4460 matches found
CVE-2025-4646
Improper Privilege Management vulnerability in Centreon web API Token creation form modules allows Privilege Escalation.This issue affects web: from 24.04.0 before 24.04.10, from 24.10.0 before 24.10.4...
Dell PowerScale InsightIQ 安全漏洞
Dell PowerScale InsightIQ is a powerful performance monitoring and reporting tool from Dell, Inc. An elevation of privilege vulnerability exists in Dell PowerScale InsightIQ that stems from improper privilege management and can be exploited by an attacker to cause an elevation of privilege...
Mitsubishi Electric Iconics Digital Solutions 安全漏洞
Mitsubishi Electric Iconics Digital Solutions is a digital solutions software from Mitsubishi Electric Japan. A security vulnerability exists in Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions prior to 10.97.3, GENESIS64 versions, and MC Works64 versions, which stems from imprope...
PT-2025-21354 · Dell · Dell Powerscale Insightiq
Name of the Vulnerable Software and Affected Versions: Dell PowerScale InsightIQ versions 5.0 through 5.2 Description: The issue is related to improper privilege management. An unauthenticated attacker with remote access could potentially exploit this, leading to elevation of privileges...
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the insecure management of privileges, allowing attackers to escalate their privileges.
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the insecure management of privileges. Exploiting this vulnerability can allow attackers to increase their privileges...
The vulnerability of the Secure Kernel Mode mode in Windows operating systems allows attackers to enhance their privileges.
The vulnerability of the Secure Kernel Mode feature in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...
CVE-2025-0131 GlobalProtect App: Incorrect Privilege Management Vulnerability in OPSWAT MetaDefender Endpoint Security SDK
An incorrect privilege management vulnerability in the OPSWAT MetaDefender Endpoint Security SDK used by the Palo Alto Networks GlobalProtect™ app on Windows devices allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\SYSTEM. However,...
The vulnerability of the monitoring tool for VMware Aria Operations, related to errors in privilege management, allows a perpetrator to escalate their privileges.
The vulnerability of the monitoring tool for VMware Aria Operations is related to errors in privilege management. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of VMware NSX network virtualization platform, related to insecure management of privileges, allows attackers to escalate their privileges.
The vulnerability of VMware NSX network virtualization platform is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
Palo Alto Networks GlobalProtect 安全漏洞
Palo Alto Networks GlobalProtect is a suite of network protection software from Palo Alto Networks, USA. The software provides features such as firewall monitoring and threat prevention. A security vulnerability exists in Palo Alto Networks GlobalProtect, which stems from a potential elevation of...
Alibaba Cloud Linux 3 : 0005: net-snmp (ALINUX3-SA-2021:0005)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2021:0005 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2020-15862: Net-SNMP through 5.7.3 has Improper...
CVE-2025-29976
Improper privilege management in Microsoft Office SharePoint allows an authorized attacker to elevate privileges locally...
CVE-2025-4649
Improper Handling of Exceptional Conditions vulnerability in Centreon web allows Privilege Escalation. ACL are not correctly taken into account in the display of the "event logs" page. This page requiring, high privileges, will display all available logs. This issue affects web: from 24.10.3 befo...
CVE-2025-4649 ACL are not correctly taken into account in the display of the "event logs" page. This page requiring, high privileges, will display all available logs.
Improper Handling of Exceptional Conditions vulnerability in Centreon web allows Privilege Escalation. ACL are not correctly taken into account in the display of the "event logs" page. This page requiring, high privileges, will display all available logs. This issue affects web: from 24.10.3 befo...
CVE-2025-4649
Centreon web contains an ACL-related privilege management flaw that can lead to privilege escalation when viewing the event logs. Affected versions are: 24.10.3–24.10.4, 24.04.09–24.04.10, 23.10.19–23.10.21, and 23.04.24–23.04.26. Remediation is to upgrade to 24.10.4+ for the 24.10 line, 24.04.10...
CVE-2025-4649 ACL are not correctly taken into account in the display of the "event logs" page. This page requiring, high privileges, will display all available logs.
Improper Handling of Exceptional Conditions vulnerability in Centreon web allows Privilege Escalation. ACL are not correctly taken into account in the display of the "event logs" page. This page requiring, high privileges, will display all available logs. This issue affects web: from 24.10.3 befo...
CVE-2025-4646
Centreon Web (API Token creation form modules) is affected by CVE-2025-4646: an Improper Privilege Management vulnerability that can enable privilege escalation. The issue exists in Centreon Web versions 24.04.0 up to, but not including, 24.04.10 and 24.10.0 up to, but not including, 24.10.4. Roo...
CVE-2025-4646 A high privilege user is able to create and use a valid admin API token in centreon-web
Incorrect Authorization vulnerability in Centreon web API Token creation form modules allows Privilege Escalation.This issue affects web: from 24.04.0 before 24.04.10, from 24.10.0 before 24.10.4...
CVE-2025-4646 A high privilege user is able to create and use a valid admin API token in centreon-web
Incorrect Authorization vulnerability in Centreon web API Token creation form modules allows Privilege Escalation.This issue affects web: from 24.04.0 before 24.04.10, from 24.10.0 before 24.10.4...
