4460 matches found
CVE-2025-26705
Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1.03.05...
CVE-2025-26705
CVE-2025-26705 describes an "Improper Privilege Management" vulnerability in ZTE GoldenDB that allows privilege escalation. Affected versions are GoldenDB 6.1.03 through 6.1.03.05. The NVD entry and multiple feeds corroborate the issue, with CVSS v3.1 metrics indicating high impact on confidentia...
CVE-2025-26706
Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1.03.07...
CVE-2025-26706
Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1.03.07...
CVE-2025-26707
Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1.03.05...
CVE-2025-26707
CVE-2025-26707 concerns ZTE GoldenDB. Multiple sources confirm an Improper Privilege Management vulnerability enabling privilege escalation. Affected product: ZTE GoldenDB, specifically versions 6.1.03 through 6.1.03.05. Root cause is improper privilege management that can allow an unauthorized a...
CVE-2025-26707
Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1.03.05...
CVE-2025-26707
Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1.03.05...
ZTE GoldenDB 安全漏洞
ZTE GoldenDB is a financial-grade transactional distributed database from China's ZTE Corporation ZTE. It is used in finance, government and enterprise, telecom and other industries to provide highly available data services. An unauthorized access vulnerability exists in ZTE GoldenDB, which stems...
ZTE GoldenDB 安全漏洞
ZTE GoldenDB is a financial-grade transactional distributed database from China's ZTE Corporation ZTE. It is used in finance, government and enterprise, telecom and other industries to provide highly available data services. An elevation of privilege vulnerability exists in ZTE GoldenDB, which...
ZTE GoldenDB 安全漏洞
ZTE GoldenDB is a financial-grade transactional distributed database from China's ZTE Corporation ZTE. It is used in finance, government and enterprise, telecom and other industries to provide highly available data services. An unauthorized access vulnerability exists in ZTE GoldenDB, which stems...
PT-2025-10796
Name of the Vulnerable Software and Affected Versions Azure Agent Installer affected versions not specified Description The issue is related to improper privilege management in the Azure Agent Installer, which allows an authorized attacker to elevate privileges locally. Recommendations At the...
Huawei HarmonyOS lock screen module privilege management vulnerability
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A privilege management vulnerability exists in the Huawei HarmonyOS lock screen module, which can be exploited by an attacker to compromise confidentiality...
Improper Privilege Management
org.apache.streampipes, streampipes-parent is vulnerable to improper privilege management. The vulnerability is due to missing or improper access control checks in the REST interface, allowing unauthorized access to resources when the resource ID is known...
CVE-2024-24778
Improper privilege management in a REST interface allowed registered users to access unauthorized resources if the resource ID was know. This issue affects Apache StreamPipes: through 0.95.1. Users are recommended to upgrade to version 0.97.0 which fixes the issue...
The vulnerability of Ivanti Connect Secure and Ivanti Policy Secure, which are network access control tools, stems from insecure privilege management. This allows attackers to elevate their privileges.
The vulnerability of the Ivanti Connect Secure and Ivanti Policy Secure network access control tools is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...
Linux Distros Unpatched Vulnerability : CVE-2022-0144
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - shelljs is vulnerable to Improper Privilege Management CVE-2022-0144 Note that Nessus relies on the presence of the package as reported by the vendor...
The vulnerability of the tool for configuring and managing Linux operating system’s iptables packet filtering rules stems from insecure privilege management, allowing a malicious actor to execute arbitrary bash commands.
The vulnerability of the tool for configuring and managing iptables packet filtering rules in Linux operating systems is related to insecure management of privileges. Exploiting this vulnerability allows a malicious actor to execute arbitrary bash commands by adding comments to security rules fro...
The vulnerability of the IBM Security Verify Access access control system, related to errors in privilege management, allows attackers to elevate their privileges.
The vulnerability of the IBM Security Verify Access access control system is related to errors in privilege management. Exploiting this vulnerability can allow attackers to enhance their privileges...
CVE-2025-1425 File Read Through Improper Sudo Privilege Management
A Sudo privilege misconfiguration vulnerability in PocketBook InkPad Color 3 on Linux, ARM allows attackers to read file contents on the device.This issue affects InkPad Color 3: U743k3.6.8.3671...