Incorrect Use of Privileged APIs

Every one of the 71 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Cisco Identity Services Engine - ise-kong API Gateway Authentication BypassCVE-2026-76460Cisco · CVSS 10 · 76% likelycovered by CyberSIXT

   Cisco8 articles

2. Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite VulnerabilityCVE-2026-20122Cisco · CVSS 5.4 · 26% likelycovered by CyberSIXT

   Cisco

3. A flaw was found in ghostscript, versions 9.x before 9.50, in the setsystemparams procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSA…CVE-2019-14813Artifex Software · CVSS 7.3 · 11% likely

   Artifex

4. KL-001-2025-012: Xorux XorMon-NG Read Only User Export Device Configuration Exposing Sensitive InformationCVE-2025-54766Xorux · CVSS 5.3 · 10% likely

   Xorux

5. KL-001-2025-013: Xorux XorMon-NG Web Application Privilege Escalation to AdministratorCVE-2025-54765Xorux · CVSS 5.3 · 10% likely

   Xorux

6. WhatsUp Gold Registry Overwrite Remote Code Execution VulnerabilityCVE-2024-8785Progress Software Corporation · CVSS 9.8 · 9.7% likely

   Progress Software

7. KL-001-2025-014: Xorux LPAR2RRD Read Only User Denial of ServiceCVE-2025-54767Xorux · CVSS 6.5 · 8.5% likely

   Xorux

8. KL-001-2025-015: Xorux LPAR2RRD Read Only User Log Download Exposing Sensitive InformationCVE-2025-54768Xorux · CVSS 5.3 · 5.9% likely

   Xorux

9. Fred MODX Revolution < 1.0.0-beta5 is affected by: Incorrect Access Control - CWE-648. The impact is: Remote Code Execution. The component is: assets/components/fred/web/elfinder/…CVE-2019-1010178Fred · 4.6% likely
10. A flaw was found in, ghostscript versions prior to 9.50, in the .pdf_hook_DSC_Creator procedure where it did not properly secure its privileged calls, enabling scripts to bypass `…CVE-2019-14811Artifex Software · CVSS 7.3 · 3.7% likely

    Artifex

11. Incorrect Use of Privileged APIs in polonel/trudeskCVE-2022-2023polonel · CVSS 10 · 3.3% likely

    Polonel

12. A flaw was found in all versions of ghostscript 9.x before 9.50, where the `.charkeys` procedure, where it did not properly secure its privileged calls, enabling scripts to bypass…CVE-2019-14869Ghostscript · CVSS 7.3 · 3.1% likely

    Ghostscript

13. It was found that the forceput operator could be extracted from the DefineResource method in ghostscript before 9.27. A specially crafted PostScript file could use this flaw in or…CVE-2019-3838The ghostscript Project · CVSS 7.3 · 2.5% likely

    Ghostscript

14. It was found that the superexec operator was available in the internal dictionary in ghostscript before 9.27. A specially crafted PostScript file could use this flaw in order to,…CVE-2019-3835The ghostscript Project · CVSS 7.3 · 2.5% likely

    Ghostscript

15. A flaw was found in all ghostscript versions 9.x before 9.50, in the .setuserparams2 procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-…CVE-2019-14812Red Hat · CVSS 7.3 · 2.5% likely

    Red Hat

16. In ghostscript before version 9.50, the .buildfont1 procedure did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. An attacker could ab…CVE-2019-10216ghostscript · CVSS 7.3 · 2.3% likely

    Ghostscript

17. A flaw was found in, ghostscript versions prior to 9.50, in the .pdfexectoken and other procedures where it did not properly secure its privileged calls, enabling scripts to bypas…CVE-2019-14817Artifex Software · CVSS 7.3 · 2.0% likely

    Artifex

18. It was found that in ghostscript some privileged operators remained accessible from various places after the CVE-2019-6116 fix. A specially crafted PostScript file could use this…CVE-2019-3839The ghostscript Project · CVSS 7.3 · 1.7% likely

    Ghostscript

19. A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to bypass authorization and access syst…CVE-2022-20956Cisco · CVSS 7.1 · 1.5% likely

    Cisco

20. D-Link DSL6740C - Incorrect Use of Privileged APIsCVE-2024-11068D-Link · CVSS 9.8 · 1.2% likely

    D-Link

21. Potential privilege escalation in Ops Manager APICVE-2020-7927MongoDB Inc. · CVSS 8.1 · 1.0% likely

    MongoDB

22. Privilege escalation in setuid mode via user namespaces in BubblewrapCVE-2020-5291containers · CVSS 7.2 · 0.9% likely

    Containers Project

23. org.xwiki.platform:xwiki-platform-oldcore makes Incorrect Use of Privileged APIs with DocumentAuthorsCVE-2023-29507xwiki · CVSS 9.1 · 0.9% likely

    Xwiki

24. Incorrect Use of Privileged APIs in usememos/memosCVE-2022-4796usememos · CVSS 8.1 · 0.8% likely

    Usememos

25. Incorrect Use of Privileged APIs in org.xwiki.platform.skin.skinxCVE-2022-24821xwiki · CVSS 6.8 · 0.8% likely

    Xwiki

26. Dell PPDM versions 19.12, 19.11 and 19.10, contain an improper access control vulnerability. A remote authenticated malicious user with low privileges could potentially exploit th…CVE-2023-28062Dell · CVSS 8.8 · 0.8% likely

    Dell

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.