CVE-2013-4251: Improper Privilege Management

The scipy.weave component in SciPy before 0.12.1 creates insecure temporary directories...

CVE-2012-1187: Improper Check for Dropped Privileges

Bitlbee does not drop extra group privileges correctly in unix.c...

CVE-2019-4546: Improper Privilege Management

After installing the IBM Maximo Health- Safety and Environment Manager 7.6.1, a user is granted additional privileges that they are not normally allowed to access. IBM X-Force ID: 165948...

CVE-2019-15901: Improper Privilege Management

An issue was discovered in slicer69 doas before 6.2 on certain platforms other than OpenBSD. A setusercontext3 call with flags to change the UID, primary GID, and secondary GIDs was replaced on certain platforms: Linux and possibly NetBSD with a single setuid2 call. This resulted in neither...

Siemens Industrial Products Local Privilege Escalation Vulnerability (Update I)

1. EXECUTIVE SUMMARY CVSS v3 6.4 ATTENTION: Exploitable locally Vendor: Siemens Equipment: Industrial Products Vulnerability: Improper privilege management 2. UPDATE INFORMATION This updated advisory is a follow-up to the updated advisory titled ICSA-16-313-02 Siemens Industrial Products Local...

CVE-2019-4112: Improper Privilege Management

IBM WebSphere eXtreme Scale 8.6 Admin Console allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 158105...

CVE-2019-4477: Improper Privilege Management

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a user with access to audit logs to obtain sensitive information, caused by improper handling of command line options. IBM X-Force ID: 163997...

CVE-2016-10971: Improper Privilege Management

The MemberSonic Lite plugin before 1.302 for WordPress has incorrect login access control because only knowlewdge of an e-mail address is required...

CVE-2016-10972: Improper Privilege Management

The newspaper theme before 6.7.2 for WordPress has a lack of options access control via tdajaxupdatepanel...

CVE-2019-1215: Improper Privilege Management

An elevation of privilege vulnerability exists in the way that ws2ifsl.sys Winsock handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1253, CVE-2019-1278, CVE-2019-1303...

CVE-2017-18596: Improper Privilege Management

The elementor plugin before 1.8.0 for WordPress has incorrect access control for internal functions...

CVE-2018-21013: Improper Privilege Management

The Swape theme before 1.2.1 for WordPress has incorrect access control, as demonstrated by allowing new administrator accounts via vectors involving xmlPath to wp-admin/admin-ajax.php...

CVE-2019-4536: Improper Privilege Management

IBM i 7.4 users who have done a Restore User Profile RSTUSRPRF on a system which has been configured with Db2 Mirror for i might have user profiles with elevated privileges caused by incorrect processing during a restore of multiple user profiles. A user with restore privileges could exploit this...

CVE-2019-11551: Improper Privilege Management

In Code42 Enterprise and Crashplan for Small Business through Client version 6.9.1, an attacker can craft a restore request to restore a file through the Code42 app to a location they do not have privileges to write...

CVE-2019-11521: Improper Privilege Management

OX App Suite 7.10.1 allows Content Spoofing...

CVE-2019-12618: Improper Privilege Management

HashiCorp Nomad 0.9.0 through 0.9.1 has Incorrect Access Control via the exec driver...

Exploit for CVE-2019-13272

CVE-2019-13272 Linux local root exploit Linux 4.10 "...

CVE-2019-11270: Improper Privilege Management

Cloud Foundry UAA versions prior to v73.4.0 contain a vulnerability where a malicious client possessing the 'clients.write' authority or scope can bypass the restrictions imposed on clients created via 'clients.write' and create clients with arbitrary scopes that the creator does not possess...

Possibility to extend internal share permissions using the API - ownCloud security advisory

Platform: ownCloud Server Versions: 10.0.0 Date: 7/25/2019 Risk level: High CVSS v3 Base Score: 8 Improper Privilege Management, CWE-269...

CVE-2019-11553: Improper Privilege Management

In Code42 for Enterprise through 6.8.4, an administrator without web restore permission but with the ability to manage users in an organization can impersonate a user with web restore permission. When requesting the token to do a web restore, an administrator with permission to manage a user coul...