1912 matches found
Rockwell Automation FactoryTalk System Services and Policy Manager
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 6.0 ATTENTION : Low attack complexity Vendor : Rockwell Automation Equipment : FactoryTalk System Services and Policy Manager Vulnerabilities : Improper Privilege Management 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an...
CVE-2024-37952
Improper Privilege Management vulnerability in themeenergy BookYourTravel allows Privilege Escalation.This issue affects BookYourTravel: from n/a through 8.18.17...
CVE-2024-37952
CVE-2024-37952 affects the BookYourTravel WordPress theme (themeenergy) with versions up to 8.18.17. The issue is described as Improper Privilege Management enabling Privilege Escalation for authenticated users (Subscriber+). The CVSS v3.1 score is 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Remed...
CVE-2024-37484
Improper Privilege Management vulnerability in Dylan James Zephyr Project Manager allows Privilege Escalation.This issue affects Zephyr Project Manager: from n/a through 3.3.97...
CVE-2024-37484 WordPress Zephyr Project Manager plugin <= 3.3.97 - Privilege Escalation vulnerability
Improper Privilege Management vulnerability in Dylan James Zephyr Project Manager allows Privilege Escalation.This issue affects Zephyr Project Manager: from n/a through 3.3.97...
CVE-2024-37455
Improper Privilege Management vulnerability in Brainstorm Force Ultimate Addons for Elementor allows Privilege Escalation.This issue affects Ultimate Addons for Elementor: from n/a through 1.36.31...
PT-2024-27857 · Unknown · Bookyourtravel
Name of the Vulnerable Software and Affected Versions: BookYourTravel versions through 8.18.17 Description: The issue is related to Improper Privilege Management, allowing Privilege Escalation in BookYourTravel. Recommendations: For versions through 8.18.17, at the moment, there is no information...
VulnCheck KEV: CVE-2024-37560
Improper Privilege Management vulnerability in IqbalRony WP User Switch allows Privilege Escalation.This issue affects WP User Switch: from n/a through 1.1.0...
WordPress plugin Zephyr Project Manager security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2024-27593 · Unknown · Zephyr Project Manager
Name of the Vulnerable Software and Affected Versions: Zephyr Project Manager versions n/a through 3.3.97 Description: The issue is related to Improper Privilege Management, which allows Privilege Escalation in the Zephyr Project Manager. Recommendations: For versions n/a through 3.3.97, update t...
CVE-2024-4341 IDOR in ExtremePacs's Extreme XDS
Authorization Bypass Through User-Controlled Key, Missing Authorization vulnerability in ExtremePacs Extreme XDS allows Collect Data as Provided by Users. This issue affects Extreme XDS: before 3928...
CVE-2024-25086
Improper privilege management in Jungo WinDriver before 12.2.0 allows local attackers to escalate privileges and execute arbitrary code...
CVE-2024-25088
Improper privilege management in Jungo WinDriver before 12.5.1 allows local attackers to escalate privileges and execute arbitrary code...
CVE-2024-26314
Improper privilege management in Jungo WinDriver 6.0.0 through 16.1.0 allows local attackers to escalate privileges and execute arbitrary code...
Improper Privilege Management
typo3/cms is vulnerable to Improper Privilege Management. The vulnerability is due to a link potentially allowing certain editing permissions if the admin panel is configured to be shown,which requires a valid preview link to exploit...
CVE-2024-32854
Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contain an improper privilege management vulnerability. A local high privilege attacker could potentially exploit this vulnerability, leading to privilege escalation...
CVE-2024-25086
CVE-2024-25086 affects Jungo WinDriver pre-12.2.0. The issue is improper privilege management (CWE-269), enabling a local attacker to escalate privileges and execute arbitrary code. Affected: Jungo WinDriver versions before 12.2.0. Impact: local privilege escalation and code execution; no remote ...
CVE-2024-22106
Jungo WinDriver is affected by CVE-2024-22106 (prior to 12.5.1). The issue is improper privilege management (CWE-269) that enables a local attacker to escalate privileges, execute arbitrary code, or cause a Denial of Service. The vulnerability affects WinDriver components and device driver develo...