CWE-282 · 30 records

Improper Ownership Management

CVEs in this class

30 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
63This week	CVE-2023-0386Weaponized	A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linuxlinux · linux kernel · CWE-282 Local privilege escalation	High7.8	KEV	7.8%	Mar 22, 2023
36Monitor	CVE-2024-3383No exploit	PAN-OS: Improper Group Membership Change Vulnerability in Cloud Identity Engine (CIE)paloaltonetworks · pan-os · CWE-282 Pre-auth	Critical9.1	—	0.5%	Apr 10, 2024
35Monitor	CVE-2026-50130No exploit	Pi-hole: Local privilege escalation from `pihole` user to root via `/etc/pihole/logrotate`pi-hole · pi-hole · CWE-282 Local privilege escalation	High8.8	—	0.2%	Jul 14, 2026
34Monitor	CVE-2024-37999No exploit	A vulnerability has been identified in Medicalis Workflow Orchestrator (All versions).siemens · medicalis workflow orchestrator · CWE-282 Local privilege escalation	High8.5	—	0.1%	Jul 8, 2024
32Monitor	CVE-2025-27254No exploit	CWE-282 "Improper Ownership Management" in GE Vernova EnerVista UR Setup allows Authentication Bypass.ge vernova · enervista ur setup · CWE-282 Auth bypass	High8.0	—	0.1%	Mar 10, 2025
31Monitor	CVE-2022-29187No exploit	Bypass of safe.directory protections in Gitgit-scm · git · CWE-282 Local privilege escalation	High7.8	—	0.4%	Jul 12, 2022
31Monitor	CVE-2024-39755No exploit	A privilege escalation vulnerability exists in the node update functionality of Veertu Anka Build 1.42.0.veertu · anka build cloud · CWE-282 Local privilege escalation	High7.8	—	0.3%	Oct 3, 2024
31Monitor	CVE-2017-12189No exploit	It was discovered that the jboss init script as used in Red Hat JBoss Enterprise Application Platform 7.0.7.GA performed unsafe file handlinredhat · jboss enterprise application platform · CWE-282 Local privilege escalation	High7.8	—	0.3%	Jan 10, 2018
26Monitor	CVE-2026-23514No exploit	Kiteworks Core before 9.2.2 is vulnerable to Improper Ownership Managementaccellion · kiteworks · CWE-282	Medium6.5	—	1.0%	Mar 25, 2026
26Monitor	CVE-2023-7226No exploit	meetyoucrop big-whale Admin Module all.api improper ownership managementmeiyou · big whale · CWE-282	Medium6.5	—	0.4%	Jan 11, 2024
26Monitor	CVE-2022-0026No exploit	Cortex XDR Agent: Unintended Program Execution Leads to Local Privilege Escalation (PE) Vulnerabilitypaloaltonetworks · cortex xdr agent · CWE-282 Local privilege escalation	Medium6.7	—	0.2%	May 11, 2022
26Monitor	CVE-2024-45104No exploit	A valid, authenticated LXCA user without sufficient privileges may be able to use the device identifier to modify an LXCA managed device thrlenovo · xclarity administrator · CWE-282	Medium6.5	—	0.2%	Sep 13, 2024
25Monitor	CVE-2024-47816No exploit	Users can impersonate import requesters if their actor IDs coincide in ImportDumpmiraheze · importdump · CWE-282	Medium6.4	—	0.3%	Oct 9, 2024
25Monitor	CVE-2026-40214No exploit	In OpenStack Cyborg before 16.0.1, the Accelerator Request (ARQ) API does not enforce project ownership at any layer.openstack · cyborg · CWE-282	Medium6.3	—	0.3%	May 7, 2026
25Monitor	CVE-2025-57732No exploit	In JetBrains TeamCity before 2025.07.1 privilege escalation was possible due to incorrect directory ownershipjetbrains · teamcity · CWE-282 Local privilege escalation	Medium6.3	—	0.1%	Aug 20, 2025
24Monitor	CVE-2026-3867No exploit	An improper ownership management vulnerability has been identified in Moxa’s Secure Router.moxa · edr-8010 series · CWE-282	Medium6.0	—	0.3%	Apr 27, 2026
22Monitor	CVE-2023-0989No exploit	Improper Ownership Management in GitLabgitlab · gitlab · CWE-282	Medium5.7	—	0.5%	Sep 29, 2023
21Monitor	CVE-2024-8949Proof of concept	SourceCodester Online Eyewear Shop Cart Content Master.php improper ownership managementoretnom23 · online eyewear shop · CWE-282	Medium5.3	—	0.7%	Sep 17, 2024
21Monitor	CVE-2020-10632No exploit	ICSA-20-140-02 Emerson OpenEnterpriseemerson · openenterprise scada server · CWE-282 Pre-auth	Medium5.3	—	0.4%	Feb 24, 2022
21Monitor	CVE-2025-32946No exploit	PeerTube Arbitrary Playlist Creation via ActivityPub Protocolframasoft · peertube · CWE-282 Pre-auth	Medium5.3	—	0.3%	Apr 15, 2025
21Monitor	CVE-2024-43176No exploit	IBM OpenPages information disclosureibm · openpages with watson · CWE-282	Medium5.4	—	0.2%	Jan 9, 2025
21Monitor	CVE-2026-86769No exploit	Snipe-IT before 8.7.0 Audit Log Misattribution via Consumables Checkoutsnipeitapp · snipe-it · CWE-282	Medium5.3	—	0.2%	Sep 9, 2026
21Monitor	CVE-2024-13246No exploit	Node Access Rebuild Progressive - Less critical - Access bypass - SA-CONTRIB-2024-010node access rebuild progressive project · node access rebuild progressive · CWE-282 Pre-auth	Medium5.3	—	0.2%	Jan 9, 2025
21Monitor	CVE-2024-13249No exploit	Node Access Rebuild Progressive - Less critical - Access bypass - SA-CONTRIB-2024-013node access rebuild progressive project · node access rebuild progressive · CWE-282	Medium5.4	—	0.2%	Jan 9, 2025
17Monitor	CVE-2024-45103No exploit	A valid, authenticated LXCA user may be able to unmanage an LXCA managed device in through the LXCA web interface without sufficient privilelenovo · xclarity administrator · CWE-282 Denial of service	Medium4.3	—	0.3%	Sep 13, 2024

CVE-2023-0386
63This week
A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux
HighCVSS 7.8KEVWeaponizedEPSS 7%
- Local privilege escalation
linux · linux kernelMar 22, 2023
CVE-2024-3383
36Monitor
PAN-OS: Improper Group Membership Change Vulnerability in Cloud Identity Engine (CIE)
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
paloaltonetworks · pan-osApr 10, 2024
CVE-2026-50130
35Monitor
Pi-hole: Local privilege escalation from `pihole` user to root via `/etc/pihole/logrotate`
HighCVSS 8.8No exploitEPSS 0%
- Local privilege escalation
pi-hole · pi-holeJul 14, 2026
CVE-2024-37999
34Monitor
A vulnerability has been identified in Medicalis Workflow Orchestrator (All versions).
HighCVSS 8.5No exploitEPSS 0%
- Local privilege escalation
siemens · medicalis workflow orchestratorJul 8, 2024
CVE-2025-27254
32Monitor
CWE-282 "Improper Ownership Management" in GE Vernova EnerVista UR Setup allows Authentication Bypass.
HighCVSS 8.0No exploitEPSS 0%
- Auth bypass
ge vernova · enervista ur setupMar 10, 2025
CVE-2022-29187
31Monitor
Bypass of safe.directory protections in Git
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
git-scm · gitJul 12, 2022
CVE-2024-39755
31Monitor
A privilege escalation vulnerability exists in the node update functionality of Veertu Anka Build 1.42.0.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
veertu · anka build cloudOct 3, 2024
CVE-2017-12189
31Monitor
It was discovered that the jboss init script as used in Red Hat JBoss Enterprise Application Platform 7.0.7.GA performed unsafe file handlin
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
redhat · jboss enterprise application platformJan 10, 2018
CVE-2026-23514
26Monitor
Kiteworks Core before 9.2.2 is vulnerable to Improper Ownership Management
MediumCVSS 6.5No exploitEPSS 1%
accellion · kiteworksMar 25, 2026
CVE-2023-7226
26Monitor
meetyoucrop big-whale Admin Module all.api improper ownership management
MediumCVSS 6.5No exploitEPSS 0%
meiyou · big whaleJan 11, 2024
CVE-2022-0026
26Monitor
Cortex XDR Agent: Unintended Program Execution Leads to Local Privilege Escalation (PE) Vulnerability
MediumCVSS 6.7No exploitEPSS 0%
- Local privilege escalation
paloaltonetworks · cortex xdr agentMay 11, 2022
CVE-2024-45104
26Monitor
A valid, authenticated LXCA user without sufficient privileges may be able to use the device identifier to modify an LXCA managed device thr
MediumCVSS 6.5No exploitEPSS 0%
lenovo · xclarity administratorSep 13, 2024
CVE-2024-47816
25Monitor
Users can impersonate import requesters if their actor IDs coincide in ImportDump
MediumCVSS 6.4No exploitEPSS 0%
miraheze · importdumpOct 9, 2024
CVE-2026-40214
25Monitor
In OpenStack Cyborg before 16.0.1, the Accelerator Request (ARQ) API does not enforce project ownership at any layer.
MediumCVSS 6.3No exploitEPSS 0%
openstack · cyborgMay 7, 2026
CVE-2025-57732
25Monitor
In JetBrains TeamCity before 2025.07.1 privilege escalation was possible due to incorrect directory ownership
MediumCVSS 6.3No exploitEPSS 0%
- Local privilege escalation
jetbrains · teamcityAug 20, 2025
CVE-2026-3867
24Monitor
An improper ownership management vulnerability has been identified in Moxa’s Secure Router.
MediumCVSS 6.0No exploitEPSS 0%
moxa · edr-8010 seriesApr 27, 2026
CVE-2023-0989
22Monitor
Improper Ownership Management in GitLab
MediumCVSS 5.7No exploitEPSS 0%
gitlab · gitlabSep 29, 2023
CVE-2024-8949
21Monitor
SourceCodester Online Eyewear Shop Cart Content Master.php improper ownership management
MediumCVSS 5.3Proof of conceptEPSS 0%
oretnom23 · online eyewear shopSep 17, 2024
CVE-2020-10632
21Monitor
ICSA-20-140-02 Emerson OpenEnterprise
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
emerson · openenterprise scada serverFeb 24, 2022
CVE-2025-32946
21Monitor
PeerTube Arbitrary Playlist Creation via ActivityPub Protocol
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
framasoft · peertubeApr 15, 2025
CVE-2024-43176
21Monitor
IBM OpenPages information disclosure
MediumCVSS 5.4No exploitEPSS 0%
ibm · openpages with watsonJan 9, 2025
CVE-2026-86769
21Monitor
Snipe-IT before 8.7.0 Audit Log Misattribution via Consumables Checkout
MediumCVSS 5.3No exploitEPSS 0%
snipeitapp · snipe-itSep 9, 2026
CVE-2024-13246
21Monitor
Node Access Rebuild Progressive - Less critical - Access bypass - SA-CONTRIB-2024-010
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
node access rebuild progressive project · node access rebuild progressiveJan 9, 2025
CVE-2024-13249
21Monitor
Node Access Rebuild Progressive - Less critical - Access bypass - SA-CONTRIB-2024-013
MediumCVSS 5.4No exploitEPSS 0%
node access rebuild progressive project · node access rebuild progressiveJan 9, 2025
CVE-2024-45103
17Monitor
A valid, authenticated LXCA user may be able to unmanage an LXCA managed device in through the LXCA web interface without sufficient privile
MediumCVSS 4.3No exploitEPSS 0%
- Denial of service
lenovo · xclarity administratorSep 13, 2024

All vulnerability classes