2963 matches found
CVE-2021-42303: Improper Privilege Management
Azure RTOS Elevation of Privilege Vulnerability...
CVE-2021-25508: Improper Privilege Management
Improper privilege management vulnerability in API Key used in SmartThings prior to 1.7.73.22 allows an attacker to abuse the API key without limitation...
PT-2021-16698
Name of the Vulnerable Software and Affected Versions SmartThings versions prior to 1.7.73.22 Description The issue is related to improper privilege management in the API Key used in SmartThings, allowing an attacker to abuse the API key without limitation. Recommendations For versions prior to...
VulnCheck KEV: CVE-2020-8655
EyesOfNetwork contains an improper privilege management vulnerability that may allow a user to run commands as root via a crafted Nmap Scripting Engine NSE script to nmap7...
NewStart CGSL CORE 5.05 / MAIN 5.05 : net-snmp Vulnerability (NS-SA-2021-0150)
The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has net-snmp packages installed that are affected by a vulnerability: - Net-SNMP through 5.7.3 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary commands as root...
Improper Privilege Management in shadow-maint/shadow
Description The su utility, if compiled with PAM support, uses waitpid internally to monitor its child process. It depends on the creation of zombie processes for proper monitoring, but the creation can be suppressed by ignoring the SIGCHLD signal see waitpid manual page. If su is spawned from a...
CVE-2021-31350
An Improper Privilege Management vulnerability in the gRPC framework, used by the Juniper Extension Toolkit JET API on Juniper Networks Junos OS and Junos OS Evolved, allows a network-based, low-privileged authenticated attacker to perform operations as root, leading to complete compromise of the...
CVE-2021-31350
CVE-2021-31350 affects Juniper Junos OS and Junos OS Evolved via the Juniper Extension Toolkit (JET) gRPC API. The issue stems from jsd authenticating a user and passing configuration operations to mgd (root-owned), enabling network-based, low-privilege attackers to perform root-level operations....
CVE-2021-31350: Improper Privilege Management
An Improper Privilege Management vulnerability in the gRPC framework, used by the Juniper Extension Toolkit JET API on Juniper Networks Junos OS and Junos OS Evolved, allows a network-based, low-privileged authenticated attacker to perform operations as root, leading to complete compromise of the...
CVE-2021-31360: Improper Privilege Management
An improper privilege management vulnerability in the Juniper Networks Junos OS and Junos OS Evolved command-line interpreter CLI allows a low-privileged user to overwrite local files as root, possibly leading to a system integrity issue or Denial of Service DoS. Depending on the files overwritte...
PT-2021-15218
Name of the Vulnerable Software and Affected Versions ConneXium Network Manager Software All Versions Description A vulnerability exists due to improper privilege management, which could lead to arbitrary command execution when the software is configured with specially crafted event actions...
in tsolucio/corebos
Description Just like last report of mine there is another improper privilege management that test user can see other users special workflow contents like Tasks just go to this link that belong to admin from another users account...
CVE-2021-31350
An Improper Privilege Management vulnerability in the gRPC framework, used by the Juniper Extension Toolkit JET API on Juniper Networks Junos OS and Junos OS Evolved, allows a network-based, low-privileged authenticated attacker to perform operations as root, leading to complete compromise of the...
CVE-2021-41347: Improper Privilege Management
Windows AppX Deployment Service Elevation of Privilege Vulnerability...
Juniper Junos OS Multiple Vulnerabilities (JSA11222)
The version of Junos OS installed on the remote host is affected by multiple vulnerabilities as referenced in the JSA11222 advisory. - A local privilege escalation vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged user to cause the Juniper DHCP daemon...
Juniper Junos OS Vulnerability (JSA11215)
The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11215 advisory. - An Improper Privilege Management vulnerability in the gRPC framework, used by the Juniper Extension Toolkit JET API on Juniper Networks Junos OS and Junos OS Evolved, allo...
CVE-2021-42135: Improper Privilege Management
HashiCorp Vault and Vault Enterprise 1.8.x through 1.8.4 may have an unexpected interaction between glob-related policies and the Google Cloud secrets engine. Users may, in some situations, have more privileges than intended, e.g., a user with read permission for the /gcp/roleset/ path may be abl...
CVE-2021-27664: Improper Privilege Management
Under certain configurations an unauthenticated remote user could be given access to credentials stored in the exacqVision Server...
IBM Sterling File Gateway Information Disclosure Vulnerability (CNVD-2021-78441)
IBM Sterling File Gateway, an application for transferring files between internal and external partners, allows you to more securely and reliably transfer files with trading partners. an information disclosure vulnerability exists in IBM Sterling File Gateway version 2.2.0.0-6.1.1.0. The...
