Search CVEs

An improper access control vulnerability exists where an authenticated user could access areas outside of their authorized scope.

In Tenable Security Center versions prior to 6.7.0, an improper access control vulnerability exists where an authenticated user could access areas outside of their authorized scope.

A broken access control may allow an authenticated user to perform a horizontal privilege escalation. The vulnerability only impacts specific configurations.

CWE-639: Authorization Bypass Through User-Controlled Key vulnerability exists that could allow an authorized attacker to modify values outside those defined by their privileges (Elevation of Privileg

Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges locally.

A broken access control (BAC) vulnerability in the web-based management interface could allow an authenticated remote attacker with low privileges to view sensitive information. Successful exploitatio

Improper access control in Windows SDK allows an authorized attacker to elevate privileges locally.

An improper access control vulnerability allows low-privileged users to execute code with Administrator privileges remotely.

Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally.

Improper access control in the ASP could allow a privileged attacker to perform an out-of-bounds write to a memory location not controlled by the attacker, potentially leading to loss of confidentiali

Untrusted search path in System Center allows an authorized attacker to elevate privileges locally.

Improper access control for some Intel(R) Arc™ & Iris(R) Xe graphics software before version 32.0.101.6077 may allow an authenticated user to potentially enable denial of service via local access.

Improper authorization in Dynamics 365 Business Central resulted in a vulnerability that allows an authenticated attacker to elevate privileges over a network.

Improper access control in Visual Studio Code allows an authorized attacker to elevate privileges locally.

Incorrect access control in the update function of RuoYi v4.8.2 allows unauthorized attackers to arbitrarily modify data outside of their scope.

Missing Authorization vulnerability in aguilatechnologies WP Customer Area customer-area allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Customer Area: fr

Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges locally.

Insufficient granularity of access control in Visual Studio allows an authorized attacker to disclose information locally.

Improper access control for some Intel(R) Arc™ & Iris(R) Xe graphics software before version 31.0.101.4032 may allow an authenticated user to potentially enable denial of service via local access.

Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally.