CVE-2024-39574

Dell PowerScale InsightIQ, version 5.1, contain an Improper Privilege Management vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service...

CVE-2024-39574

CVE-2024-39574 affects Dell PowerScale InsightIQ 5.1. The vulnerability is described as an improper privilege management issue that could allow a high-privilege attacker with local access to cause a Denial of Service. Exploitation details are not provided in the sources; the CVE record itself lis...

PT-2024-28535

Name of the Vulnerable Software and Affected Versions Dell PowerScale InsightIQ version 5.1 Description The issue is related to Improper Privilege Management. A high-privileged attacker with local access could potentially exploit this, leading to Denial of service. Recommendations For Dell...

PT-2024-5983 · Schneider Electric · Vijeo Designer

Name of the Vulnerable Software and Affected Versions: Vijeo Designer affected versions not specified Description: The issue is related to improper privilege management, which could lead to unauthorized access, loss of confidentiality, integrity, and availability of the workstation. This occurs...

CVE-2024-44893: Improper Privilege Management

An issue in the component /jeecg-boot/jmreport/dict/list of JimuReport v1.7.8 allows attacker to escalate privileges via a crafted GET request...

CVE-2024-39574: Improper Privilege Management

Dell PowerScale InsightIQ, version 5.1, contain an Improper Privilege Management vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service...

CVE-2024-45041: Improper Privilege Management

External Secrets Operator is a Kubernetes operator that integrates external secret management systems. The external-secrets has a deployment called default-external-secrets-cert-controller, which is bound with a same-name ClusterRole. This ClusterRole has "get/list" verbs of secrets resources. It...

C-MOR Video Surveillance 5.2401 / 6.00PL01 Privilege Escalation

Advisory ID: SYSS-2024-027 Product: C-MOR Video Surveillance Manufacturer: za-internet GmbH Affected Versions: 5.2401, 6.00PL01 Tested Versions: 5.2401, 6.00PL01 Vulnerability Type: Improper Privilege Management CWE-269 Risk Level: High Solution Status: Open Manufacturer Notification: 2024-04-05...

CVE-2024-4259 Sensetive Data Exposure in SAMPAS's AKOS

Missing Authorization vulnerability in SAMPAŞ Holding AKOS AkosCepVatandasService, SAMPAŞ Holding AKOS TahsilatService allows Collect Data as Provided by Users. This issue affects AKOS AkosCepVatandasService: before V2.0; AKOS TahsilatService: before V1.0.7...

CVE-2024-4259 Sensetive Data Exposure in SAMPAS's AKOS

Missing Authorization vulnerability in SAMPAŞ Holding AKOS AkosCepVatandasService, SAMPAŞ Holding AKOS TahsilatService allows Collect Data as Provided by Users. This issue affects AKOS AkosCepVatandasService: before V2.0; AKOS TahsilatService: before V1.0.7...

CVE-2024-4259

CVE-2024-4259 describes a Missing Authorization vulnerability in SAMPAŞ Holding AKOS components: AkosCepVatandasService (before V2.0) and TahsilatService (before V1.0.7). The issue allows Collect Data as Provided by Users. CVSS data indicates a network-based, low complexity but high-severity impa...

PT-2024-30051

Name of the Vulnerable Software and Affected Versions SAMPAŞ Holding AKOS versions through 20240902 Description The issue is related to Improper Privilege Management, allowing the collection of data as provided by users. The vendor was contacted about this disclosure but did not respond. There is...

SAMPA AKOS 安全漏洞

SAMPA AKOS is an application from SAMPA, Inc. A security vulnerability exists in SAMPA AKOS version 20240902 and prior versions that stems from improper privilege management...

Exploit for Improper Input Validation in Portabilis I-Educar

CVE-2024-45058 PoC for CVE-2024-45058 Broken Access Control, a...

CVE-2024-4428

Missing Authentication for Critical Function, Missing Authorization vulnerability in Menulux Information Technologies Managment Portal allows Collect Data as Provided by Users. This issue affects Managment Portal: through 21.05.2024...

CVE-2024-4428 Sensetive Data Exposure in Menulux Managment Portal

Missing Authentication for Critical Function, Missing Authorization vulnerability in Menulux Information Technologies Managment Portal allows Collect Data as Provided by Users. This issue affects Managment Portal: through 21.05.2024...

CVE-2024-4428

CVE-2024-4428 affects Menulux Information Technologies Managment Portal. The issue is a Missing Authentication for Critical Function / Missing Authorization vulnerability in the portal, enabling collection of data provided by users due to improper access control. Affected status and remediation d...

Rockwell Automation ThinManager ThinServer

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION : Exploitable remotely/Low attack complexity Vendor : Rockwell Automation Equipment : ThinManager ThinServer Vulnerabilities : Improper Privilege Management, Incorrect Permission Assignment for Critical Resource, Improper Input Validation 2...

PT-2024-31103

Name of the Vulnerable Software and Affected Versions Menulux Information Technologies Managment Portal versions through 21.05.2024 Description The issue is related to Improper Privilege Management, allowing the collection of data as provided by users. Recommendations For Menulux Information...

CVE-2024-4555

Improper Privilege Management vulnerability in OpenText NetIQ Access Manager allows user account impersonation in specific scenario. This issue affects NetIQ Access Manager before 5.0.4.1 and before 5.1...