CVE-2023-20598: Improper Privilege Management

An improper privilege management in the AMD Radeon™ Graphics driver may allow an authenticated attacker to craft an IOCTL request to gain I/O control over arbitrary hardware ports or physical addresses resulting in a potential arbitrary code execution...

CVE-2023-44809: Improper Privilege Management

D-Link device DIR-820L 1.05B03 is vulnerable to Insecure Permissions...

CVE-2023-4822: Improper Privilege Management

Grafana is an open-source platform for monitoring and observability. The vulnerability impacts Grafana instances with several organizations, and allows a user with Organization Admin permissions in one organization to change the permissions associated with Organization Viewer, Organization Editor...

CVE-2023-4834: Improper Privilege Management

In Red Lion Europe mbCONNECT24 and mymbCONNECT24 and Helmholz myREX24 and myREX24.virtual up to and including 2.14.2 an improperly implemented access validation allows an authenticated, low privileged attacker to gain read access to limited, non-critical device information in his account he shoul...

Adobe Commerce 授权问题漏洞

Adobe Commerce is the United States of America Odobie Adobe company's a kind of merchants and brands for the world's leading digital commerce solutions. An authorization issue vulnerability previously existed in Adobe Commerce version 2.4.7, which stemmed from improper privilege management in the...

CVE-2023-44105: Improper Privilege Management

Vulnerability of permissions not being strictly verified in the window management module.Successful exploitation of this vulnerability may cause features to perform abnormally...

CVE-2023-44106: Improper Privilege Management

API permission management vulnerability in the Fwk-Display module.Successful exploitation of this vulnerability may cause features to perform abnormally...

CVE-2023-4936: Improper Privilege Management

It is possible to sideload a compromised DLL during the installation at elevated privilege...

GitHub: GHES Management console EoP (editor to site admin)

Improper privilege management in GitHub Enterprise Server allowed editor role users to escalate privileges by making requests to the bootstrapping endpoint...

CVE-2023-5402

A CWE-269: Improper Privilege Management vulnerability exists that could cause a remote code execution when the transfer command is used over the network...

CVE-2023-5402

A CWE-269: Improper Privilege Management vulnerability exists that could cause a remote code execution when the transfer command is used over the network...

CVE-2023-5402

Schneider Electric SpaceLogic C-Bus Toolkit is affected by CVE-2023-5402 (CWE-269: Improper Privilege Management). The vulnerability exists in the TransferCommand flow over the network and could enable remote code execution. Reported in multiple sources, the issue is exploitable remotely with low...

CVE-2023-5402

A CWE-269: Improper Privilege Management vulnerability exists that could cause a remote code execution when the transfer command is used over the network...

FreeBSD Security Vulnerabilities

FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation. A security vulnerability exists in FreeBSD that stems from an improper privilege check in copyfilerange...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, and more, from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices version 8.7, which stems from an improper privilege retention vulnerability in Samsung...

Improper Privilege Management

prestashop/prestashop is vulnerable to Improper Privilege Management. The vulnerability is caused by a missing authorization/access rights check in the ajaxProcessGetPossibleHookingListForModule method while returning the possible hooks for a module. This can lead to an attacker listing all modul...

ZZZCMS Authorization Issues Vulnerabilities

ZZZCMS zzzphp is a content management system CMS. An authorization issue vulnerability exists in ZZZCMS version 2.1.7, which stems from improper privilege management...

CVE-2023-43663: Improper Privilege Management

PrestaShop is an Open Source e-commerce web application. In affected versions any module can be disabled or uninstalled from back office, even with low user right. This allows low privileged users to disable portions of a shops functionality. Commit ce1f6708 addresses this issue and is included i...

CVE-2023-43664: Improper Privilege Management

PrestaShop is an Open Source e-commerce web application. In the Prestashop Back office interface, an employee can list all modules without any access rights: method ajaxProcessGetPossibleHookingListForModule doesn't check access rights. This issue has been addressed in commit 15bd281c which is...

PT-2023-28191

Name of the Vulnerable Software and Affected Versions Simple Membership versions through 4.3.4 Description The issue is related to Improper Privilege Management, allowing Privilege Escalation in Simple Membership. Recommendations For versions through 4.3.4, update to a version later than 4.3.4 to...