CVE-2026-66818

Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73377

Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network...

PT-2026-87220

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description Improper privilege management allows an authorized attacker to elevate privileges over a network, which can enable them to affect the system. Recommendations At the moment, there is no...

CVE-2026-84358

An improper privilege management flaw was found in the Downloads component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=514006886 Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat...

PT-2026-83337

IBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001 is vulnerable to a denial of service due to improper limitation of resources...

The vulnerability of the child_process module in the json-data transformation software JSONata allows a hacker to execute arbitrary code.

The vulnerability of the childprocess module in the json-data transformation software JSONata is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-18071

IBM i 7.6, 7.5, 7.4, and 7.3 are affected by CVE-2026-18071 due to improper privilege management in the HTTP Server, enabling a local attacker to gain elevated privileges (CWE-269). Base CVSS v3.1 score is 7.8 (HIGH) with LOCAL, low attack complexity, requiring LOW privileges and no user interact...

CVE-2026-18071 IBM i is Affected By An Improper Management Vulnerability in HTTP Server []

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to gain elevated privileges due to improper privilege management...

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in improper external management of file names or paths, allowing attackers to perform spear-phishing attacks.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in improper external management of file names or file paths. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...

The vulnerability of the Microsoft Azure Stack Edge hardware platform, related to improper external management of file names or paths, allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Azure Stack Edge software platform is related to improper external management of file names or file paths. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...

CVE-2025-59870

Summary: CVE-2025-59870 affects HCL MyXalytics web applications. The issue is improper management of a static JWT signing secret that is not rotated, creating a risk to confidentiality and integrity. The cited sources consistently describe the secret as static and non-rotated across multiple feed...

EUVD-2021-9542

Malicious code in bioql PyPI...

PT-2025-34763

Name of the Vulnerable Software and Affected Versions: NetScaler ADC and NetScaler Gateway affected versions not specified Description: Improper access control exists on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway. An attacker gaining access to the appliance’s NSIP,...

ROS-20250526-05

Nomad application orchestrator vulnerability related to the fact that the HTTP search API can expose the names of available CSI plugins. of available CSI plugins. Exploitation of the vulnerability could allow an attacker acting remotely, gain access to sensitive information Nomad application...

CVE-2023-51425

Improper Privilege Management vulnerability in Jacques Malgrange Rencontre – Dating Site allows Privilege Escalation.This issue affects Rencontre – Dating Site: from n/a through 3.10.1...

CVE-2013-2833

Use-after-free vulnerability in the O3D plug-in in Google Chrome OS before 26.0.1410.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to improper management of ownership relationships involving Elements and DrawElements...

GNU Binutils objdump Memory Leak Vulnerability

GNU Binutils is a toolset for creating, assembling and linking programs. A memory leak vulnerability exists in GNU Binutils. The vulnerability stems from improper memory management in the displayinfo function in the bucomm.c file. No details of the vulnerability are provided at this time...

CVE-2024-49338: Improper Management of Sensitive Trace Data

IBM App Connect Enterprise 12.0.1.0 through 12.0.7.0and 13.0.1.0 under certain configurations could allow a privileged user to obtain JMS credentials...

CVE-2024-13249 Node Access Rebuild Progressive - Less critical - Access bypass - SA-CONTRIB-2024-013

Improper Ownership Management vulnerability in Drupal Node Access Rebuild Progressive allows Target Influence via Framing.This issue affects Node Access Rebuild Progressive: from 7.X-1.0 before 7.X-1.2...

Resource Leakage

github.com/apache/incubator-answer is vulnerable to Resource Leakage. The vulnerability is due to improper management of the password reset link's validity, allowing it to remain active and reusable even after it has been used...