Improper Handling of Insufficient Privileges

Every one of the 38 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Insufficient Security Control VulnerabilityCVE-2021-35534Hitachi Energy · CVSS 7.2 · 1.8% likely

   Hitachi Energy

2. Cisco Meeting Management Client-Server Privilege Escalation VulnerabilityCVE-2025-20156Cisco · CVSS 9.9 · 1.2% likely

   Cisco

3. Nextcloud user scoped external storage can be used to gather credentials of other usersCVE-2023-35928nextcloud · CVSS 8.5 · 1.0% likely

   Nextcloud1 bounty report

4. Dell PowerScale OneFS 9.0.0.x - 9.4.0.x, contains an Improper Handling of Insufficient Privileges vulnerability in NFS. A remote unauthenticated attacker could potentially exploit…CVE-2022-45101Dell · CVSS 7.3 · 0.9% likely

   Dell

5. Apache Accumulo: A user can trigger a graceful shutdown of services without the relevant system permissionsCVE-2026-62764Apache Software Foundation · CVSS 5.7 · 0.8% likely

   Apache

6. SiberianCMS - CWE-274: Improper Handling of Insufficient PrivilegesCVE-2023-39375SiberianCMS · CVSS 7.5 · 0.8% likely

   SiberianCMS

7. JFrog Artifactory prior to 7.37.13 is vulnerable to Authentication Bypass, which can lead to Privilege Escalation when a specially crafted request is sent by an unauthenticated us…CVE-2022-0668JFrog · CVSS 5.3 · 0.7% likely

   JFrog

8. GateManager information leak for LinkManager UsersCVE-2021-32006Secomea · CVSS 5 · 0.6% likely

   Secomea

9. Privilege Escalation vulnerability in McAfee Total Protection (MTP)CVE-2020-7283McAfee,LLC · CVSS 7.5 · 0.6% likely

   Mcafee

10. JupyterHub has a privilege escalation vulnerability with the `admin:users` scopeCVE-2024-41942jupyterhub · CVSS 7.2 · 0.6% likely

    Jupyterhub

11. ClassCMS User Management Page admin insufficient privilegesCVE-2024-12666Classcms · CVSS 4.7 · 0.5% likely

    Classcms

12. A privilege escalation issue exists within the Amazon CloudWatch Agent for Windows, software for collecting metrics and logs from Amazon EC2 instances and on-premises servers, in…CVE-2022-23511aws · CVSS 7.1 · 0.5% likely

    AWS

13. Dell PowerScale OneFS, versions 8.2.0-9.3.0, contains an Improper Handling of Insufficient Permissions vulnerability. An remote malicious user could potentially exploit this vulne…CVE-2022-23160Dell · CVSS 5.4 · 0.5% likely

    Dell

14. XWiki has no right protection on rollback actionCVE-2024-21648xwiki · CVSS 8 · 0.5% likely

    Xwiki

15. Insufficient privilege checks on object access and updates.CVE-2022-25782Secomea · CVSS 5.4 · 0.5% likely

    Secomea

16. Insecure Windows Services in Symphony PlusCVE-2020-24676ABB · CVSS 7.8 · 0.4% likely

    ABB

17. Apache OpenMeetings: Insufficient checks in FileWebServiceCVE-2026-33005Apache Software Foundation · CVSS 4.3 · 0.4% likely

    Apache

18. McAfee Application Control and Change Control (MACC) - password management security feature bypass (SFB) leading to an authentication bypassCVE-2017-3912McAfee · CVSS 4.4 · 0.4% likely

    Mcafee

19. Privilege Escalation vulnerability in MAR for WindowsCVE-2020-7289McAfee,LLC · CVSS 7.8 · 0.3% likely

    Mcafee

20. NVIDIA ConnectX Firmware contains a vulnerability where an attacker may cause an improper handling of insufficient privileges issue. A successful exploit of this vulnerability may…CVE-2024-0105NVIDIA · CVSS 8.9 · 0.3% likely

    NVIDIA

21. Privilege Escalation vulnerability through symbolic links in VSELCVE-2020-7267McAfee,LLC · CVSS 8.8 · 0.3% likely

    Mcafee

22. Privilege Escalation vulnerability through symbolic links in ENSMCVE-2020-7265McAfee,LLC · CVSS 8.8 · 0.3% likely

    Mcafee

23. Privilege Escalation vulnerability through symbolic links in ENS for WindowsCVE-2020-7264McAfee,LLC · CVSS 8.8 · 0.3% likely

    Mcafee

24. Privilege Escalation vulnerability through symbolic links in VSE for WindowsCVE-2020-7266McAfee,LLC · CVSS 8.8 · 0.3% likely

    Mcafee

25. Privilege Escalation vulnerability in MAR for LinuxCVE-2020-7290McAfee,LLC · CVSS 7.8 · 0.3% likely

    Mcafee

26. Privilege Escalation vulnerability in EDR for LinuxCVE-2020-7287McAfee,LLC · CVSS 7.8 · 0.3% likely

    Mcafee

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.