CVE-2022-36833

CVE-2022-36833 affects Samsung’s Game Optimizing Service (GOS) on Android 10 and 11+. The vulnerability stems from improper privilege management that allows a local attacker to execute a hidden function intended for developers by changing the package name. This is a local, privilege-related issue...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from South Korea's Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices Game Optimizing Service version 3.5.04.8, which stems from an improper privilege management vulnerabilit...

IBM Robotic Process Automation 安全漏洞

IBM Robotic Process Automation is a robotic process automation product from IBM, Inc. It helps you automate more business and IT processes at scale with the ease and speed of traditional RPA. IBM Robotic Process Automation has an elevation of privilege vulnerability that stems from improper...

ABB Drive Composer, Automation Builder, Mint Workbench

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: ABB Equipment: Drive Composer, Automation Builder, Mint Workbench Vulnerability: Improper Privilege Management 2. RISK EVALUATION Successful exploitation of this vulnerability could allow remote code execution. 3...

CVE-2022-34754

CVE-2022-34754 involves CWE-269 improper privilege management in Schneider Electric Acti9 PowerTag Link C gateways (A9XELC10-A, V1.7.5 and prior; A9XELC10-B, V2.12.0 and prior). The vulnerability could allow elevated functionality when credentials are guessed. The CVSS details shown in the docume...

CVE-2017-20112

A vulnerability has been found in IVPN Client 2.6.6120.33863 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument --up cmd leads to improper privilege management. The attack needs to be approached locally. The exploit has been...

Design/Logic Flaw

A vulnerability has been found in IVPN Client 2.6.6120.33863 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument --up cmd leads to improper privilege management. The attack needs to be approached locally. The exploit has been...

Hindu Matrimonial Script Information Disclosure Vulnerability (CNVD-2022-61037)

A security vulnerability exists in Hindu Matrimonial Script, an online matrimonial service website of PHP Matrimonial Script India, which stems from improper privilege management in /admin/payment.php. No details of the vulnerability are currently available...

Hindu Matrimonial Script Authentication Bypass Vulnerability (CNVD-2022-61044)

Hindu Matrimonial Script, an online marriage service website from PHP Matrimonial Script India, has a security vulnerability that could be exploited by attackers to cause improper privilege management...

CVE-2022-22390

IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 may be vulnerable to an information disclosure caused by improper privilege management when table function is used. IBM X-Force ID: 221973...

Hindu Matrimonial Script Authentication Bypass Vulnerability (CNVD-2022-61045)

Hindu Matrimonial Script, an online marriage service website from PHP Matrimonial Script India, has a security vulnerability that could be exploited by attackers to cause improper privilege management...

Secheron SEPCOS Control and Protection Relay

1. EXECUTIVE SUMMARY CVSS v3 9.9 ATTENTION: Exploitable remotely/low attack complexity Vendor: Secheron Equipment: SEPCOS Control and Protection Relay Vulnerabilities: Improper Enforcement of Behavioral Workflow, Lack of Administrator Control over Security, Improper Privilege Management,...

CVE-2017-20081

A vulnerability, which was classified as critical, was found in Hindu Matrimonial Script. This affects an unknown part of the file /admin/reports.php. The manipulation leads to improper privilege management. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

CVE-2017-20073

A vulnerability has been found in Hindu Matrimonial Script and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/cms.php. The manipulation leads to improper privilege management. The attack can be launched remotely. The exploit has been disclose...

Design/Logic Flaw

A vulnerability was found in Hindu Matrimonial Script and classified as critical. Affected by this issue is some unknown functionality of the file /admin/newsletter1.php. The manipulation leads to improper privilege management. The attack may be launched remotely. The exploit has been disclosed t...

Design/Logic Flaw

A vulnerability has been found in Hindu Matrimonial Script and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/cms.php. The manipulation leads to improper privilege management. The attack can be launched remotely. The exploit has been disclose...

Design/Logic Flaw

A vulnerability classified as critical has been found in Hindu Matrimonial Script. Affected is an unknown function of the file /admin/featured.php. The manipulation leads to improper privilege management. It is possible to launch the attack remotely. The exploit has been disclosed to the public a...

CVE-2017-20081 Hindu Matrimonial Script reports.php privileges management

A vulnerability, which was classified as critical, was found in Hindu Matrimonial Script. This affects an unknown part of the file /admin/reports.php. The manipulation leads to improper privilege management. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

CVE-2017-20080

The CVE-2017-20080 entry relates to Hindu Matrimonial Script, where the file /admin/googleads.php suffers from improper privilege management. The vulnerability can be exploited remotely and exploitation has been disclosed publicly. Documented impact centers on privilege handling; no specific patc...

CVE-2017-20075 Hindu Matrimonial Script payment.php privileges management

A vulnerability was found in Hindu Matrimonial Script. It has been classified as critical. This affects an unknown part of the file /admin/payment.php. The manipulation leads to improper privilege management. It is possible to initiate the attack remotely. The exploit has been disclosed to the...