CVE-2024-23537: Improper Privilege Management

Improper Privilege Management vulnerability in Apache Fineract.This issue affects Apache Fineract: 1.8.5. Users are recommended to upgrade to version 1.9.0, which fixes the issue...

CVE-2024-25961

Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.x contains an improper privilege management vulnerability. A local high privileged attacker could potentially exploit this vulnerability, leading to escalation of privileges...

CVE-2024-25961: Improper Privilege Management

Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.x contains an improper privilege management vulnerability. A local high privileged attacker could potentially exploit this vulnerability, leading to escalation of privileges...

Improper Privilege Management

Snowflake Hive MetaStore Connector is vulnerable to Improper Privilege Management. The vulnerability is caused due to improper content validation within the addsnowflakehivemetastoreconnectorscriptaction.sh script, allowing a malicious actor to replace the valid content with malicious code,...

CMSV6 In-Vehicle Monitoring System 安全漏洞

CMSV6 In-Vehicle Monitoring System IVMS is a video monitoring system by YONGFU LI's personal developer. It is used for vehicle tracking and monitoring its performance and driver behavior. A security vulnerability exists in CMSV6 In-Vehicle Monitoring System versions v.7.31.0.2 through v.7.32.0.3,...

CVE-2024-1973: Improper Privilege Management

By leveraging the vulnerability, lower-privileged users of Content Manager can manipulate Content Manager clients to elevate privileges and perform unauthorized operations...

CVE-2024-2228: Improper Privilege Management

This vulnerability allows an authenticated user to perform a Lifecycle Manager flow or other QuickLink for a target user outside of the defined QuickLink Population...

CVE-2023-47715: Improper Privilege Management

IBM Storage Protect Plus Server 10.1.0 through 10.1.16 could allow an authenticated user with read-only permissions to add or delete entries from an existing HyperVisor configuration. IBM X-Force ID: 271538...

CVE-2024-2433 PAN-OS: Improper Privilege Management Vulnerability in Panorama Software Leads to Availability Loss

An improper authorization vulnerability in Palo Alto Networks Panorama software enables an authenticated read-only administrator to upload files using the web interface and completely fill one of the disk partitions with those uploaded files, which prevents the ability to log into the web interfa...

CVE-2024-2431: Improper Privilege Management

An issue in the Palo Alto Networks GlobalProtect app enables a non-privileged user to disable the GlobalProtect app in configurations that allow a user to disable GlobalProtect with a passcode...

CVE-2023-50726: Improper Privilege Management

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. "Local sync" is an Argo CD feature that allows developers to temporarily override an Application's manifests with locally-defined manifests. Use of the feature should generally be limited to highly-trusted users, since it...

CVE-2024-20262: Improper Privilege Management

A vulnerability in the Secure Copy Protocol SCP and SFTP feature of Cisco IOS XR Software could allow an authenticated, local attacker to create or overwrite files in a system directory, which could lead to a denial of service DoS condition. The attacker would require valid user credentials to...

CVE-2024-27207: Improper Privilege Management

Exported broadcast receivers allowing malicious apps to bypass broadcast protection...

CVE-2024-27224: Improper Privilege Management

In strncpy of strncpy.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-28197: Improper Privilege Management

Zitadel is an open source identity management system. Zitadel uses a cookie to identify the user agent browser and its user sessions. Although the cookie was handled according to best practices, it was accessible on subdomains of the ZITADEL instance. An attacker could take advantage of this and...

CVE-2024-23276: Improper Privilege Management

A logic issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able to elevate privileges...

CVE-2024-1442: Improper Privilege Management

A user with the permissions to create a data source can use Grafana API to create a data source with UID set to . Doing this will grant the user access to read, query, edit and delete all data sources within the organization...

CVE-2024-1764

Improper privilege management in Just-in-time JIT elevation module in Devolutions Server 2023.3.14.0 and earlier allows a user to continue using the elevated privilege even after the expiration under specific circumstances...

CVE-2024-1764

Devolutions Server versions 2023.3.14.0 and earlier are affected by an improper privilege management vulnerability in the Just-in-time (JIT) elevation module . Under specific circumstances, this flaw allows a user to maintain elevated privileges even after they have expired. No exploit informatio...

CVE-2023-38944: Improper Privilege Management

An issue in Multilaser RE160V firmware v12.03.01.09pt and Multilaser RE163V firmware v12.03.01.10pt allows attackers to bypass the access control and gain complete access to the application via modifying a HTTP header...