ROS-20260910-73-0062

The vulnerability in Chromium is related to insecure handling of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the program for querying and managing Udisks devices, related to insecure management of privileges, allows a perpetrator to trigger a service failure.

The vulnerability of the program for querying and managing Udisks storage devices is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the GitHub CI workflow server for syntax analysis, Parse Server, allows a perpetrator to gain unauthorized access to protected information and enhance their privileges.

The vulnerability of the GitHub CI workflow server for syntax analysis in Parse Server is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information and enhance their privileges...

The vulnerability of the ImageCapture component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.

The vulnerability of the ImageCapture component in Google Chrome and Microsoft Edge browsers is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially crafted HTML page...

The vulnerability of the Business Logic Infrastructure Security component of the JD Edwards EnterpriseOne Resource Management System allows a hacker to gain full control over the application.

The vulnerability of the Business Logic Infrastructure Security component of the JD Edwards EnterpriseOne Tools system for resource management involves insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using th...

The vulnerability of the React Native native bottom tabs library, related to insecure privilege management, allows attackers to execute arbitrary code.

The vulnerability of the React Native native bottom tabs library relates to insecure handling of privileges. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the System Profile function in the Nagios XI monitoring tool allows attackers to escalate their privileges.

The vulnerability of the System Profile function in the Nagios XI monitoring tool is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

Ivanti Endpoint Manager 安全漏洞

Ivanti Endpoint Manager is a comprehensive endpoint management solution developed by Ivanti to unify the management of all types of devices in an enterprise network, including Windows, macOS, Linux, ChromeOS, mobile devices and IoT devices. Ivanti Endpoint Manager suffers from a privilege issue...

EUVD-2000-0350

Malware in sbrugna...

LangChain-ChatGLM-Webui 安全漏洞

LangChain-ChatGLM-Webui is an X-D Lab open source AI based on automated quizzing against a local knowledge base. A security vulnerability exists in LangChain-ChatGLM-Webui version ef829, which stems from insecure privileges that allow an attacker to view and download sensitive files via a special...

The vulnerability of the GoldenDB database management system, related to insecure privilege management, allows attackers to elevate their privileges.

The vulnerability of the GoldenDB database management system is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the upKeeper Instant Privilege Access software lies in its insecure management of privileges, allowing attackers to escalate their own privileges.

The vulnerability of the upKeeper Instant Privilege Access software lies in the insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

The vulnerability of the Windows Installer component on Windows operating systems allows a perpetrator to elevate their privileges to the SYSTEM level.

The vulnerability of the Windows Installer component in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to elevate their privileges to the SYSTEM level...

foxmarks 安全漏洞

foxmarks is an extremely fast, highly extensible and easy to integrate command line read-only interface by zefr0x individual developers. A security vulnerability exists in foxmarks versions prior to v2.1.0, which stems from the presence of insecure privileges that allow a malicious user to read t...

Kuma 安全漏洞

Kuma is a modern Envoy-based service grid open-sourced by Kuma. It can be run on Kubernetes and VMs with single or multiple zones capacity on each cloud. A security vulnerability exists in Kuma v2.7.0 and prior versions that stems from the presence of insecure privileges that allow an attacker to...

The vulnerability of Zoom’s video conferencing software relates to the insecure management of privileges, allowing attackers to escalate their privileges.

The vulnerability of Zoom’s video conferencing software relates to the insecure management of privileges. Exploiting this vulnerability can allow a hacker to escalate their privileges...

CVE-2024-4884

The CVE-2024-4884 family affects Progress WhatsUp Gold versions released before 2023.1.3, with unauthenticated remote code execution via the CommunityController (Apm.UI.Areas.APM.Controllers.CommunityController) and related paths (GetFileWithoutZip) that allow command execution with iisapppool\nm...

Netgear WNR614 Security Vulnerability

The Netgear WNR614 is an N300 wireless router with external antenna from Netgear USA. A security vulnerability exists in the Netgear WNR614 version V1.1.0.541.0.1, which stems from the presence of insecure privileges that allow an attacker to access URLs and directories embedded in the firmware v...

Human Resource Management System 安全漏洞

Human Resource Management System is a human resource management system by maverickosama Individual Developer. A security vulnerability exists in Sourcecodester Human Resource Management System version 1.0, which stems from the presence of insecure privileges...

The vulnerability of the GLPI system’s request, incident, and asset inventory management, related to insecure privilege management, allows a malicious actor to gain unauthorized access to any user’s account.

The vulnerability of the GLPI system for requests, incidents, and inventory management is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to the account of any user...