2975 matches found
CVE-2024-0219: Improper Privilege Management
In Telerik JustDecompile versions prior to 2024 R1, a privilege elevation vulnerability has been identified in the applications installer component. In an environment where an existing Telerik JustDecompile install is present, a lower privileged user has the ability to manipulate the installation...
CVE-2024-21985: Improper Privilege Management
ONTAP 9 versions prior to 9.9.1P18, 9.10.1P16, 9.11.1P13, 9.12.1P10 and 9.13.1P4 are susceptible to a vulnerability which could allow an authenticated user with multiple remote accounts with differing roles to perform actions via REST API beyond their intended privilege. Possible actions include...
CVE-2023-52093: Improper Privilege Management
An exposed dangerous function vulnerability in the Trend Micro Apex One agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this...
VulnCheck KEV: CVE-2023-41243
Improper Privilege Management vulnerability in WPvivid Team WPvivid Backup and Migration allows Privilege Escalation.This issue affects WPvivid Backup and Migration: from n/a through 0.9.90...
CVE-2023-52116: Improper Privilege Management
Permission management vulnerability in the multi-screen interaction module. Successful exploitation of this vulnerability may cause service exceptions of the device...
CVE-2023-52107: Improper Privilege Management
Vulnerability of permissions being not strictly verified in the WMS module. Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2023-52114: Improper Privilege Management
Data confidentiality vulnerability in the ScreenReader module. Successful exploitation of this vulnerability may affect service integrity...
CVE-2023-44250: Improper Privilege Management
An improper privilege management vulnerability CWE-269 in a Fortinet FortiOS HA cluster version 7.4.0 through 7.4.1 and 7.2.5 and in a FortiProxy HA cluster version 7.4.0 through 7.4.1 allows an authenticated attacker to perform elevated actions via crafted HTTP or HTTPS requests...
CVE-2024-21638: Improper Privilege Management
Azure IPAM IP Address Management is a lightweight solution developed on top of the Azure platform designed to help Azure customers manage their IP Address space easily and effectively. By design there is no write access to customers' Azure environments as the Service Principal used is only assign...
PT-2024-1008 · Fortinet · Fortiproxy +1
Name of the Vulnerable Software and Affected Versions: FortiOS versions 7.2.5 through 7.4.1 FortiProxy versions 7.4.0 through 7.4.1 Description: An improper privilege management issue allows an authenticated attacker to perform elevated actions via crafted HTTP or HTTPS requests. This can...
CVE-2023-41784: Improper Privilege Management
Permissions and Access Control Vulnerability in ZTE Red Magic 8 Pro...
CVE-2024-21622: Improper Privilege Management
Craft is a content management system. This is a potential moderate impact, low complexity privilege escalation vulnerability in Craft starting in 3.x prior to 3.9.6 and 4.x prior to 4.4.16 with certain user permissions setups. This has been fixed in Craft 4.4.16 and Craft 3.9.6. Users should ensu...
PT-2023-32834 · Ewelink · Ewelink
Name of the Vulnerable Software and Affected Versions: eWeLink versions prior to 5.2.0 Description: The issue is related to improper privilege management in the eWeLink application on Android and iOS, allowing for application lockscreen bypass. Recommendations: For versions prior to 5.2.0, update...
CVE-2023-23429: Improper Privilege Management
Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions...
CVE-2023-51435: Improper Privilege Management
Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak...
CVE-2023-51429: Improper Privilege Management
Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak...
CVE-2023-51433: Improper Privilege Management
Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak...
CVE-2023-23427: Improper Privilege Management
Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions...
CVE-2023-23428: Improper Privilege Management
Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions...
CVE-2023-23438: Improper Privilege Management
Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions...