Ivanti Security Control 安全漏洞

Ivanti security controls is a unified IT management platform from US-based Ivanti Inc. It is used to manage and protect Windows-based computers, Linux-based computers and VMware ESXi virtual machine monitoring programs. Ivanti security controls suffers from an elevation of privilege vulnerability...

Ivanti Application Control 安全漏洞

Ivanti Application Control is an application control software from Ivanti Corporation, USA. A security vulnerability exists in Ivanti Application Control that stems from improper privilege management. An attacker can exploit the vulnerability to elevate privileges...

Ivanti Performance Manager 安全漏洞

Ivanti Performance Manager is a server and application performance management software from Ivanti Corporation, USA. A security vulnerability exists in Ivanti Performance Manager that stems from improper privilege management. An attacker could exploit the vulnerability to elevate privileges...

Improper Privilege Management

Moodle is vulnerable to Improper Privilege Management. The vulnerability is due to insufficient capability checks, allowing users with access to restore glossaries in courses to restore them into the global site glossary without proper permissions...

The vulnerability of the Spectrum Power 7 software, related to incorrect privilege assignment, allows a perpetrator to elevate their privileges.

The vulnerability of the Spectrum Power 7 software is related to the improper assignment of privileges by running binary files with the SUID privilege. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2024-9479

CVE-2024-9479 affects upKeeper Instant Privilege Access prior to 1.2. The root cause is improper privilege management, enabling privilege escalation with HIGH impact to confidentiality, integrity, and availability (per CVSS 4.0). Exploitation details are not provided in the sources. Remediation: ...

CVE-2024-9479

Improper Privilege Management vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Escalation.This issue affects upKeeper Instant Privilege Access: before 1.2...

Code4Berry Decoration Management System 安全漏洞

Code4Berry Decoration Management System is a decoration management system from Code4Berry. A security vulnerability exists in Code4Berry Decoration Management System version 1.0, which stems from improper privilege management...

Code4Berry Decoration Management System 安全漏洞

Code4Berry Decoration Management System is a decoration management system from Code4Berry. A security vulnerability exists in Code4Berry Decoration Management System version 1.0, which stems from improper privilege management...

Improper Privilege Management

Zope and AccessControl is vulnerable to Improper Privilege Management. The vulnerability is due to anonymous users being able to delete user data in AccessControl.userfolder.UserFolder, potentially preventing privileged access. Users unable to upgrade can mitigate by adding dataroles = to...

CVE-2024-8074 Sensetive Data Exposure in Nomysoft Informatics' Nomysem

Missing Authentication for Critical Function, Missing Authorization vulnerability in Nomysoft Informatics Nomysem allows Collect Data as Provided by Users. This issue affects Nomysem: before 13.10.2024...

CVE-2024-8074

CVE-2024-8074 affects Nomysoft Informatics’ Nomysem before 13.10.2024. The issue is Missing Authentication for a Critical Function and Missing Authorization due to improper privilege management, enabling collection of user-provided data. The CVSS 4.0 vector indicates network access with low attac...

CVE-2024-49558

Dell SmartFabric OS10 Software, versions 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contains an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2024-49558

Dell SmartFabric OS10 Software, versions 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contains an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2024-49558

Dell SmartFabric OS10 Software, versions 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contains an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2024-49558

Dell SmartFabric OS10 (network OS) 10.5.3.x–10.5.6.x suffers an improper privilege management vulnerability enabling a low-privileged, locally authenticated attacker to elevate privileges. The issue stems from flawed privilege handling within the OS10 software, with impact described as high confi...

PT-2024-38788

Name of the Vulnerable Software and Affected Versions: Nomysem versions prior to 13.10.2024 Description: The issue is related to Improper Privilege Management, allowing the collection of data as provided by users. Recommendations: For versions prior to 13.10.2024, update to a version released aft...

Improper Privilege Management

Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to Improper Privilege Management due to insufficient capability checks in the process of restoring glossaries which allows an attacker to restore glossaries in courses into the global site glossary...

CVE-2024-8424

Improper Privilege Management vulnerability in WatchGuard EPDR, Panda AD360 and Panda Dome on Windows PSANHost.exe module allows arbitrary file delete with SYSTEM permissions...

The vulnerability of HashiCorp’s Vault and Vault Enterprise storage platforms, which involve improper privilege assignment, allows attackers to escalate their privileges.

The vulnerability of the HashiCorp Vault and Vault Enterprise archiving platforms for corporate information lies in improper privilege assignment. Exploiting this vulnerability can allow a malicious actor, operating remotely, to enhance their privileges...