Lucene search
+L

2975 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/31 12:00 a.m.•9 views

CVE-2024-0219: Improper Privilege Management

In Telerik JustDecompile versions prior to 2024 R1, a privilege elevation vulnerability has been identified in the applications installer component. In an environment where an existing Telerik JustDecompile install is present, a lower privileged user has the ability to manipulate the installation...

7.8CVSS5.7AI score0.00189EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/26 12:00 a.m.•6 views

CVE-2024-21985: Improper Privilege Management

ONTAP 9 versions prior to 9.9.1P18, 9.10.1P16, 9.11.1P13, 9.12.1P10 and 9.13.1P4 are susceptible to a vulnerability which could allow an authenticated user with multiple remote accounts with differing roles to perform actions via REST API beyond their intended privilege. Possible actions include...

7.6CVSS5.8AI score0.00332EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/23 12:00 a.m.•4 views

CVE-2023-52093: Improper Privilege Management

An exposed dangerous function vulnerability in the Trend Micro Apex One agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this...

7.8CVSS7.5AI score0.00225EPSS
SaveExploits0References2
VulnCheck KEV
VulnCheck KEV
•added 2024/01/22 12:00 a.m.•15 views

VulnCheck KEV: CVE-2023-41243

Improper Privilege Management vulnerability in WPvivid Team WPvivid Backup and Migration allows Privilege Escalation.This issue affects WPvivid Backup and Migration: from n/a through 0.9.90...

8.8CVSS7.3AI score0.00713EPSS
SaveIn wildExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/16 12:00 a.m.•5 views

CVE-2023-52116: Improper Privilege Management

Permission management vulnerability in the multi-screen interaction module. Successful exploitation of this vulnerability may cause service exceptions of the device...

7.5CVSS7.2AI score0.0035EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/16 12:00 a.m.•5 views

CVE-2023-52107: Improper Privilege Management

Vulnerability of permissions being not strictly verified in the WMS module. Successful exploitation of this vulnerability may affect service confidentiality...

7.5CVSS7.2AI score0.00319EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/16 12:00 a.m.•3 views

CVE-2023-52114: Improper Privilege Management

Data confidentiality vulnerability in the ScreenReader module. Successful exploitation of this vulnerability may affect service integrity...

7.5CVSS7.2AI score0.00277EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/10 12:00 a.m.•3 views

CVE-2023-44250: Improper Privilege Management

An improper privilege management vulnerability CWE-269 in a Fortinet FortiOS HA cluster version 7.4.0 through 7.4.1 and 7.2.5 and in a FortiProxy HA cluster version 7.4.0 through 7.4.1 allows an authenticated attacker to perform elevated actions via crafted HTTP or HTTPS requests...

8.8CVSS7.8AI score0.00899EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/10 12:00 a.m.•5 views

CVE-2024-21638: Improper Privilege Management

Azure IPAM IP Address Management is a lightweight solution developed on top of the Azure platform designed to help Azure customers manage their IP Address space easily and effectively. By design there is no write access to customers' Azure environments as the Service Principal used is only assign...

9.8CVSS7.9AI score0.01657EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/01/09 12:00 a.m.•8 views

PT-2024-1008 · Fortinet · Fortiproxy +1

Name of the Vulnerable Software and Affected Versions: FortiOS versions 7.2.5 through 7.4.1 FortiProxy versions 7.4.0 through 7.4.1 Description: An improper privilege management issue allows an authenticated attacker to perform elevated actions via crafted HTTP or HTTPS requests. This can...

9CVSS8.6AI score0.00899EPSS
SaveExploits0References16
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/04 12:00 a.m.•10 views

CVE-2023-41784: Improper Privilege Management

Permissions and Access Control Vulnerability in ZTE Red Magic 8 Pro...

6.6CVSS6AI score0.00167EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/03 12:00 a.m.•6 views

CVE-2024-21622: Improper Privilege Management

Craft is a content management system. This is a potential moderate impact, low complexity privilege escalation vulnerability in Craft starting in 3.x prior to 3.9.6 and 4.x prior to 4.4.16 with certain user permissions setups. This has been fixed in Craft 4.4.16 and Craft 3.9.6. Users should ensu...

8.8CVSS7.5AI score0.00588EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/12/30 12:00 a.m.•15 views

PT-2023-32834 · Ewelink · Ewelink

Name of the Vulnerable Software and Affected Versions: eWeLink versions prior to 5.2.0 Description: The issue is related to improper privilege management in the eWeLink application on Android and iOS, allowing for application lockscreen bypass. Recommendations: For versions prior to 5.2.0, update...

7.7CVSS7.2AI score0.00238EPSS
SaveExploits0References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/29 12:00 a.m.•5 views

CVE-2023-23429: Improper Privilege Management

Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions...

7.5CVSS7.3AI score0.00282EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/29 12:00 a.m.•6 views

CVE-2023-51435: Improper Privilege Management

Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak...

7.1CVSS7AI score0.00158EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/29 12:00 a.m.•7 views

CVE-2023-51429: Improper Privilege Management

Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak...

6CVSS6AI score0.00152EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/29 12:00 a.m.•7 views

CVE-2023-51433: Improper Privilege Management

Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak...

5.5CVSS6AI score0.00131EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/29 12:00 a.m.•5 views

CVE-2023-23427: Improper Privilege Management

Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions...

7.5CVSS7.3AI score0.00341EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/29 12:00 a.m.•5 views

CVE-2023-23428: Improper Privilege Management

Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions...

7.5CVSS7.3AI score0.00305EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/29 12:00 a.m.•4 views

CVE-2023-23438: Improper Privilege Management

Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions...

5.5CVSS6AI score0.00144EPSS
SaveExploits0References2
Rows per page
Query Builder