Lucene search
K

1219 matches found

Positive Technologies
Positive Technologies
added 2024/10/17 12:0 a.m.3 views

PT-2024-33463 · WordPress · Job Board Manager

Name of the Vulnerable Software and Affected Versions: Job Board Manager for WordPress versions 1.0 and earlier Description: The issue is related to an Incorrect Privilege Assignment vulnerability, which allows Privilege Escalation in the Job Board Manager for WordPress. This flaw enables attacke...

9.8CVSS7.2AI score0.00463EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2024/10/17 12:0 a.m.3 views

PT-2024-33353 · Unknown · Madiri Salman Aashish

Name of the Vulnerable Software and Affected Versions: Madiri Salman Aashish versions n/a through 1.1 Description: The issue is related to Incorrect Privilege Assignment in the registration system, allowing Privilege Escalation when adding drop down roles. This can be exploited due to the incorre...

9.8CVSS6.9AI score0.00463EPSS
Exploits0References6
Veracode
Veracode
added 2024/10/15 4:0 p.m.9 views

Incorrect Privilege Assignment

github.com/hashicorp/vault is vulnerable to Incorrect Privilege Assignment. The vulnerability is due to the mishandling of entries in an in-memory cache, a privileged operators could manipulate their cached record through an API endpoint on a node, potentially escalating their privileges to the...

7.2CVSS6.5AI score0.00528EPSS
Exploits0References4Affected Software1
CNNVD
CNNVD
added 2024/10/02 12:0 a.m.2 views

OpenText Vertica 安全漏洞

OpenText Vertica is a relational database management system RDBMS from OpenText Canada that can efficiently store massive amounts of data. A security vulnerability exists in OpenText Vertica that stems from incorrect privilege assignment. The following versions are affected: versions 10.0 through...

9.8CVSS6.8AI score0.00309EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/09/25 12:0 a.m.2 views

Olgu Computer Systems e-Belediye 安全漏洞

Olgu Computer Systems e-Belediye is an application from Olgu Computer Systems. A security vulnerability exists in Olgu Computer Systems e-Belediye prior to version 2.0.642, which arises from incorrect privilege assignment of externally controlled filenames or paths, and allows manipulation of Web...

9.8CVSS6.6AI score0.0041EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/09/23 12:0 a.m.3 views

PT-2024-39310 · Acronis · Acronis Cyber Protect Cloud Agent

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect Cloud Agent versions prior to build 38565 Description: The issue is related to local active protection service settings manipulation due to unnecessary privileges assignment, which could lead to potential system...

4.7CVSS7AI score0.00134EPSS
Exploits0References7
NVD
NVD
added 2024/09/17 2:15 p.m.19 views

CVE-2024-22303

Incorrect Privilege Assignment vulnerability in favethemes Houzez allows Privilege Escalation.This issue affects Houzez: from n/a through 3.2.4...

8.8CVSS0.00447EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/09/17 12:0 a.m.2 views

PT-2024-19325 · Houzez · Houzez

Name of the Vulnerable Software and Affected Versions: Houzez versions 3.2.4 and earlier Description: The issue is related to an Incorrect Privilege Assignment vulnerability, which allows Privilege Escalation in Houzez. Recommendations: For Houzez versions 3.2.4 and earlier, update to a version...

9CVSS6.8AI score0.00447EPSS
Exploits0References14
BDU FSTEC
BDU FSTEC
added 2024/09/16 12:0 a.m.2 views

The vulnerability of the LiteSpeed Cache plugin for WordPress (LSCWP), a content management system for WordPress websites, relates to improper privilege assignment, allowing attackers to escalate their privileges.

The vulnerability of the LiteSpeed Cache plugin for WordPress LSCWP, a content management system for WordPress websites, is related to incorrect privilege assignment. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

10CVSS5.9AI score0.67925EPSS
Exploits8References3Affected Software1
CNVD
CNVD
added 2024/09/03 12:0 a.m.3 views

Dell PowerScale OneFS Incorrect Privilege Assignment Vulnerability

Dell PowerScale OneFS is a proprietary operating system developed by Dell for its PowerScale horizontally scalable NAS network attached storage solution. Dell PowerScale OneFS suffers from an incorrect privilege assignment vulnerability that could be exploited by an attacker to gain root-level...

6.7CVSS7.1AI score0.00156EPSS
Exploits0References1
NVD
NVD
added 2024/08/31 8:15 a.m.21 views

CVE-2024-39579

Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contains an incorrect privilege assignment vulnerability. A local high privileged attacker could potentially exploit this vulnerability to gain root-level access...

6.7CVSS0.00156EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/08/31 7:40 a.m.10 views

CVE-2024-39579

Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contains an incorrect privilege assignment vulnerability. A local high privileged attacker could potentially exploit this vulnerability to gain root-level access...

6.7CVSS6.7AI score0.00156EPSS
Exploits0References1
CVE
CVE
added 2024/08/31 7:40 a.m.56 views

CVE-2024-39579

CVE-2024-39579 affects Dell PowerScale OneFS 8.2.2.x–9.8.0.0, with an incorrect privilege assignment vulnerability that could allow a local, high-privilege attacker to obtain root-level access. The connected documents provide specific affected versions and the local exploit scenario; exploitation...

6.7CVSS6.7AI score0.00156EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2024/08/31 12:0 a.m.3 views

Dell PowerScale OneFS 安全漏洞

Dell PowerScale OneFS is a proprietary operating system developed by Dell for its PowerScale horizontally scalable NAS network attached storage solution. Dell PowerScale OneFS suffers from an incorrect privilege assignment vulnerability that could be exploited by an attacker to gain root-level...

6.7CVSS7AI score0.00156EPSS
Exploits0References3
OSV
OSV
added 2024/08/22 3:15 a.m.2 views

CVE-2024-39576

Dell Power Manager DPM, versions 3.15.0 and prior, contains an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution and Elevation of privileges...

8.8CVSS5.9AI score0.00151EPSS
Exploits0References1
NVD
NVD
added 2024/08/22 3:15 a.m.10 views

CVE-2024-39576

Dell Power Manager DPM, versions 3.15.0 and prior, contains an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution and Elevation of privileges...

8.8CVSS0.00151EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/08/22 2:54 a.m.13 views

CVE-2024-39576

Dell Power Manager DPM, versions 3.15.0 and prior, contains an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution and Elevation of privileges...

8.8CVSS6.9AI score0.00151EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/08/22 2:54 a.m.10 views

CVE-2024-39576

Dell Power Manager DPM, versions 3.15.0 and prior, contains an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution and Elevation of privileges...

8.8CVSS0.00151EPSS
Exploits0References1
CVE
CVE
added 2024/08/22 2:54 a.m.57 views

CVE-2024-39576

Dell Power Manager (DPM) versions ≤3.15.0 suffer from an Incorrect Privilege Assignment vulnerability due to insecure DCOM deserialization, enabling a low-privileged, locally authenticated attacker to achieve code execution and elevation to SYSTEM. Affected component: DPM; root cause: insecure pr...

8.8CVSS7.2AI score0.00151EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2024/08/21 3:11 p.m.15 views

GO-2022-0578 Incorrect Privilege Assignment in HashiCorp Vault in github.com/hashicorp/vault

Incorrect Privilege Assignment in HashiCorp Vault in github.com/hashicorp/vault...

8.1CVSS8.1AI score0.00755EPSS
Exploits0References4
Rows per page
Query Builder