Access Control

Every one of the 26 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Harbor <=1.82.0 - Privilege EscalationCVE-2019-16097Linuxfoundation · 22% likely

   CWE-862

2. cups-browsed in cups-filters before 1.0.53 allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging a malformed cups-browsed.con…CVE-2014-4338Linuxfoundation · 3.0% likely

   CWE-264

3. Harbor API has a Broken Access Control vulnerability. The vulnerability allows project administrators to use the Harbor API to create a robot account with unauthorized push and/or…CVE-2019-16919Linuxfoundation · 1.7% likely

   CWE-276

4. An issue was discovered in FRRouting FRR (aka Free Range Routing) through 7.3.1. When using the split-config feature, the init script creates an empty config file with world-reada…CVE-2020-12831Linuxfoundation · 1.4% likely

   CWE-732

5. NATS nats-server before 2.7.2 has Incorrect Access Control. Any authenticated user can obtain the privileges of the System account by misusing the "dynamically provisioned sandbox…CVE-2022-24450Linuxfoundation · 1.3% likely

   CWE-862

6. A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manilla share or entire file system. The vulnerability is due to…CVE-2022-0670Linuxfoundation · 1.3% likely

   CWE-863

7. Harbor 1.9.* 1.10.* and 2.0.* allows Exposure of Sensitive Information to an Unauthorized Actor.CVE-2020-13794Linuxfoundation · 1.3% likely

   CWE-862

8. A User Enumeration flaw exists in Harbor. The issue is present in the "/users" API endpoint. This endpoint is supposed to be restricted to administrators. This restriction is able…CVE-2019-3990Linuxfoundation · 1.0% likely

   CWE-269

9. Authentication vulnerability in MOSN v.0.23.0 allows attacker to escalate privileges via case-sensitive JWT authorization.CVE-2021-32163Linuxfoundation · CVSS 9.8 · 0.9% likely

   CWE-863

10. NATS nats-server before 2.9.23 and 2.10.x before 2.10.2 has an authentication bypass. An implicit $G user in an authorization block can sometimes be used for unauthenticated acces…CVE-2023-47090Linuxfoundation · 0.8% likely

    CWE-863

11. An authorization bypass vulnerability was found in Ceph versions 15.2.0 before 15.2.2, where the ceph-mon and ceph-mgr daemons do not properly restrict access, resulting in gainin…CVE-2020-10736Linuxfoundation · CVSS 8 · 0.6% likely

    CWE-285

12. Harbor fails to validate the user permissions when updating tag retention policiesCVE-2022-31670Linuxfoundation · CVSS 7.7 · 0.5% likely

    CWE-285

13. Harbor fails to validate the user permissions when reading and updating job execution logs through the P2P preheat execution logsCVE-2022-31671Linuxfoundation · CVSS 7.4 · 0.5% likely

    CWE-285

14. Harbor fails to validate the user permissions when updating a robot accountCVE-2022-31667Linuxfoundation · CVSS 6.4 · 0.5% likely

    CWE-285

15. CubeFS through 3.2.1 allows Kubernetes cluster-level privilege escalation. This occurs because DaemonSet has cfs-csi-cluster-role and can thus list all secrets, including the admi…CVE-2023-30512Linuxfoundation · CVSS 6.5 · 0.5% likely

    CWE-732

16. Insecure permissions in pipecd v0.49 allow attackers to gain access to the service account's token, leading to escalation of privileges.CVE-2024-53351Linuxfoundation · CVSS 9.8 · 0.5% likely

    CWE-276

17. Harbor fails to validate user permissions while Viewing, updating and deleting Webhook policiesCVE-2022-31666Linuxfoundation · CVSS 7.7 · 0.5% likely

    CWE-285

18. Harbor fails to validate the user permissions when updating tag immutability policiesCVE-2022-31669Linuxfoundation · CVSS 6.4 · 0.4% likely

    CWE-285

19. Insecure permissions in kuadrant v0.11.3 allow attackers to gain access to the service account's token, leading to escalation of privileges via the secretes component in the k8s c…CVE-2024-53349Linuxfoundation · CVSS 7.4 · 0.4% likely

    CWE-269

20. A flaw was found in the way KVM hypervisor handled x2APIC Machine Specific Rregister (MSR) access with nested(=1) virtualization enabled. In that, L1 guest could access L0's APIC…CVE-2019-3887The Linux Foundation · CVSS 6.7 · 0.4% likely

    CWE-863

21. The OPVPWrapper::loadDriver function in oprs/OPVPWrapper.cxx in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allows local users to gain privileges via a Trojan hors…CVE-2013-6476Linuxfoundation · 0.3% likely

    CWE-264

22. User permission validation failure and disclosure of P2P preheat execution logsCVE-2022-31668Linuxfoundation · CVSS 7.4 · 0.3% likely

    CWE-285

23. A flaw was found in the Open Cluster Management (OCM) when a user have access to the worker nodes which has the cluster-manager-registration-controller or cluster-manager deployme…CVE-2023-2250Linuxfoundation · CVSS 6.7 · 0.2% likely

    CWE-268

24. AGL app-framework-binder (afb-daemon) through v19.90.0 contains a privilege escalation vulnerability in the supervision Do command. The on_supervision_call function in src/afb-sup…CVE-2026-37525Linuxfoundation · CVSS 7.8 · 0.1% likely

    CWE-269

25. AGL app-framework-binder (afb-daemon) through v19.90.0 allows any local process to execute privileged supervision commands (Exit, Do, Sclose, Config, Trace, Debug, Token, slist) w…CVE-2026-37526Linuxfoundation · CVSS 7.8 · 0.1% likely

    CWE-284

26. Linux Foundation Magma Host Middleware middleware.ts hostOrgMiddleware authorizationCVE-2026-129357Linux Foundation · CVSS 6.3

    CWE-862

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.