CWE-282
CVEs classified under CWE-282, newest first.
3 CVEsRSS
CVE-2026-108304High· 7.8Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
▾ TwilightTanium · Endpoint Configuration Toolset Solutionvia CVEORG
CVE-2026-86769Medium· 4.3Snipe-IT versions before 8.7.0 contain an improper ownership management vulnerability in the consumables checkout API endpoint that records the checkout target user's id in the created_by column instead of the authenticated caller's id
Snipe-IT versions before 8.7.0 contain an improper ownership management vulnerability in the consumables checkout API endpoint that records the checkout target user's id in the created_by column instead of the authenticated caller's id. …
▾ Sunlitsnipeitapp · snipe-itEPSS 0.28%via NVD
CVE-2025-67642Medium· 4.3Jenkins HashiCorp Vault Plugin 371.v884a_4dd60fb_6 and earlier does not set the appropriate context for Vault credentials lookup, allowing attackers with Item/Configure permission to access and potentially capture Vault credentials they …
Jenkins HashiCorp Vault Plugin 371.v884a_4dd60fb_6 and earlier does not set the appropriate context for Vault credentials lookup, allowing attackers with Item/Configure permission to access and potentially capture Vault credentials they …
▾ Sunlitjenkins · hashicorp_vaultEPSS 0.23%via NVD