CVE-2024-37952

Improper Privilege Management vulnerability in themeenergy BookYourTravel allows Privilege Escalation.This issue affects BookYourTravel: from n/a through 8.18.17...

CVE-2024-37952

CVE-2024-37952 affects the BookYourTravel WordPress theme (themeenergy) with versions up to 8.18.17. The issue is described as Improper Privilege Management enabling Privilege Escalation for authenticated users (Subscriber+). The CVSS v3.1 score is 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Remed...

CVE-2024-37484

Improper Privilege Management vulnerability in Dylan James Zephyr Project Manager allows Privilege Escalation.This issue affects Zephyr Project Manager: from n/a through 3.3.97...

CVE-2024-37484 WordPress Zephyr Project Manager plugin <= 3.3.97 - Privilege Escalation vulnerability

Improper Privilege Management vulnerability in Dylan James Zephyr Project Manager allows Privilege Escalation.This issue affects Zephyr Project Manager: from n/a through 3.3.97...

CVE-2024-37455

Improper Privilege Management vulnerability in Brainstorm Force Ultimate Addons for Elementor allows Privilege Escalation.This issue affects Ultimate Addons for Elementor: from n/a through 1.36.31...

PT-2024-27857 · Unknown · Bookyourtravel

Name of the Vulnerable Software and Affected Versions: BookYourTravel versions through 8.18.17 Description: The issue is related to Improper Privilege Management, allowing Privilege Escalation in BookYourTravel. Recommendations: For versions through 8.18.17, at the moment, there is no information...

VulnCheck KEV: CVE-2024-37560

Improper Privilege Management vulnerability in IqbalRony WP User Switch allows Privilege Escalation.This issue affects WP User Switch: from n/a through 1.1.0...

PT-2024-27593 · Unknown · Zephyr Project Manager

Name of the Vulnerable Software and Affected Versions: Zephyr Project Manager versions n/a through 3.3.97 Description: The issue is related to Improper Privilege Management, which allows Privilege Escalation in the Zephyr Project Manager. Recommendations: For versions n/a through 3.3.97, update t...

WordPress plugin Zephyr Project Manager security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-4341 IDOR in ExtremePacs's Extreme XDS

Authorization Bypass Through User-Controlled Key, Missing Authorization vulnerability in ExtremePacs Extreme XDS allows Collect Data as Provided by Users. This issue affects Extreme XDS: before 3928...

CVE-2024-25088

Improper privilege management in Jungo WinDriver before 12.5.1 allows local attackers to escalate privileges and execute arbitrary code...

CVE-2024-25086

Improper privilege management in Jungo WinDriver before 12.2.0 allows local attackers to escalate privileges and execute arbitrary code...

CVE-2024-26314

Improper privilege management in Jungo WinDriver 6.0.0 through 16.1.0 allows local attackers to escalate privileges and execute arbitrary code...

Improper Privilege Management

typo3/cms is vulnerable to Improper Privilege Management. The vulnerability is due to a link potentially allowing certain editing permissions if the admin panel is configured to be shown,which requires a valid preview link to exploit...

CVE-2024-32854

Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contain an improper privilege management vulnerability. A local high privilege attacker could potentially exploit this vulnerability, leading to privilege escalation...

CVE-2024-25086

CVE-2024-25086 affects Jungo WinDriver pre-12.2.0. The issue is improper privilege management (CWE-269), enabling a local attacker to escalate privileges and execute arbitrary code. Affected: Jungo WinDriver versions before 12.2.0. Impact: local privilege escalation and code execution; no remote ...

CVE-2024-22106

Jungo WinDriver is affected by CVE-2024-22106 (prior to 12.5.1). The issue is improper privilege management (CWE-269) that enables a local attacker to escalate privileges, execute arbitrary code, or cause a Denial of Service. The vulnerability affects WinDriver components and device driver develo...

CVE-2024-22106

Improper privilege management in Jungo WinDriver before 12.5.1 allows local attackers to escalate privileges, execute arbitrary code, or cause a Denial of Service DoS...

CVE-2024-25088

Improper privilege management in Jungo WinDriver before 12.5.1 allows local attackers to escalate privileges and execute arbitrary code...

VMSA-2024-0014:VMware Cloud Director addresses an improper privilege management vulnerability (CVE-2024-22272)

Advisory ID: | VMSA-2024-0014 ---|--- Advisory Severity: | Moderate CVSSv3 Range: | 4.9 Synopsis: | VMware Cloud Director addresses an Improper Privilege Management vulnerability CVE-2024-22272 Issue Date: | 2024-06-27 Updated on: | 2024-06-27 CVEs: | CVE-2024-22272 1. Impacted Products VMware...