PT-2024-4469 · Opentext · Opentext Content Manager

Name of the Vulnerable Software and Affected Versions: OpenText Content Manager affected versions not specified Description: The issue is related to insecure privilege management in OpenText Content Manager. It allows a remote attacker to elevate privileges or perform arbitrary actions...

Grafana API Unauthorized Access

The vulnerability of the application programming interface of the Grafana data visualization web tool is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to limited functions...

Kaspersky Endpoint Security Privilege Bypass

The vulnerability of Kaspersky Endpoint Security’s antivirus protection for Windows relates to the insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to temporarily disable the protection modules during product installation or reinstallation scenarios...

Lenovo Privilege Escalation

The vulnerability of Lenovo’s tablet software is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

Lenovo tablet Privilege Bypass

The vulnerability of Lenovo tablet products’ microprogramming software is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to execute arbitrary commands...

Win32k Privilege Escalation

The vulnerability of the Win32k component in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Win32k Privilege Escalation

The vulnerability of the Win32k component in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Zyxel GS1900 series Switch Privilege Escalation

The vulnerability of the microprogrammed software of Zyxel GS1900 series switches is related to insecure management of privileges. Exploiting this vulnerability allows an attacker to execute arbitrary commands and elevate their privileges to the root level via SSH...

PT-2024-1104 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insecure privilege management in the Win32k component of Windows operating systems. It allows an attacker to elevate their privileges. Recommendations: At the moment...

PT-2024-1559 · Lenovo · Lenovo Tablet

Name of the Vulnerable Software and Affected Versions: Lenovo tablet products affected versions not specified Description: A privilege escalation issue is present in some Lenovo tablet products, related to insecure privilege management. This could allow a local application to access device...

PT-2024-1103 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the Win32k component in Windows operating systems and is associated with insecure privilege management. Exploitation of this issue may allow an attacker to elevate...

SAP XS Advanced Privilege Escalation

The vulnerability of the application access control library in the SAP XS Advanced sap-xssec development, integration, and application extension platform in the SAP Business Technology Platform BTP environment is related to insecure management of privileges. Exploiting this vulnerability can allo...

SAP Identity Services IAS Cloud Security Privilege Escalation

The vulnerability of the authentication library in applications that use the SAP Identity Authentication Service IAS on the SAP Business Technology Platform BTP for application development, integration, and expansion involves insecure management of privileges. Exploiting this vulnerability could...

Zyxel GS1900-24EP Privilege Bypass

The vulnerability of the microprogrammed software of Zyxel GS1900-24EP series switches is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to modify system settings on the vulnerable device...

Openstack Oslo.privsep Privilege Escalation

The vulnerability of the Oslo.privsep component in the OpenStack cloud service platform is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

Management Central Privilege Escalation

The vulnerability of the Management Central component of the IBM i operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges and gain root access to the operating system...

dmidecode Privilege Escalation

The vulnerability of the dmidecode utility in the Linux operating system is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

PT-2023-6764 · Ibm · Ibm I

Name of the Vulnerable Software and Affected Versions: IBM i versions 7.2 through 7.5 Description: The issue is related to insecure privilege management in the Management Central component of the IBM i operating system. A malicious actor with command line access can exploit this to elevate...

RDP Privilege Escalation

The vulnerability of the RDP protocol implementation in graphical driver software for Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

Premium Package Plugin Privilege Escalation

The vulnerability of the Premium Package plugin – securely selling digital products using the WordPress content management system – is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...