ROS-20260921-73-0108

The vulnerability in golang-github-rancher-local-path-provisioner is related to insecure privilege management. Exploiting this vulnerability could allow an attacker to increase their privileges...

The vulnerability of component E1 Foundation within the financial system module of the ERP system JD Edwards EnterpriseOne General Ledger, a business automation system developed by Oracle JD Edwards, allows a perpetrator to gain full control over this subsystem.

The vulnerability of component E1 Foundation in the financial management module of the JD Edwards EnterpriseOne General Ledger system, a business automation system, relates to insecure privilege management. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full...

The vulnerability of the Internal Operations component of the application’s technical maintenance, repair, and major system overhauls in Oracle Complex Maintenance, Repair, and Overhaul allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Internal Operations component of the Oracle Complex Maintenance application regarding technical maintenance, repairs, and major system overhauls is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker, operating remotely, to...

The vulnerability of the Apache HTTP Server web server, related to insecure management of privileges, allows attackers to elevate their own privileges.

The vulnerability of the Apache HTTP Server web server is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the RDBMS component of the database management system Oracle Database Server allows a hacker to gain full control over the system.

The vulnerability of the RDBMS component of the database management system, Oracle Database Server, is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to gain full control over the system remotely...

The vulnerability of the installation service of the Oracle Application Testing Suite allows a perpetrator to gain full control over the application.

The vulnerability of the installation service Install of the Oracle Application Testing Suite relates to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the Oracle Net protocol...

ROS-20260727-73-0024

A vulnerability in httpd related to insecure privilege management. Exploiting this vulnerability could allow an attacker to elevate their privileges...

The vulnerability of the WalletService service in the Windows operating system allows a perpetrator to escalate their privileges.

The vulnerability of the WalletService service in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to enhance their privileges...

The vulnerability of the Windows operating system installation process allows a perpetrator to escalate their privileges and execute arbitrary code.

The vulnerability of the Windows operating system installation process is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

The vulnerability in the virtual machine of the cloud security platform Palo Alto Networks Cortex XDR Broker VM, related to insecure privilege management, allows attackers to escalate their privileges.

The vulnerability of the virtual machine on Palo Alto Networks Cortex XDR Broker VM in cloud security platforms relates to insecure privilege management. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Internal Operations component of the Oracle HR Intelligence system, which is used for collecting and analyzing company personnel data. This component is part of the Oracle E-Business Suite, a business automation solution. This vulnerability allows attackers to gain full control over the application.

The vulnerability of the Internal Operations component of the Oracle HR Intelligence system, which is used for collecting and analyzing employee data, is related to insecure privilege management. Exploiting this vulnerability could allow an attacker to gain full control over the application using...

The vulnerability of the act_runner component in the Git repository management system Gitea, which allows a hacker to increase their privileges.

The vulnerability of the act Runner component in the Git repository management system Gitea is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

The vulnerabilities of Dell Elastic Cloud Storage and Dell ObjectScale storage platforms involve insecure privilege management, allowing attackers to escalate their privileges.

The vulnerability of Dell Elastic Cloud Storage and Dell ObjectScale storage platforms lies in the insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Enterprise browsers’ components, Google Chrome and Microsoft Edge, allows attackers to enhance their privileges.

The vulnerability of the Enterprise browsers’ components in Google Chrome and Microsoft Edge is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

ROS-20260610-73-0007

The vulnerability in Thunderbird is related to the insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

ROS-20260610-73-0012

The vulnerability in Thunderbird is related to the insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

ROS-20260430-73-0007

Vulnerability in crun related to insecure privilege management. Exploitation of the vulnerability could allow an attacker to escalate privileges...

The vulnerability of the compatibility package for Microsoft Azure Entra ID and Intune – Himmelblau – relates to insecure management of privileges, allowing an attacker to elevate their privileges.

The vulnerability of the compatibility package for Microsoft Azure Entra ID and Intune – identified by Himmelblau – involves insecure management of privileges. Exploiting this vulnerability could allow attackers to enhance their privileges...

The vulnerability of the /etc/shadow.sample file in D-Link DIR-1253 router microprogramming software allows a hacker to gain increased privileges.

The vulnerability of the /etc/shadow.sample file in D-Link DIR-1253 MESH router microprogramming software is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to elevate their privileges remotely...

ROS-20260330-73-0001

A vulnerability in the LSILogic module of the Oracle VM VirtualBox virtualization software tool is associated with insecure privilege management due to incorrect memory freeing. Exploitation of the vulnerability could allow an attacker to gain unauthorized access to protected information...