VulnSea

CWE-250

CVEs classified under CWE-250, newest first.

41 CVEsRSS

CVE-2026-32673High· 8.7
4mo ago

A vulnerability exists in BIG-IP scripted monitors that may allow an authenticated attacker with the Resource Administrator or Administrator role to execute arbitrary system commands with higher privileges

A vulnerability exists in BIG-IP scripted monitors that may allow an authenticated attacker with the Resource Administrator or Administrator role to execute arbitrary system commands with higher privileges. In appliance mode deployments,…

▾ TwilightEPSS 0.41%via NVD
CVE-2026-32643High· 8.7
4mo ago

A vulnerability exists in BIG-IP and BIG-IQ systems where a highly privileged, authenticated attacker with at least the Certificate Manager role can modify configuration objects that allow running arbitrary commands.  Note: Software vers…

A vulnerability exists in BIG-IP and BIG-IQ systems where a highly privileged, authenticated attacker with at least the Certificate Manager role can modify configuration objects that allow running arbitrary commands.  Note: Software vers…

▾ TwilightEPSS 0.26%via NVD
CVE-2026-4498High· 7.7
5mo ago

Execution with Unnecessary Privileges (CWE-250) in Kibana’s Fleet plugin debug route handlers can lead reading index data beyond their direct Elasticsearch RBAC scope via Privilege Abuse (CAPEC-122)

Execution with Unnecessary Privileges (CWE-250) in Kibana’s Fleet plugin debug route handlers can lead reading index data beyond their direct Elasticsearch RBAC scope via Privilege Abuse (CAPEC-122). This requires an authenticated Kibana…

▾ Twilightelastic · kibanaEPSS 0.50%via NVD
CVE-2026-1346Critical· 9.3
5mo ago

IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 could allow a…

IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 could allow a…

▾ Midnightibm · security_verify_accessEPSS 0.23%via NVD
CVE-2025-34290None
9mo ago

Versa SASE Client for Windows versions released between 7.8.7 and 7.9.4 contain a local privilege escalation vulnerability in the audit log export functionality

Versa SASE Client for Windows versions released between 7.8.7 and 7.9.4 contain a local privilege escalation vulnerability in the audit log export functionality. The client communicates user-controlled file paths to a privileged service,…

▾ SunlitEPSS 0.11%via NVD
CVE-2025-13911Medium· 6.4
9mo ago

Ignition by Inductive Automation, when installed with default OS service account settings, may expose the host system to an elevated code execution risk via the gateway backup restore functionality

Ignition by Inductive Automation, when installed with default OS service account settings, may expose the host system to an elevated code execution risk via the gateway backup restore functionality. An authenticated user with Gateway …

▾ SunlitEPSS 0.25%via NVD
CVE-2025-67510Critical· 9.4
9mo ago

Neuron is a PHP framework for creating and orchestrating AI Agents

Neuron is a PHP framework for creating and orchestrating AI Agents. In versions 2.8.11 and below, the MySQLWriteTool executes arbitrary SQL provided by the caller using PDO::prepare() + execute() without semantic restrictions. This is co…

▾ Midnightneuron-ai · neuronEPSS 0.41%via NVD
CVE-2025-6019High· 7.0PoC
1y ago

A Local Privilege Escalation (LPE) vulnerability was found in libblockdev

A Local Privilege Escalation (LPE) vulnerability was found in libblockdev. Generally, the "allow_active" setting in Polkit permits a physically present user to take certain actions based on the session type. Due to the way libblockdev in…

▾ MidnightEPSS 0.47%via NVD
CVE-2025-0416None
1y ago

Local privilege escalation through insecure DCOM configuration in Valmet DNA versions prior to C2023. The DCOM object Valmet DNA Engineering has permissions that allow it to run commands as a user with the SeImpersonatePrivilege privileg…

Local privilege escalation through insecure DCOM configuration in Valmet DNA versions prior to C2023. The DCOM object Valmet DNA Engineering has permissions that allow it to run commands as a user with the SeImpersonatePrivilege privileg…

▾ SunlitEPSS 0.21%via NVD
CVE-2024-7387Critical· 9.1
2y ago

A flaw was found in openshift/builder

A flaw was found in openshift/builder. This vulnerability allows command injection via path traversal, where a malicious user can execute arbitrary commands on the OpenShift node running the builder container. When using the “Docker” str…

▾ MidnightEPSS 2.3%via NVD
CVE-2024-5042Medium· 6.6
2y ago

A flaw was found in the Submariner project

A flaw was found in the Submariner project. Due to unnecessary role-based access control permissions, a privileged attacker can run a malicious container on a node that may allow them to steal service account tokens and further compromis…

▾ SunlitRed Hat · submariner-operatorEPSS 0.51%via NVD
CWE-250 vulnerabilities (CVEs) — page 2 · VulnSea