Lucene search
+L

6053 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/05 12:00 a.m.•7 views

CVE-2025-58841: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in John Luetke Media Author media-author allows Privilege Escalation.This issue affects Media Author: from n/a through = 1.0.4...

5.5CVSS5.8AI score0.00318EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/09/05 12:00 a.m.•23 views

Rust Privilege Escalation

The vulnerability of the Rust programming language is related to the improper assignment of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

7.1CVSS6.5AI score0.00197EPSS
SaveExploits0References4Affected Software3
Positive Technologies
Positive Technologies
•added 2025/09/05 12:00 a.m.•16 views

PT-2025-36180

Name of the Vulnerable Software and Affected Versions Media Author versions n/a through 1.0.4 Description An incorrect privilege assignment issue exists in Media Author, potentially allowing privilege escalation. Recommendations Update Media Author to a version later than 1.0.4...

5.5CVSS5.8AI score0.00318EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
•added 2025/09/04 12:00 a.m.•4 views

Linux Distros Unpatched Vulnerability : CVE-2019-10189

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5.7. Teachers in an assignment group could modify group overrides for other groups in the same...

4.3CVSS5.8AI score0.00864EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/09/04 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2019-3850

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in moodle before versions 3.6.3, 3.5.5, 3.4.8 and 3.1.17. Links within assignment submission comments would open directly in the same...

6.1CVSS5.5AI score0.00947EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2025/09/03 11:25 p.m.•13 views

SUSE CVE-2025-9864

This CVE ID was assigned in error to a vulnerability that was both introduced and fixed before the code landed in the Stable channel of Chrome, and has been withdrawn...

7.6AI score0.00138EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2025/09/03 7:15 a.m.•22 views

CVE-2024-32444

Incorrect Privilege Assignment vulnerability in InspiryThemes RealHomes allows Privilege Escalation.This issue affects RealHomes: from n/a through 4.3.6...

9.8CVSS8.6AI score0.00688EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/09/03 6:55 a.m.•8 views

CVE-2024-32444 WordPress RealHomes theme <= 4.3.6 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in InspiryThemes RealHomes allows Privilege Escalation.This issue affects RealHomes: from n/a through 4.3.6...

9.8CVSS8.6AI score0.00688EPSS
SaveExploits0References1
CVE
CVE
•added 2025/09/03 6:55 a.m.•50 views

CVE-2024-32444

CVE-2024-32444 affects WordPress RealHomes Theme by InspiryThemes, up to version 4.3.6. Root cause: Incorrect Privilege Assignment. Impact: could enable privilege escalation and potentially take control of a WordPress site. Remediation: upgrade to RealHomes 4.3.7 or later (vendor fix) per multipl...

9.8CVSS8.6AI score0.00688EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/09/03 6:55 a.m.•33 views

CVE-2024-32444 WordPress RealHomes theme <= 4.3.6 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in InspiryThemes RealHomes realhomes allows Privilege Escalation.This issue affects RealHomes: from n/a through = 4.3.6...

9.8CVSS0.00688EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/09/03 12:00 a.m.•19 views

IBM Transformation Advisor security vulnerabilities

IBM Transformation Advisor is an application modernization separation and migration assessment tool from International Business Machines IBM. A security vulnerability exists in IBM Transformation Advisor versions 2.0.1 through 4.3.1, which stems from an improper assignment of privileges and could...

8.4CVSS5.7AI score0.00143EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/09/03 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2017-2578

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Moodle 3.x, there is XSS in the assignment submission page. CVE-2017-2578 Note that Nessus relies on the presence of the package as reported by the vendor...

6.1CVSS6.2AI score0.00862EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/09/03 12:00 a.m.•20 views

WordPress plugin RealHomes has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

9.8CVSS8.5AI score0.00688EPSS
SaveExploits0References1
CVE
CVE
•added 2025/09/03 12:00 a.m.•43 views

CVE-2025-52494

The Adacore Ada Web Server (AWS) before version 25.2 is vulnerable to a denial-of-service (DoS) condition due to improper handling of SSL handshakes during connection initialization. Because the server lacks a specific timeout for this phase and relies on an effectively infinite default socket ti...

7.5CVSS5.8AI score0.00355EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/09/03 12:00 a.m.•24 views

Microsoft SQL Server Privilege Escalation

The vulnerability of the Microsoft SQL Server database management system is related to the improper assignment of privileges. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

9CVSS7AI score0.00974EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2025/09/02 7:19 a.m.•16 views

kernel: vsock: Fix transport_* TOCTOU

In the Linux kernel, the following vulnerability has been resolved: vsock: Fix transport TOCTOU Transport assignment may race with module unload. Protect newtransport from becoming a stale pointer. This also takes care of an insecure call in vsockuselocaltransport; add a lockdep assert. BUG: unab...

7CVSS6.2AI score0.00133EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2025/09/01 12:00 a.m.•18 views

NGINX Proxy Manager Auth Bypass

The vulnerability of the NGINX Proxy Manager, a proxy server for managing hosts, is related to errors in restricting the assignment of security tokens. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

5.3CVSS6.6AI score0.00382EPSS
SaveExploits0References3Affected Software1
RedhatCVE
RedhatCVE
•added 2025/08/30 6:18 p.m.•20 views

CVE-2025-49388

Incorrect Privilege Assignment vulnerability in kamleshyadav Miraculous Core Plugin miraculouscore allows Privilege Escalation.This issue affects Miraculous Core Plugin: from n/a through = 2.0.7...

9.8CVSS5.8AI score0.06466EPSS
SaveExploits1References1
Redos
Redos
•added 2025/08/29 12:00 a.m.•11 views

ROS-20250829-06

Vault Enterprise and Vault Community Edition enterprise data archiving platforms have a vulnerability due to incorrect privilege assignment. Edition is related to incorrect privilege assignment. Exploitation of the vulnerability could allow an attacker acting remotely to escalate privileges to ro...

7.2CVSS7.4AI score0.00511EPSS
SaveExploits0
NVD
NVD
•added 2025/08/28 1:15 p.m.•17 views

CVE-2025-48348

Incorrect Privilege Assignment vulnerability in chandrashekharsahu Site Offline site-offline allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Site Offline: from n/a through = 1.5.7...

4.3CVSS0.00241EPSS
SaveExploits0References1
Rows per page
Query Builder