TYPE DE FAIBLESSE

CWE-274

16 CVE, des plus récentes aux plus anciennes. Définition MITRE de CWE-274 (en anglais) →

CVE-2026-62764Les versions 2.1.4 et 2.1.5 d'Apache Accumulo sont affectées par une faille qui permet à un utilisateur authentifié disposant de privilèges limités d'arrêter à distance des composa… 5.7 MOYENNE

CVE-2025-54511Les systèmes utilisant le processeur sécurisé AMD (ASP) sont affectés par une faille dans la manière dont le processeur gère les vérifications de privilèges. Un attaquant disposant… 5.3 MOYENNE

CVE-2026-33005Les versions d'Apache OpenMeetings antérieures à la 9.0.0 permettent à tout utilisateur enregistré d'accéder aux métadonnées de fichiers et de sous-dossiers pour lesquels il ne dev… 4.3 MOYENNE

CVE-2025-62175Mastodon is a free, open-source social network server based on ActivityPub. In versions before 4.4.6, 4.3.14, and 4.2.27, disabling or suspending a user account does not disconnect… 4.3 MOYENNE

CVE-2025-31275A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6. A sandboxed process may be able to launch any installed app. 6.2 MOYENNE

CVE-2025-20177A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker to bypass Cisco IOS XR image signature verification and load unverified so… 6.7 MOYENNE

CVE-2024-12666A vulnerability has been found in ClassCMS up to 4.8 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin?do=admin:user:editPos… 5.1 MOYENNE

CVE-2024-20324A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, low-privileged, local attacker to access WLAN configuration details including passwords. This v… 5.5 MOYENNE

CVE-2023-32494 Dell PowerScale OneFS, 8.0.x-9.5.x, contains an improper handling of insufficient privileges vulnerability. A local privileged attacker could potentially exploit this vulnerabili… 6.7 MOYENNE

CVE-2022-0668JFrog Artifactory prior to 7.37.13 is vulnerable to Authentication Bypass, which can lead to Privilege Escalation when a specially crafted request is sent by an unauthenticated use… 5.3 MOYENNE

CVE-2022-25782Improper Handling of Insufficient Privileges vulnerability in Web UI of Secomea GateManager allows logged in user to access and update privileged information. This issue affects: S… 5.4 MOYENNE

CVE-2022-23160Dell PowerScale OneFS, versions 8.2.0-9.3.0, contains an Improper Handling of Insufficient Permissions vulnerability. An remote malicious user could potentially exploit this vulner… 5.4 MOYENNE

CVE-2021-32006This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions. Permission Issues vulnerability in LinkManager web portal of Secomea GateManager allows logged… 5.0 MOYENNE

CVE-2017-3912Bypassing password security vulnerability in McAfee Application and Change Control (MACC) 7.0.1 and 6.2.0 allows authenticated users to perform arbitrary command execution via a co… 4.4 MOYENNE

CVE-2018-6693An unprivileged user can delete arbitrary files on a Linux system running ENSLTP 10.5.1, 10.5.0, and 10.2.3 Hotfix 1246778 and earlier. By exploiting a time of check to time of use… 5.3 MOYENNE

CVE-2018-6674Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 13 allows local users to spawn unrelated process… 6.8 MOYENNE