CVE-2025-46741

The provided connected sources identify a vulnerability in Blueframe where a suspended or recently logged-out user can continue to interact with the system until the time-out period expires. Affected product is Blueframe; no exact versions are specified in the materials. The root cause, affected ...

CVE-2025-24258: Improper Privilege Management

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.6, macOS Ventura 13.7.6. An app may be able to gain root privileges...

IBM Guardium Data Protection Privilege Bypass

The vulnerability of the IBM Guardium Data Protection platform for data security protection is related to improper privilege assignment. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2024-8100: Improper Privilege Management

On affected versions of the Arista CloudVision Portal CVP on-prem, the time-bound device onboarding token can be used to gain admin privileges on CloudVision...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from the Chinese company Huawei. Huawei HarmonyOS suffers from an Improper Privilege Control vulnerability that stems from improper privilege control in the Contacts module. No details of the vulnerability are available at this time...

Security Bulletin: Security vulnerability in Apache Kafka clients affects IBM Business Automation Workflow Case Event Emitters - CVE-2024-31141

Summary IBM Business Automation Workflow Case Event Emitters package a vulnerable version of Apache Kafka clients. Vulnerability Details CVEID:CVE-2024-31141 DESCRIPTION: Files or Directories Accessible to External Parties, Improper Privilege Management vulnerability in Apache Kafka Clients. Apac...

PT-2025-17480

Name of the Vulnerable Software and Affected Versions USG FLEX H series uOS firmware version V1.31 and earlier Description An improper privilege management issue in the recovery function could allow an authenticated local attacker with administrator privileges to upload a crafted configuration fi...

SonicWall NetExtender < 10.3.2 Multiple Vulnerabilities (SNWLID-2025-0006)

The version of SonicWall NetExtender installed on the remote host is prior to 10.3.2. It is, therefore, affected by multiple vulnerabilities as referenced in the SNWLID-2025-0006 advisory. - An improper privilege management vulnerability in the SonicWall NetExtender Windows 32 and 64 bit client...

WordPress plugin Xelion Webchat 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

WordPress plugin Projectopia 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

CVE-2023-32197

A Improper Privilege Management vulnerability in SUSE rancher in RoleTemplateobjects when external=true is set can lead to privilege escalation in specific scenarios.This issue affects rancher: from 2.7.0 before 2.7.14, from 2.8.0 before 2.8.5...

CVE-2023-32197: Improper Privilege Management

A Improper Privilege Management vulnerability in SUSE rancher in RoleTemplateobjects when external=true is set can lead to privilege escalation in specific scenarios.This issue affects rancher: from 2.7.0 before 2.7.14, from 2.8.0 before 2.8.5...

Security Advisory 0116

Security Advisory 0116 PDF Date: April 15, 2025 Revision | Date | Changes ---|---|--- 1.0 | April 15, 2025 | Initial release The CVE-ID tracking this issue: CVE-2024-8100 CVSSv3.1 Base Score: 8.7 CVSS:3.1AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N Common Weakness Enumeration: CWE-269: Improper Privilege...

Security Advisory 0115

Security Advisory 0115 . CSAF PDF Date: April 15, 2025 Revision | Date | Changes ---|---|--- 1.0 | April 15, 2025 | Initial release The CVE-ID tracking this issue: CVE-2025-0505 CVSSv3.1 Base Score: 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N Common Weakness Enumeration:CWE- CWE-269: Improp...

CVE-2023-38614: Improper Privilege Management

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to access sensitive user data...

CVE-2025-23008

The SonicWall NetExtender Windows (32 and 64 bit) client is affected by an improper privilege management vulnerability (CWE-250). This flaw allows a low privileged attacker to modify software configurations and potentially elevate privileges. The vulnerability is present in versions prior to 10.3...

CVE-2025-23008

An improper privilege management vulnerability in the SonicWall NetExtender Windows 32 and 64 bit client allows a low privileged attacker to modify configurations...

CVE-2025-23008

An improper privilege management vulnerability in the SonicWall NetExtender Windows 32 and 64 bit client allows a low privileged attacker to modify configurations...

IBM Security Guardium 安全漏洞

IBM Security Guardium is a suite of platforms from International Business Machines IBM that provide data protection capabilities. The platform includes features such as custom UI, report management, and streamlined audit process building. A security vulnerability exists in IBM Security Guardium...

Cisco Meeting Management Privilege Escalation

The vulnerability of the application programming interface of the Cisco Meeting Management subsystem relates to the improper handling of insufficient privileges. Exploiting this vulnerability allows a malicious actor to enhance their privileges through specially created requests...