CVE-2024-20854

Improper handling of insufficient privileges vulnerability in Samsung Camera prior to versions 12.1.0.31 in Android 12, 13.1.02.07 in Android 13, and 14.0.01.06 in Android 14 allows local attackers to access image data...

PT-2024-18764

Name of the Vulnerable Software and Affected Versions Samsung Camera versions prior to 12.1.0.31 in Android 12 Samsung Camera versions prior to 13.1.02.07 in Android 13 Samsung Camera versions prior to 14.0.01.06 in Android 14 Description The issue is related to improper handling of insufficient...

Improper Handling of Insufficient Privileges (Leaky Vessels)

Overview Affected versions of this package are vulnerable to Improper Handling of Insufficient Privileges Leaky Vessels via APIs for running interactive containers based on built images. It is possible to use these APIs to ask BuildKit to run a container with elevated privileges. Normally, runnin...

Improper Handling of Insufficient Privileges (Leaky Vessels)

Overview Affected versions of this package are vulnerable to Improper Handling of Insufficient Privileges Leaky Vessels via APIs for running interactive containers based on built images. It is possible to use these APIs to ask BuildKit to run a container with elevated privileges. Normally, runnin...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung SAMSUNG. A security vulnerability previously existed in SAMSUNG Mobile devices version 5.2.00.7, which stemmed from insufficient privileges or improper handling...

PT-2023-9633 · Nvidia · Nvidia Connectx Host Firmware

Name of the Vulnerable Software and Affected Versions: NVIDIA ConnectX Host Firmware for the BlueField Data Processing Unit DPU affected versions not specified Description: The issue is related to an improper handling of insufficient privileges, which may lead to denial of service, data tampering...

The vulnerability of the Management Central component of the IBM i operating system, which allows attackers to escalate their privileges.

The vulnerability of the Management Central component of the IBM i operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges and gain root access to the operating system...

The vulnerability of the libxpc library in MacOS operating systems allows a hacker to execute arbitrary code with root privileges.

The vulnerability of the libxpc library in MacOS operating systems is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to execute arbitrary code with root privileges...

The vulnerability of the kernel mode of NVIDIA GeForce, Studio, RTX/Quadro, NVS, and Tesla graphics processors allows attackers to perform spoofing attacks or induce service failures.

The vulnerability of the kernel mode of NVIDIA GeForce, Studio, RTX/Quadro, NVS, and Tesla graphics processors is related to improper handling of insufficient resolutions or privileges. Exploiting this vulnerability can allow attackers to perform spoofing attacks or cause service failures...

The vulnerability of the Crestron AirMedia collaborative presentation system lies in improper privilege handling, allowing an intruder to gain access to the command line with the SYSTEM privilege level.

The vulnerability of the Crestron AirMedia collaborative presentation system is related to incorrect privilege handling. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to the command line with SYSTEM privileges...

memos 安全漏洞

memos is an open source hosted memo center with knowledge management and social features. A security vulnerability exists in memos versions prior to 0.9.1, which stems from insufficient privileges or improper handling of privileges...

Apple macOS Monterey 安全漏洞

Apple macOS Monterey is the 18th major release of Apple's macOS for the Macintosh desktop operating system. An authorization issue vulnerability exists in Apple macOS Monterey 12.0 and later, and versions prior to 12.4, which stems from improper privilege management in an application and can be...

The vulnerability in the implementation of the Lockdown Mode mechanism for Linux operating systems allows a hacker to circumvent security restrictions.

The vulnerability in the implementation of the Lockdown Mode for Linux operating system kernels is related to the insecure handling of privileges during the loading of debugging tools KGDB and KDB. Exploiting this vulnerability can allow an attacker to circumvent security restrictions...

The vulnerability of Microsoft’s Credential Guard operating system, which allows a hacker to increase their privileges

The vulnerability of Microsoft’s Credential Guard operating system lies in the insecure handling of privileges. Exploiting this vulnerability could allow an attacker to enhance their privileges...

Vulnerability in the Jupiter Theme and JupiterX Core plugins of the WordPress content management system, allowing attackers to increase their privileges

The vulnerability in the Jupiter Theme and JupiterX Core plugins of the WordPress content management system is related to insecure handling of privileges. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

The vulnerability of the Log4j Java logging library lies in its insecure handling of privileges, allowing attackers to escalate their privileges.

The vulnerability of the Log4j Java logging library lies in the insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Bind Filter Driver for Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Bind Filter Driver for Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2022-25782

Improper Handling of Insufficient Privileges vulnerability in Web UI of Secomea GateManager allows logged in user to access and update privileged information. This issue affects: Secomea GateManager versions prior to 9.7...

CVE-2022-25782

Improper Handling of Insufficient Privileges vulnerability in Web UI of Secomea GateManager allows logged in user to access and update privileged information. This issue affects: Secomea GateManager versions prior to 9.7...

The vulnerability of the Windows Common Log File System Driver in the Windows operating system allows a hacker to gain increased privileges.

The vulnerability of the Windows Common Log File System Driver in the operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...