Lucene search
+L

1908 matches found

EUVD
EUVD
•added 2026/09/18 7:32 p.m.•11 views

EUVD-2026-83410

IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management...

7.8CVSS5.8AI score0.00137EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/18 7:32 p.m.•39 views

CVE-2026-82893 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management...

7.8CVSS0.00137EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/18 7:32 p.m.•17 views

CVE-2026-82893

IBM Guardium Data Protection 12.2 is affected by an improper privilege management flaw that allows a local attacker with low privileges to gain elevated privileges without user interaction. The vulnerability is scored CVSS 7.8 (HIGH) with full impact on confidentiality, integrity, and availabilit...

7.8CVSS5.8AI score0.00137EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/18 7:32 p.m.•10 views

CVE-2026-82893 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management...

7.8CVSS5.8AI score0.00137EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/18 12:00 a.m.•1 views

CVE-2026-82893: Improper Privilege Management

IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management...

7.8CVSS5.8AI score0.00137EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/18 12:00 a.m.•0 views

CVE-2026-81810: Improper Privilege Management

The All-in-One WP Migration and Backup WordPress plugin before 7.111 does not perform any capability check on several of its AJAX actions, gating them only on an installation-wide secret which it discloses to any user permitted to export the site, allowing such a user to import an arbitrary site...

7.2CVSS5.7AI score0.00462EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/17 2:27 p.m.•56 views

CVE-2026-81445

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Privilege Management vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

7.2CVSS0.00462EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/17 2:17 p.m.•10 views

CVE-2026-81442

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Privilege Management vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering and Unauthorized access...

8.1CVSS0.00378EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/17 12:00 a.m.•0 views

CVE-2026-92957: Improper Privilege Management

vm2 through 3.11.6 does not normalize node:-prefixed builtin specifiers when evaluating user-supplied negative deny entries in a NodeVM wildcard require policy. Although NodeVM strips the node: prefix during require resolution, negative wildcard entries are matched by exact string comparison...

9.9CVSS5.9AI score0.0057EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/17 12:00 a.m.•0 views

CVE-2026-85128: Improper Privilege Management

The Choose User Role at Registration WordPress plugin before 1.3.3 does not validate the role requested at registration against the roles an administrator chose to offer, allowing unauthenticated users to request any role, including administrator, and to be granted it once the request is approved...

7.5CVSS5.8AI score0.00321EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/17 12:00 a.m.•0 views

CVE-2026-81445: Improper Privilege Management

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Privilege Management vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

7.2CVSS5.9AI score0.00462EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/17 12:00 a.m.•0 views

CVE-2026-81442: Improper Privilege Management

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Privilege Management vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering and Unauthorized access...

8.1CVSS5.9AI score0.00378EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/17 12:00 a.m.•1 views

CVE-2026-88904: Improper Privilege Management

The PuppyFW WordPress plugin through 0.4.4 does not have proper authorisation on one of its REST routes, which tests the caller against a capability taken from the request itself, allowing any authenticated user, including subscribers, to add, modify and delete arbitrary blog options and thereby...

8.8CVSS5.9AI score0.00417EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/16 9:17 p.m.•9 views

CVE-2026-20287

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release...

6.5CVSS0.00213EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/16 2:08 p.m.•20 views

Security Bulletin: IBM® Db2® is vulnerable to a denial of service where a specific functionality on a Db2 server can be disabled by a DBADM privileged user under certain conditions (CVE-2026-87958)

Summary IBM® Db2® is vulnerable to a denial of service where a specific functionality on a Db2 server can be disabled by a database administration authority DBADM privileged user under certain conditions CVE-2026-87958 Vulnerability Details CVEID:CVE-2026-87958 DESCRIPTION: IBM Db2 11.5.0 through...

8.1CVSS5.9AI score0.00378EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•0 views

CVE-2026-85569: Improper Privilege Management

The Tutor LMS WordPress plugin before 4.0.8 does not correctly determine whether an incoming request is addressed to its own REST API, and does not enforce the permission recorded against an API credential, allowing the holder of a read-only key to act as the administrator account that issued it...

7.2CVSS5.8AI score0.00462EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•0 views

CVE-2026-88817: Improper Privilege Management

An authenticated, non-guest user of Curiosity Workspace could enroll themselves as an administrator and member of an existing access group without an invitation or approval. It did not grant application-wide administrator privileges, and the vulnerability could not be used to obtain root access t...

8.7CVSS5.8AI score0.00351EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•1 views

CVE-2026-85530: Improper Privilege Management

The GiveWP WordPress plugin before 4.16.8.1 does not consistently normalise a donor's e-mail address between the value it stores and the value it later uses to look that donor up, allowing unauthenticated users to be resolved as an arbitrary donor and to set the WordPress password of any user...

8.1CVSS5.9AI score0.00383EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/15 3:17 a.m.•15 views

CVE-2026-90856

A security vulnerability has been detected in SourceCodester College Notes Gallery Management System 1.0. This impacts an unknown function of the file signup.php of the component Registration Flow. Such manipulation of the argument role leads to improper privilege management. The attack can be...

7.5CVSS0.00495EPSS
SaveExploits0References6
CVE
CVE
•added 2026/09/15 3:00 a.m.•18 views

CVE-2026-90856

SourceCodester College Notes Gallery Management System 1.0 is affected by an improper privilege management vulnerability in the Registration Flow component. The flaw resides in the signup.php file, where manipulation of the role argument allows a remote, unauthenticated attacker to gain elevated ...

7.5CVSS6.9AI score0.00495EPSS
SaveExploits0References6
Rows per page
Query Builder