Nis 2026
36İzleyin	CVE-2024-42365Silahlaştırılmış	Asterisk allows `Write=originate` as sufficient permissions for code execution / `System()` dialplanasterisk · asterisk · CWE-267 RCE SSRF	Yüksek8,8	—	%4,7	8 Ağu 2024
36İzleyin	CVE-2020-29396İstismar yok	A sandboxing issue in Odoo Community 11.0 through 13.0 and Odoo Enterprise 11.0 through 13.0, when running with Python 3.6 or later, allows odoo · odoo · CWE-267 RCE	Yüksek8,8	—	%3,2	22 Ara 2020
36İzleyin	CVE-2021-44547İstismar yok	A sandboxing issue in Odoo Community 15.0 and Odoo Enterprise 15.0 allows authenticated administrators to executed arbitrary code, leading todoo · odoo · CWE-267 RCE	Kritik9,1	—	%0,7	25 Nis 2023
36İzleyin	CVE-2026-10090İstismar yok	Multicluster-operators-subscription: multicluster-operators-subscription: namespace edit user can deploy cluster-scoped clusterrolebinding and become cluster-adred hat · red hat advanced cluster management for kubernetes 2.11 · CWE-267	Kritik9,0	—	%0,6	5 Ağu 2026
35İzleyin	CVE-2021-32739İstismar yok	Results of queries for ApiListener objects include the ticket salt which allows in turn to steal (more privileged) identitiesicinga · icinga · CWE-267	Yüksek8,8	—	%1,1	15 Tem 2021
35İzleyin	CVE-2025-53900İstismar yok	Kiteworks MFT has a Privilege Defined With Unsafe Actionsaccellion · kiteworks managed file transfer · CWE-267	Yüksek8,8	—	%1,1	28 Kas 2025
35İzleyin	CVE-2024-55968Kavram kanıtı	An issue was discovered in DTEX DEC-M (DTEX Forwarder) 6.1.1.CWE-267	Yüksek8,8	—	%1,0	28 Oca 2025
35İzleyin	CVE-2025-23015İstismar yok	Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actionsapache · cassandra · CWE-267	Yüksek8,8	—	%1,0	4 Şub 2025
35İzleyin	CVE-2023-2983İstismar yok	Privilege Defined With Unsafe Actions in pimcore/pimcorepimcore · pimcore · CWE-267	Yüksek8,8	—	%0,9	30 May 2023
35İzleyin	CVE-2026-18951İstismar yok	Odh-training-operator-rhel9: [trainer v2 security] trn-02: rhoai overlay aggregates trainjobs crud into standard edit clusterrolered hat · red hat openshift ai 3.3 · CWE-267 RCE	Yüksek8,8	—	%0,9	10 Ağu 2026
35İzleyin	CVE-2023-32457İstismar yok	Dell PowerScale OneFS, versions 8.2.2.x-9.5.0.x, contains an improper privilege management vulnerability.dell · powerscale onefs · CWE-267	Yüksek8,8	—	%0,6	29 Ağu 2023
35İzleyin	CVE-2023-41966İstismar yok	Sielco Radio Link and Analog FM Transmitters Privilege Defined With Unsafe Actionssielco · analog fm transmitter exc5000gx firmware · CWE-267	Yüksek8,8	—	%0,6	26 Eki 2023
35İzleyin	CVE-2025-26467İstismar yok	Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions (4.0.16 only)apache · cassandra · CWE-267	Yüksek8,8	—	%0,5	25 Ağu 2025
35İzleyin	CVE-2025-14349İstismar yok	Business Logic Error in Universal Software's FlexCity/Kioskuni-yaz · flexcity · CWE-267 Kimlik doğrulama atlatma	Yüksek8,8	—	%0,4	13 Şub 2026
35İzleyin	CVE-2025-7691İstismar yok	Privilege Defined With Unsafe Actions in GitLabgitlab · gitlab · CWE-267	Yüksek8,8	—	%0,4	26 Eyl 2025
35İzleyin	CVE-2026-27314İstismar yok	Apache Cassandra: Privilege escalation via ADD IDENTITY authorization bypassapache · cassandra · CWE-267	Yüksek8,8	—	%0,3	7 Nis 2026
35İzleyin	CVE-2025-36255İstismar yok	DS8900F and DS8A00 Privilege Escalationibm · ds8900f firmware · CWE-267	Yüksek8,8	—	%0,2	19 Ağu 2026
35İzleyin	CVE-2026-0945İstismar yok	Role Delegation - Moderately critical - Access bypass - SA-CONTRIB-2026-002role delegation project · role delegation · CWE-267	Yüksek8,8	—	%0,2	4 Şub 2026
34İzleyin	CVE-2021-23166İstismar yok	A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read and wodoo · odoo · CWE-267	Yüksek8,7	—	%0,6	25 Nis 2023
34İzleyin	CVE-2021-23186İstismar yok	A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to access andodoo · odoo · CWE-267	Yüksek8,7	—	%0,6	25 Nis 2023
34İzleyin	CVE-2023-43746İstismar yok	BIG-IP Appliance mode external monitor vulnerabilityf5 · big-ip access policy manager · CWE-267	Yüksek8,7	—	%0,4	10 Eki 2023
34İzleyin	CVE-2026-23526İstismar yok	CVAT vulnerable to privilege escalation of users with staff statuscvat · computer vision annotation tool · CWE-267	Yüksek8,5	—	%0,3	21 Oca 2026
34İzleyin	CVE-2026-42406İstismar yok	BIG-IP and BIG-IQ privilege escalation vulnerabilityf5 · big-ip access policy manager · CWE-267	Yüksek8,5	—	%0,3	13 May 2026

CVE-2025-41244
64Bu hafta
VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)
YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %8
- Yerel yetki yükseltme
vmware · aria operations29 Eyl 2025
CVE-2026-29646
39İzleyin
In OpenXiangShan NEMU prior to 55295c4, when running with RVH (Hypervisor extension) enabled, a VS-mode guest write to the supervisor interr
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
20 Nis 2026
CVE-2024-42365
36İzleyin
Asterisk allows `Write=originate` as sufficient permissions for code execution / `System()` dialplan
YüksekCVSS 8,8SilahlaştırılmışEPSS %5
- RCE
- SSRF
asterisk · asterisk8 Ağu 2024
CVE-2020-29396
36İzleyin
A sandboxing issue in Odoo Community 11.0 through 13.0 and Odoo Enterprise 11.0 through 13.0, when running with Python 3.6 or later, allows
YüksekCVSS 8,8İstismar yokEPSS %3
- RCE
odoo · odoo22 Ara 2020
CVE-2021-44547
36İzleyin
A sandboxing issue in Odoo Community 15.0 and Odoo Enterprise 15.0 allows authenticated administrators to executed arbitrary code, leading t
KritikCVSS 9,1İstismar yokEPSS %1
- RCE
odoo · odoo25 Nis 2023
CVE-2026-10090
36İzleyin
Multicluster-operators-subscription: multicluster-operators-subscription: namespace edit user can deploy cluster-scoped clusterrolebinding and become cluster-ad
KritikCVSS 9,0İstismar yokEPSS %1
red hat · red hat advanced cluster management for kubernetes 2.115 Ağu 2026
CVE-2021-32739
35İzleyin
Results of queries for ApiListener objects include the ticket salt which allows in turn to steal (more privileged) identities
YüksekCVSS 8,8İstismar yokEPSS %1
icinga · icinga15 Tem 2021
CVE-2025-53900
35İzleyin
Kiteworks MFT has a Privilege Defined With Unsafe Actions
YüksekCVSS 8,8İstismar yokEPSS %1
accellion · kiteworks managed file transfer28 Kas 2025
CVE-2024-55968
35İzleyin
An issue was discovered in DTEX DEC-M (DTEX Forwarder) 6.1.1.
YüksekCVSS 8,8Kavram kanıtıEPSS %1
28 Oca 2025
CVE-2025-23015
35İzleyin
Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions
YüksekCVSS 8,8İstismar yokEPSS %1
apache · cassandra4 Şub 2025
CVE-2023-2983
35İzleyin
Privilege Defined With Unsafe Actions in pimcore/pimcore
YüksekCVSS 8,8İstismar yokEPSS %1
pimcore · pimcore30 May 2023
CVE-2026-18951
35İzleyin
Odh-training-operator-rhel9: [trainer v2 security] trn-02: rhoai overlay aggregates trainjobs crud into standard edit clusterrole
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
red hat · red hat openshift ai 3.310 Ağu 2026
CVE-2023-32457
35İzleyin
Dell PowerScale OneFS, versions 8.2.2.x-9.5.0.x, contains an improper privilege management vulnerability.
YüksekCVSS 8,8İstismar yokEPSS %1
dell · powerscale onefs29 Ağu 2023
CVE-2023-41966
35İzleyin
Sielco Radio Link and Analog FM Transmitters Privilege Defined With Unsafe Actions
YüksekCVSS 8,8İstismar yokEPSS %1
sielco · analog fm transmitter exc5000gx firmware26 Eki 2023
CVE-2025-26467
35İzleyin
Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions (4.0.16 only)
YüksekCVSS 8,8İstismar yokEPSS %1
apache · cassandra25 Ağu 2025
CVE-2025-14349
35İzleyin
Business Logic Error in Universal Software's FlexCity/Kiosk
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulama atlatma
uni-yaz · flexcity13 Şub 2026
CVE-2025-7691
35İzleyin
Privilege Defined With Unsafe Actions in GitLab
YüksekCVSS 8,8İstismar yokEPSS %0
gitlab · gitlab26 Eyl 2025
CVE-2026-27314
35İzleyin
Apache Cassandra: Privilege escalation via ADD IDENTITY authorization bypass
YüksekCVSS 8,8İstismar yokEPSS %0
apache · cassandra7 Nis 2026
CVE-2025-36255
35İzleyin
DS8900F and DS8A00 Privilege Escalation
YüksekCVSS 8,8İstismar yokEPSS %0
ibm · ds8900f firmware19 Ağu 2026
CVE-2026-0945
35İzleyin
Role Delegation - Moderately critical - Access bypass - SA-CONTRIB-2026-002
YüksekCVSS 8,8İstismar yokEPSS %0
role delegation project · role delegation4 Şub 2026
CVE-2021-23166
34İzleyin
A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read and w
YüksekCVSS 8,7İstismar yokEPSS %1
odoo · odoo25 Nis 2023
CVE-2021-23186
34İzleyin
A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to access and
YüksekCVSS 8,7İstismar yokEPSS %1
odoo · odoo25 Nis 2023
CVE-2023-43746
34İzleyin
BIG-IP Appliance mode external monitor vulnerability
YüksekCVSS 8,7İstismar yokEPSS %0
f5 · big-ip access policy manager10 Eki 2023
CVE-2026-23526
34İzleyin
CVAT vulnerable to privilege escalation of users with staff status
YüksekCVSS 8,5İstismar yokEPSS %0
cvat · computer vision annotation tool21 Oca 2026
CVE-2026-42406
34İzleyin
BIG-IP and BIG-IQ privilege escalation vulnerability
YüksekCVSS 8,5İstismar yokEPSS %0
f5 · big-ip access policy manager13 May 2026

Tüm zafiyet sınıfları