Vulnerabilities (CVE)

Filtered by CWE-269
Total 2550 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-48757 2026-06-17 N/A 8.8 HIGH
Improper Privilege Management vulnerability in Crocoblock JetEngine allows Privilege Escalation.This issue affects JetEngine: from n/a through 3.2.4.
CVE-2023-48406 1 Google 1 Android 2026-06-17 N/A 6.7 MEDIUM
there is a possible permanent DoS or way for the modem to boot unverified firmware due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2023-48319 1 Salonbookingsystem 1 Salon Booking System 2026-06-17 N/A 6.8 MEDIUM
Improper Privilege Management vulnerability in Salon Booking System Salon booking system allows Privilege Escalation.This issue affects Salon booking system: from n/a through 8.6.
CVE-2023-48171 1 Owasp 1 Defectdojo 2026-06-17 N/A 8.8 HIGH
An issue in OWASP DefectDojo before v.1.5.3.1 allows a remote attacker to escalate privileges via the user permissions component.
CVE-2023-47868 1 Gvectors 1 Wpforo Forum 2026-06-17 N/A 7.3 HIGH
Improper Privilege Management vulnerability in wpForo wpForo Forum allows Privilege Escalation.This issue affects wpForo Forum: from n/a through 2.2.3.
CVE-2023-47837 1 Reputeinfosystems 1 Armember 2026-06-17 N/A 8.3 HIGH
Improper Privilege Management vulnerability in Repute Infosystems ARMember allows Privilege Escalation.This issue affects ARMember: from n/a through 4.0.10.
CVE-2023-47782 2026-06-17 N/A 8.8 HIGH
Improper Privilege Management vulnerability in Thrive Themes Thrive Theme Builder allows Privilege Escalation.This issue affects Thrive Theme Builder: from n/a before 3.24.0.
CVE-2023-47715 1 Ibm 1 Storage Protect Plus 2026-06-17 N/A 4.3 MEDIUM
IBM Storage Protect Plus Server 10.1.0 through 10.1.16 could allow an authenticated user with read-only permissions to add or delete entries from an existing HyperVisor configuration. IBM X-Force ID: 271538.
CVE-2023-47683 2026-06-17 N/A 8.0 HIGH
Improper Privilege Management vulnerability in miniOrange WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) allows Privilege Escalation.This issue affects WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn): from n/a through 7.6.6.
CVE-2023-47682 2026-06-17 N/A 7.2 HIGH
Improper Privilege Management vulnerability in weDevs WP User Frontend allows Privilege Escalation.This issue affects WP User Frontend: from n/a through 3.6.5.
CVE-2023-47267 1 Thegreenbow 1 Thegreenbow Vpn Client 2026-06-17 N/A 9.8 CRITICAL
An issue discovered in TheGreenBow Windows Enterprise Certified VPN Client 6.52, Windows Standard VPN Client 6.87, and Windows Enterprise VPN Client 6.87 allows attackers to gain escalated privileges via crafted changes to memory mapped file.
CVE-2023-47201 1 Trendmicro 1 Apex One 2026-06-17 N/A 7.8 HIGH
A plug-in manager origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar to, but not identical to, CVE-2023-47200.
CVE-2023-47145 2 Ibm, Microsoft 2 Db2, Windows 2026-06-17 N/A 8.4 HIGH
IBM Db2 for Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 could allow a local user to escalate their privileges to the SYSTEM user using the MSI repair functionality. IBM X-Force ID: 270402.
CVE-2023-47132 1 N-able 1 N-central 2026-06-17 N/A 9.8 CRITICAL
An issue discovered in N-able N-central before 2023.6 and earlier allows attackers to gain escalated privileges via API calls.
CVE-2023-47101 1 Securepoint 1 Openvpn-client 2026-06-17 N/A 7.8 HIGH
The installer (aka openvpn-client-installer) in Securepoint SSL VPN Client before 2.0.40 allows local privilege escalation during installation or repair.
CVE-2023-46810 2 Ivanti, Linux 2 Secure Access Client, Linux Kernel 2026-06-17 N/A 7.3 HIGH
A local privilege escalation vulnerability in Ivanti Secure Access Client for Linux before 22.7R1, allows a low privileged user to execute code as root.
CVE-2023-46756 1 Huawei 2 Emui, Harmonyos 2026-06-17 N/A 5.3 MEDIUM
Permission control vulnerability in the window management module. Successful exploitation of this vulnerability may cause malicious pop-up windows.
CVE-2023-46647 1 Github 1 Enterprise Server 2026-06-17 N/A 8.0 HIGH
Improper privilege management in all versions of GitHub Enterprise Server allows users with authorized access to the management console with an editor role to escalate their privileges by making requests to the endpoint used for bootstrapping the instance. This vulnerability affected GitHub Enterprise Server version 3.8.0 and above and was fixed in version 3.8.12, 3.9.6, 3.10.3, and 3.11.0.
CVE-2023-46277 1 Edneville 1 Please 2026-06-17 N/A 7.8 HIGH
please (aka pleaser) through 0.5.4 allows privilege escalation through the TIOCSTI and/or TIOCLINUX ioctl. (If both TIOCSTI and TIOCLINUX are disabled, this cannot be exploited.)
CVE-2023-46145 1 Themify 1 Ultra 2026-06-17 N/A 8.8 HIGH
Improper Privilege Management vulnerability in Themify Themify Ultra allows Privilege Escalation.This issue affects Themify Ultra: from n/a through 7.3.5.