Improper Handling of Insufficient Permissions or Privileges

Every one of the 204 is a mark on the map. Named now: 1 to 26, most at risk first.

1. there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interacti…CVE-2024-29748Google · CVSS 7.8 · 0.7% likely

   Google

2. Ruijie RG-NBS2009G-P - Improper AuthenticationCVE-2024-24116Ruijie · CVSS 9.8 · 28% likely

   Ruijie

3. Windows Error Reporting Service Elevation of Privilege VulnerabilityCVE-2026-20817Microsoft · CVSS 7.8 · 5.4% likely

   Microsoft

4. An insufficient permission check vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to change the password of a full administrator.CVE-2020-8219Ivanti · 2.2% likely

   Ivanti

5. Jboss enterprise application platform: jboss eap: jbeap: jboss enterprise application platform: unauthorized ejb access via authorization module bypassCVE-2012-4550Red Hat · CVSS 5.3 · 2.1% likely

   Red Hat

6. Dell EMC PowerScale OneFS versions 8.1.2 – 9.1.0 contain an issue where the OneFS SMB directory auto-create may erroneously create a directory for a user. A remote unauthenticated…CVE-2020-26195Dell · CVSS 5.3 · 1.8% likely

   Dell

7. A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0). Due to insufficient checking of user permissions, an attacker may access URLs that requi…CVE-2019-6570Siemens · 1.3% likely

   Siemens

8. The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.6.3, macOS Sonoma 14.2, macOS Monterey 12.7.2. A process may gain admin privileges without pr…CVE-2023-42931Apple · CVSS 8.3 · 1.2% likely

   Apple

9. Insecure Direct Object Reference vulnerability in HYPR Server before version 6.14.1 allows remote authenticated attackers to add a FIDO2 authenticator to arbitrary accounts via pa…CVE-2022-2193HYPR · CVSS 7.5 · 1.0% likely

   HYPR

10. Search Guard versions before 24.3 had an issue when Cross Cluster Search (CCS) was enabled, authenticated users can gain read access to data they are not authorized to see.CVE-2019-13415floragunn · 1.0% likely

    Floragunn

11. Samba: vfs_worm does not block directory modificationCVE-2026-2340Red Hat · CVSS 6.5 · 0.9% likely

    Red Hat

12. Microsoft Dataverse Elevation of Privilege VulnerabilityCVE-2025-29826Microsoft · CVSS 7.3 · 0.9% likely

    Microsoft

13. Insecure Direct Object Reference in GateManager WebUI can cause privilege escalationCVE-2020-29031Secomea · CVSS 7.1 · 0.8% likely

    Secomea

14. A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.14.1), RUGGEDCOM ROX RX1400 (All versions < V2.14.1), RUGGEDCOM ROX RX1500 (All versions < V2.14.1),…CVE-2021-37175Siemens · 0.8% likely

    Siemens

15. Improper Handling of Insufficient Permissions or Privileges in usememos/memosCVE-2022-4863usememos · CVSS 8.4 · 0.7% likely

    Usememos

16. Improper preservation of permissions in Nextcloud Server 14.0.3 causes the event details to be leaked when sharing a non-public event.CVE-2020-8117Nextcloud · 0.7% likely

    Nextcloud

17. Insufficient authorization allowing elevated access to resources in pixelfedCVE-2024-25108pixelfed · CVSS 9.9 · 0.7% likely

    Pixelfed

18. Improper handling of insufficient permissions or privileges vulnerability in Samsung Data Store prior to version 5.2.00.7 allows remote attackers to access location information wi…CVE-2023-42578Samsung Mobile · CVSS 6.5 · 0.7% likely

    Samsung

19. An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. Privilege escalation can occur via world writable files. The network configuration script…CVE-2024-22078Elspec-Ltd · CVSS 8.8 · 0.6% likely

    Elspec-Ltd

20. Permissions vulnerabiltiy found in Xuxueli xxl-job v2.2.0, v 2.3.0 and v.2.3.1 allows attacker to obtain sensitive information via the pageList parameter.CVE-2023-27087Xuxueli · CVSS 7.5 · 0.6% likely

    Xuxueli

21. Microsoft Dynamics 365 (on-premises) Elevation of Privilege VulnerabilityCVE-2026-40371Microsoft · CVSS 8.8 · 0.6% likely

    Microsoft

22. Improper File Access in Infinera G42CVE-2025-27025Infinera · CVSS 8.8 · 0.6% likely

    Infinera

23. Apache Allura: Missing permission checks IDORCVE-2026-73239Apache Software Foundation · CVSS 6.5 · 0.6% likely

    Apache

24. BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin <= 1.1.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update and Arbitr…CVE-2024-6660reputeinfosystems · CVSS 8.8 · 0.6% likely

    Repute Infosystems

25. Dell PowerScale OneFS 8.2.x, 9.0.0.x-9.5.0.x contains an improper handling of insufficient permissions. A low privileged remote attacker could potentially exploit this vulnerabili…CVE-2023-43087Dell · CVSS 4.3 · 0.6% likely

    Dell

26. Improper handling of insufficient permissions or privileges vulnerability exists in ajaxterm module of Webmin prior to 2.003. If this vulnerability is exploited, a console session…CVE-2024-36451Webmin · CVSS 8.8 · 0.6% likely

    Webmin

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.