PT-2024-14142 · Glowlogix · Glowlogix Wp Frontend Profile

Name of the Vulnerable Software and Affected Versions: Glowlogix WP Frontend Profile versions 1.3.1 and earlier Description: The issue is related to Improper Privilege Management, allowing Privilege Escalation in Glowlogix WP Frontend Profile. Recommendations: For Glowlogix WP Frontend Profile...

PT-2024-25337 · Darren Cooney · Darren Cooney Instant Images

Name of the Vulnerable Software and Affected Versions: Darren Cooney Instant Images versions n/a through 6.1.0 Description: The issue is related to Improper Privilege Management, which allows Privilege Escalation in Darren Cooney Instant Images. Recommendations: For versions n/a through 6.1.0, at...

CVE-2023-26540: Improper Privilege Management

Improper Privilege Management vulnerability in Favethemes Houzez allows Privilege Escalation.This issue affects Houzez: from n/a through 2.7.1...

CVE-2024-34082: Improper Privilege Management

Grav is a file-based Web platform. Prior to version 1.7.46, a low privilege user account with page edit privilege can read any server files using Twig Syntax. This includes Grav user account files - /grav/user/accounts/.yaml. This file stores hashed user password, 2FA secret, and the password res...

CVE-2023-33327

Improper Privilege Management vulnerability in Teplitsa of social technologies Leyka allows Privilege Escalation.This issue affects Leyka: from n/a through 3.30.2...

CVE-2023-33327 WordPress Leyka plugin <= 3.30.2 - Privilege Escalation vulnerability

Improper Privilege Management vulnerability in Teplitsa of social technologies Leyka allows Privilege Escalation.This issue affects Leyka: from n/a through 3.30.2...

CVE-2023-33327: Improper Privilege Management

Improper Privilege Management vulnerability in Teplitsa of social technologies Leyka allows Privilege Escalation.This issue affects Leyka: from n/a through 3.30.2...

WordPress plugin Leyka 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-12429 · Leyka · Leyka

Name of the Vulnerable Software and Affected Versions: Leyka versions 3.30.2 and earlier Description: The issue is related to Improper Privilege Management, which allows Privilege Escalation in Leyka. Recommendations: For Leyka versions 3.30.2 and earlier, at the moment, there is no information...

CVE-2024-0096: Improper Privilege Management

NVIDIA ChatRTX for Windows contains a vulnerability in Chat RTX UI, where a user can cause an improper privilege management issue by sending user inputs to change execution flow. A successful exploit of this vulnerability might lead to information disclosure, escalation of privileges, and data...

CVE-2024-0097: Improper Privilege Management

NVIDIA ChatRTX for Windows contains a vulnerability in ChatRTX UI, where a user can cause an improper privilege management issue by exploiting interprocess communication between different processes. A successful exploit of this vulnerability might lead to information disclosure, escalation of...

CVE-2024-4545: Improper Privilege Management

All versions of EnterpriseDB Postgres Advanced Server EPAS from 15.0 prior to 15.7.0 and from 16.0 prior to 16.3.0 may allow users using edbldr to bypass role permissions from pgreadserverfiles. This could allow low privilege users to read files to which they would not otherwise have access...

CVE-2024-27796

The issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7. An attacker may be able to elevate privileges...

RHEL 5 : net-snmp (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - net-snmp: Heap corruption in snmppduparse function in snmplib/snmpapi.c CVE-2018-1000116 - Net-SNMP throu...

CVE-2024-3507 Privilege escalation vulnerability in Lunar

Improper privilege management vulnerability in Lunar software that affects versions 6.0.2 through 6.6.0. This vulnerability allows an attacker to perform a secondary process injection into the Lunar application and abuse those rights to access sensitive user information...

CVE-2024-3507 Privilege escalation vulnerability in Lunar

Improper privilege management vulnerability in Lunar software that affects versions 6.0.2 through 6.6.0. This vulnerability allows an attacker to perform a secondary process injection into the Lunar application and abuse those rights to access sensitive user information...

CVE-2024-3507: Improper Privilege Management

Improper privilege management vulnerability in Lunar software that affects versions 6.0.2 through 6.6.0. This vulnerability allows an attacker to perform a secondary process injection into the Lunar application and abuse those rights to access sensitive user information...

PT-2024-26306 · Lunar · Lunar

Name of the Vulnerable Software and Affected Versions: Lunar software versions 6.0.2 through 6.6.0 Description: The issue is related to improper privilege management in the Lunar software, allowing an attacker to perform a secondary process injection into the application. This can lead to the abu...

CVE-2024-0024: Improper Privilege Management

In multiple methods of UserManagerService.java, there is a possible failure to persist or enforce user restrictions due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2024-23713: Improper Privilege Management

In migrateNotificationFilter of NotificationManagerService.java, there is a possible failure to persist notifications settings due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...