Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CWE-250 (带着不必要的权限执行) — Vulnerability Class 233

233 vulnerabilities classified as CWE-250 (带着不必要的权限执行). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2022-1517 3.2.1 EXECUTION WITH UNNECESSARY PRIVILEGES CWE-250 — NextSeq 550Dx 10.0 Critical2022-06-24
CVE-2022-32535 Web server runs as root — PRA-ES8P2S 4.8 Medium2022-06-22
CVE-2022-1808 Execution with Unnecessary Privileges in polonel/trudesk — polonel/trudesk 8.8 -2022-05-31
CVE-2022-30695 Local privilege escalation due to excessive permissions assigned to child processes — Acronis Snap Deploy 7.8 -2022-05-16
CVE-2021-34591 Bender Charge Controller: Local privilege Escalation — CC612 7.8 High2022-04-27
CVE-2022-0071 Hotdog Container Escape — Hotdog 8.8 High2022-04-19
CVE-2022-0070 Log4j hot patch package privilege escalation — log4j-cve-2021-44228-hotpatch 8.8 High2022-04-19
CVE-2021-3101 Hotdog Container Escape — Hotdog 8.8 High2022-04-19
CVE-2021-3100 Log4j hot patch package privilege escalation — log4j-cve-2021-44228-hotpatch 8.8 High2022-04-19
CVE-2022-20676 Cisco IOS XE Software Tool Command Language Privilege Escalation Vulnerability — Cisco IOS XE Software 5.1 Medium2022-04-15
CVE-2022-27578 SICK OEE 安全漏洞 — SICK Overall Equipment Effectiveness 7.8 -2022-04-11
CVE-2022-24113 Local privilege escalation due to excessive permissions assigned to child processes — Acronis Cyber Protect 15 7.8 -2022-02-04
CVE-2021-36339 Dell EMC Unisphere for PowerMax 安全漏洞 — Solutions Enabler vApp 7.8 High2022-01-21
CVE-2022-21699 Execution with Unnecessary Privileges in ipython — ipython 8.2 High2022-01-19
CVE-2021-34998 Panda Security Free Antivirus 权限许可和访问控制问题漏洞 — Free Antivirus 7.8 -2022-01-13
CVE-2021-1118 NVIDIA vGPU Software 安全漏洞 — NVIDIA Virtual GPU Software 7.8 High2021-10-29
CVE-2021-3576 Privilege escalation via SeImpersonatePrivilege — Endpoint Security Tools 7.8 High2021-10-28
CVE-2021-41035 Eclipse Openj9 安全漏洞 — Eclipse OMR 9.1 -2021-10-25
CVE-2021-37174 Siemens RUGGEDCOM 授权问题漏洞 — RUGGEDCOM ROX MX5000 7.5 -2021-09-14
CVE-2021-1579 Cisco Application Policy Infrastructure Controller App Privilege Escalation Vulnerability — Cisco Application Policy Infrastructure Controller (APIC) 8.1 High2021-08-25
CVE-2021-25653 Avaya Aura Appliance Virtualization Platform Utilities Privilege Escalation Vulnerability — Avaya Aura Appliance Virtualization Platform Utilities 8.0 High2021-06-24
CVE-2021-25651 Avaya Aura Utility Services Privilege Escalation Vulnerability — Avaya Aura Utility Services 8.0 High2021-06-24
CVE-2021-25650 Avaya Aura Utility Services Privilege Escalation Vulnerability — Avaya Aura Utility Services 7.7 High2021-06-24
CVE-2021-1528 Cisco SD-WAN Software Privilege Escalation Vulnerability — Cisco SD-WAN Solution 7.8 High2021-06-04
CVE-2020-27826 Red Hat Keycloak 安全漏洞 — keycloak 5.9 -2021-05-28
CVE-2021-0256 Junos OS: mosquitto Local Privilege Escalation vulnerability in SUID binaries — Junos OS 5.5 Medium2021-04-22
CVE-2021-0255 Junos OS: ethtraceroute Local Privilege Escalation vulnerability in SUID binaries — Junos OS 5.5 Medium2021-04-22
CVE-2021-27448 Grid Solutions GE MU320E 安全漏洞 — MU320E 7.8 -2021-03-25
CVE-2021-27454 Grid Solutions GE Reason DR60 安全漏洞 — Reason DR60 9.8 -2021-03-25
CVE-2020-26278 Weave Net Pods running in host PID namespace can be used to escalate other Kubernetes vulnerabilities — weave 5.8 Medium2021-01-20

Vulnerabilities classified as CWE-250 (带着不必要的权限执行) represent 233 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.