Privilege Defined With Unsafe Actions

Every one of the 73 is a mark on the map. Named now: 1 to 26, most at risk first.

1. VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)CVE-2025-41244VMware · CVSS 7.8 · 16% likely

   VMware

2. In Wing FTP Server through 7.4.4, the administrative web interface (listening by default on port 5466) runs as root or SYSTEM by default. The web application itself offers several…CVE-2025-47811wftpserver · CVSS 4.1 · 6.2% likely

   Wftpserver

3. Asterisk allows `Write=originate` as sufficient permissions for code execution / `System()` dialplanCVE-2024-42365asterisk · CVSS 7.4 · 4.7% likely

   Asterisk

4. A sandboxing issue in Odoo Community 11.0 through 13.0 and Odoo Enterprise 11.0 through 13.0, when running with Python 3.6 or later, allows remote authenticated users to execute a…CVE-2020-29396Odoo · CVSS 9.9 · 3.1% likely

   Odoo

5. A flaw was found in Keycloak’s user-managed access interface, where it would permit a script to be set in the UMA policy. This flaw allows an authenticated attacker with UMA permi…CVE-2019-10169Redhat · CVSS 6.6 · 1.3% likely

   Red Hat

6. Kiteworks MFT has a Privilege Defined With Unsafe ActionsCVE-2025-53900kiteworks · CVSS 6.5 · 1.2% likely

   Kiteworks

7. A flaw was found in the Keycloak admin console, where the realm management interface permits a script to be set via the policy. This flaw allows an attacker with authenticated use…CVE-2019-10170Redhat · CVSS 6.6 · 1.2% likely

   Red Hat

8. Results of queries for ApiListener objects include the ticket salt which allows in turn to steal (more privileged) identitiesCVE-2021-32739Icinga · CVSS 8.8 · 1.1% likely

   Icinga

9. An issue was discovered in DTEX DEC-M (DTEX Forwarder) 6.1.1. The com.dtexsystems.helper service, responsible for handling privileged operations within the macOS DTEX Event Forwar…CVE-2024-55968CVSS 8.8 · 1.0% likely
10. Ericssonlg iPECS Privilege Escalation VulnerabilityCVE-2020-7824Ericsson-LG · CVSS 6.5 · 1.0% likely

    Ericssonlg

11. Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actionsCVE-2025-23015Apache Software Foundation · CVSS 8.8 · 1.0% likely

    Apache

12. Privilege Defined With Unsafe Actions in pimcore/pimcoreCVE-2023-2983pimcore · CVSS 6.5 · 0.9% likely

    Pimcore

13. Odh-training-operator-rhel9: [trainer v2 security] trn-02: rhoai overlay aggregates trainjobs crud into standard edit clusterroleCVE-2026-18951Red Hat · CVSS 8.8 · 0.9% likely

    Red Hat

14. Sielco Radio Link and Analog FM Transmitters Privilege Defined With Unsafe ActionsCVE-2023-41966Sielco · CVSS 6.5 · 0.8% likely

    Sielco

15. An Improper Privilege Management vulnerability in SUSE Rancher allowed standard users to leverage their existing permissions to manipulate Kubernetes secrets in the local cluster,…CVE-2023-22647SUSE · CVSS 9.9 · 0.7% likely

    SUSE

16. A sandboxing issue in Odoo Community 15.0 and Odoo Enterprise 15.0 allows authenticated administrators to executed arbitrary code, leading to privilege escalation.CVE-2021-44547Odoo · CVSS 8.7 · 0.7% likely

    Odoo

17. A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to access and modify database contents of other tena…CVE-2021-23186Odoo · CVSS 8.7 · 0.6% likely

    Odoo

18. A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read and write local files on the server.CVE-2021-23166Odoo · CVSS 8.7 · 0.6% likely

    Odoo

19. Dell PowerScale OneFS, versions 8.2.2.x-9.5.0.x, contains an improper privilege management vulnerability. A remote attacker with low privileges could potentially exploit this vuln…CVE-2023-32457Dell · CVSS 7.5 · 0.6% likely

    Dell

20. A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.8), Teamcenter V13.0 (All versions < V13.0.0.7), Teamcenter V13.1 (All versions < V13.1.0.5), Teamc…CVE-2021-40354Siemens · 0.6% likely

    Siemens

21. Multicluster-operators-subscription: multicluster-operators-subscription: namespace edit user can deploy cluster-scoped clusterrolebinding and become cluster-admin via application…CVE-2026-10090Red Hat · CVSS 9 · 0.6% likelycovered by CyberSIXT

    Red Hat

22. Unwanted debug toolCVE-2022-38124Secomea · CVSS 5.7 · 0.5% likely

    Secomea

23. BIG-IP Appliance mode external monitor vulnerabilityCVE-2023-43746F5 · CVSS 8.7 · 0.5% likely

    F5

24. Privilege Defined With Unsafe Actions in GitLabCVE-2024-8631GitLab · CVSS 5.5 · 0.5% likely

    GitLab

25. Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions (4.0.16 only)CVE-2025-26467Apache Software Foundation · CVSS 8.8 · 0.5% likely

    Apache

26. A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read local files on the server, including sensiti…CVE-2021-44476Odoo · CVSS 6.8 · 0.5% likely

    Odoo

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.