RHEL 5 : net-snmp (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - net-snmp: Heap corruption in snmppduparse function in snmplib/snmpapi.c CVE-2018-1000116 - Net-SNMP throu...

CVE-2024-3507 Privilege escalation vulnerability in Lunar

Improper privilege management vulnerability in Lunar software that affects versions 6.0.2 through 6.6.0. This vulnerability allows an attacker to perform a secondary process injection into the Lunar application and abuse those rights to access sensitive user information...

CVE-2024-3507 Privilege escalation vulnerability in Lunar

Improper privilege management vulnerability in Lunar software that affects versions 6.0.2 through 6.6.0. This vulnerability allows an attacker to perform a secondary process injection into the Lunar application and abuse those rights to access sensitive user information...

PT-2024-26306 · Lunar · Lunar

Name of the Vulnerable Software and Affected Versions: Lunar software versions 6.0.2 through 6.6.0 Description: The issue is related to improper privilege management in the Lunar software, allowing an attacker to perform a secondary process injection into the application. This can lead to the abu...

Oracle VirtualBox vboxdrv Improper Privilege Management Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute low-privileged code on the target host system in order to exploit this vulnerability. The specific flaw exists within the vboxdrv...

CVE-2023-51425

Improper Privilege Management vulnerability in Jacques Malgrange Rencontre – Dating Site allows Privilege Escalation.This issue affects Rencontre – Dating Site: from n/a through 3.10.1...

CVE-2023-51425 WordPress Rencontre plugin <= 3.10.1 - Unauthenticated Account Takeover vulnerability

Improper Privilege Management vulnerability in Jacques Malgrange Rencontre – Dating Site allows Privilege Escalation.This issue affects Rencontre – Dating Site: from n/a through 3.10.1...

PT-2024-14123 · Unknown · Rencontre – Dating Site

Name of the Vulnerable Software and Affected Versions: Rencontre – Dating Site versions 3.10.1 and earlier Description: The issue is related to Improper Privilege Management, allowing Privilege Escalation. Recommendations: For versions 3.10.1 and earlier, update to a version that contains a fix f...

CVE-2024-4017

BeyondTrust U-Series Appliance (Windows, 64-bit filesystem modules) is affected by CVE-2024-4017 due to improper privilege management allowing DLL side-loading. Affected versions are 3.4 through prior to 4.0.3; remediation is to upgrade to version 4.0.3 or later. Some sources confirm the vulnerab...

CVE-2024-4018 Privilege Escalation in U-Series Appliance

Improper Privilege Management vulnerability in BeyondTrust U-Series Appliance on Windows, 64 bit local appliance api modules allows Privilege Escalation.This issue affects U-Series Appliance: from 3.4 before 4.0.3...

CVE-2024-4018

CVE-2024-4018 is an improper privilege management vulnerability in BeyondTrust U-Series Appliance on Windows (64-bit local appliance API modules) that allows privilege escalation. Affected versions are 3.4 through before 4.0.3; the issue is mitigated by upgrading to 4.0.3 or later. The CVE’s docu...

PT-2024-4850

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 Description: The issue is related to improper privilege management in the operating system, which could allow a local high privilege attacker to potentially exploit this vulnerability,...

Improper Privilege Management

winter/wn-dusk-plugin is vulnerable to Improper Privilege Management. The vulnerability is due to the exposure of a route URL/dusk/login/USER ID/MANAGER that allows unauthenticated access to user accounts in Winter CMS instances with the Dusk plugin installed and configured improperly...

TOTOLINK EX200 getSysStatusCfg Method Information Disclosure Vulnerability

TOTOLINK EX200 is a wireless N range extender from China Gion Electronics TOTOLINK , which is mainly used to extend the coverage of the existing Wi-Fi network and solve the problem of signal blind zones. TOTOLINK EX200 suffers from an information disclosure vulnerability that stems from improper...

Siemens RUGGEDCOM APE1808

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Zoom Client 安全漏洞

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability exists in Zoom Client versions prior to 5.17.10 that stems from improper privilege management and could allow privileged users to escalate privileges via local access...

CVE-2023-6522

Incorrect Use of Privileged APIs vulnerability in ExtremePacs Extreme XDS allows Collect Data as Provided by Users. This issue affects Extreme XDS: before 3914...

CVE-2023-6522 Information Disclosure in ExtremePacs's Extreme XDS

Incorrect Use of Privileged APIs vulnerability in ExtremePacs Extreme XDS allows Collect Data as Provided by Users. This issue affects Extreme XDS: before 3914...

PT-2024-14990 · Extreme Networks · Extreme Xds

Name of the Vulnerable Software and Affected Versions: Extreme XDS versions before 3914 Description: The issue affects ExtremePacs Extreme XDS, allowing collection of data as provided by users due to improper privilege management. Recommendations: For versions before 3914, update to version 3914 ...

CVE-2024-0172

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper privilege management security vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to privilege escalation...