2818 matches found
CVE-2011-3350: Improper Check for Dropped Privileges
masqmail 0.2.21 through 0.2.30 improperly calls seteuid in src/log.c and src/masqmail.c that results in improper privilege dropping...
CVE-2011-3349: Improper Privilege Management
lightdm before 0.9.6 writes in .dmrc and Xauthority files using root permissions while the files are in user controlled folders. A local user can overwrite root-owned files via a symlink, which can allow possible privilege escalation...
CVE-2019-15332: Improper Privilege Management
The Lava Z61 Android device with a build fingerprint of LAVA/Z612GB/Z612GB:8.1.0/O11019/1533889281:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app versionCode=400, versionName=v4.0.27 that allows any app co-located on the device to...
CVE-2019-14590: Improper Privilege Management
Improper access control in the API for the IntelR Graphics Driver versions before 26.20.100.7209 may allow an authenticated user to potentially enable information disclosure via local access...
CVE-2019-15799: Improper Privilege Management
An issue was discovered on Zyxel GS1900 devices with firmware before 2.50AAHH.0C0. User accounts created through the web interface of the device, when given non-admin level privileges, have the same level of privileged access as administrators when connecting to the device via SSH while their...
CVE-2013-4251: Improper Privilege Management
The scipy.weave component in SciPy before 0.12.1 creates insecure temporary directories...
CVE-2012-1187: Improper Check for Dropped Privileges
Bitlbee does not drop extra group privileges correctly in unix.c...
CVE-2019-4546: Improper Privilege Management
After installing the IBM Maximo Health- Safety and Environment Manager 7.6.1, a user is granted additional privileges that they are not normally allowed to access. IBM X-Force ID: 165948...
CVE-2019-15901: Improper Privilege Management
An issue was discovered in slicer69 doas before 6.2 on certain platforms other than OpenBSD. A setusercontext3 call with flags to change the UID, primary GID, and secondary GIDs was replaced on certain platforms: Linux and possibly NetBSD with a single setuid2 call. This resulted in neither...
Siemens Industrial Products Local Privilege Escalation Vulnerability (Update I)
1. EXECUTIVE SUMMARY CVSS v3 6.4 ATTENTION: Exploitable locally Vendor: Siemens Equipment: Industrial Products Vulnerability: Improper privilege management 2. UPDATE INFORMATION This updated advisory is a follow-up to the updated advisory titled ICSA-16-313-02 Siemens Industrial Products Local...
CVE-2019-4112: Improper Privilege Management
IBM WebSphere eXtreme Scale 8.6 Admin Console allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 158105...
CVE-2019-4477: Improper Privilege Management
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a user with access to audit logs to obtain sensitive information, caused by improper handling of command line options. IBM X-Force ID: 163997...
CVE-2016-10971: Improper Privilege Management
The MemberSonic Lite plugin before 1.302 for WordPress has incorrect login access control because only knowlewdge of an e-mail address is required...
CVE-2016-10972: Improper Privilege Management
The newspaper theme before 6.7.2 for WordPress has a lack of options access control via tdajaxupdatepanel...
CVE-2019-1215: Improper Privilege Management
An elevation of privilege vulnerability exists in the way that ws2ifsl.sys Winsock handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1253, CVE-2019-1278, CVE-2019-1303...
CVE-2017-18596: Improper Privilege Management
The elementor plugin before 1.8.0 for WordPress has incorrect access control for internal functions...
CVE-2018-21013: Improper Privilege Management
The Swape theme before 1.2.1 for WordPress has incorrect access control, as demonstrated by allowing new administrator accounts via vectors involving xmlPath to wp-admin/admin-ajax.php...
CVE-2019-4536: Improper Privilege Management
IBM i 7.4 users who have done a Restore User Profile RSTUSRPRF on a system which has been configured with Db2 Mirror for i might have user profiles with elevated privileges caused by incorrect processing during a restore of multiple user profiles. A user with restore privileges could exploit this...
CVE-2019-11551: Improper Privilege Management
In Code42 Enterprise and Crashplan for Small Business through Client version 6.9.1, an attacker can craft a restore request to restore a file through the Code42 app to a location they do not have privileges to write...