Lucene search
+L

4475 matches found

Cvelist
Cvelist
added 2024/08/14 4:44 p.m.32 views

CVE-2024-42440 Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS, Zoom Rooms Client for macOS - Improper Privilege Management

Improper privilege management in the installer for Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS and Zoom Rooms Client for macOS before 6.1.5 may allow a privileged user to conduct an escalation of privilege via local access...

6.2CVSS0.00213EPSS
SaveExploits0References1
Veracode
Veracode
added 2024/08/14 4:44 p.m.9 views

Improper Privilege Management

typo3/cms is vulnerable to unauthorized access vulnerability. The vulnerability is due to insufficient access control, allowing editors with access to the file metadata table to change, create, or delete metadata of files outside their authorized file mounts...

7AI score
SaveExploits0
CNVD
CNVD
added 2024/08/14 12:00 a.m.14 views

Siemens SINEC Traffic Analyzer Privilege Management Error Vulnerability

SINEC Traffic Analyzer is an on-premise application that monitors PNIO PROFINET IO communications between controllers and IO devices. A privilege management error vulnerability exists in Siemens SINEC Traffic Analyzer, which originates when the application mounts the container's root filesystem...

7.5CVSS6.7AI score0.00387EPSS
SaveExploits0References1
OSV
OSV
added 2024/08/13 12:15 p.m.7 views

CVE-2024-43153

Improper Privilege Management vulnerability in WofficeIO Woffice allows Privilege Escalation.This issue affects Woffice: from n/a through 5.4.10...

9.8CVSS5.8AI score0.00624EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/08/13 11:39 a.m.45 views

CVE-2024-43153 WordPress Woffice theme <= 5.4.10 - Unauthenticated Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in WofficeIO Woffice woffice.This issue affects Woffice: from n/a through = 5.4.10...

9.8CVSS0.00624EPSS
SaveExploits0References1
CVE
CVE
added 2024/08/13 11:39 a.m.81 views

CVE-2024-43153

CVE-2024-43153 affects Woffice (Woffice CRM) in WordPress. The vulnerability is an Improper Privilege Management that enables Privilege Escalation in Woffice versions up to 5.4.10 (no earlier-verified details provided). CVSS v3.1 base score is 9.8 (CRITICAL) with network attack vector, no user in...

9.8CVSS7.4AI score0.00624EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2024/08/13 11:15 a.m.32 views

CVE-2024-43121

Improper Privilege Management vulnerability in realmag777 HUSKY allows Privilege Escalation.This issue affects HUSKY: from n/a through 1.3.6.1...

9.1CVSS0.00452EPSS
SaveExploits0References1
OSV
OSV
added 2024/08/13 11:15 a.m.8 views

CVE-2024-43121

Improper Privilege Management vulnerability in realmag777 HUSKY allows Privilege Escalation.This issue affects HUSKY: from n/a through 1.3.6.1...

7.2CVSS5.8AI score0.00452EPSS
SaveExploits0References1
CVE
CVE
added 2024/08/13 10:50 a.m.89 views

CVE-2024-43121

CVE-2024-43121 involves the HUSKY – Products Filter Professional for WooCommerce extension. Multiple sources (Red Hat, Wordfence) confirm an Improper Privilege Management vulnerability allowing Privilege Escalation. Affected product: HUSKY versions from unknown up to 1.3.6.1. Public disclosure in...

9.1CVSS7AI score0.00452EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/08/13 12:00 a.m.9 views

WordPress plugin HUSKY 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

9.1CVSS6.7AI score0.00452EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/08/13 12:00 a.m.10 views

WordPress plugin Woffice 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

9.8CVSS8.9AI score0.00624EPSS
SaveExploits0References2
ICS
ICS
added 2024/08/13 12:00 a.m.52 views

Siemens SINEC Traffic Analyzer

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

8.7CVSS7.2AI score0.00539EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2024/08/13 12:00 a.m.15 views

PT-2024-30309 · Husky · Husky

Name of the Vulnerable Software and Affected Versions: HUSKY versions 1.3.6.1 and earlier Description: The issue is related to Improper Privilege Management, allowing Privilege Escalation in the HUSKY software. Recommendations: For versions 1.3.6.1 and earlier, at the moment, there is no...

9.1CVSS6.5AI score0.00452EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2024/08/13 12:00 a.m.8 views

PT-2024-30344 · Wofficeio · Office

Name of the Vulnerable Software and Affected Versions: Woffice versions through 5.4.10 Description: The issue is related to Improper Privilege Management, allowing Privilege Escalation in WofficeIO Woffice. Recommendations: For versions through 5.4.10, update to a version later than 5.4.10 to...

9.8CVSS9.3AI score0.00624EPSS
SaveExploits0References12
Tenable Nessus
Tenable Nessus
added 2024/08/13 12:00 a.m.12 views

Sprecher Automation SPRECON-E Improper Privilege Management (CVE-2024-6758)

Improper Privilege Management in Sprecher Automation SPRECON-E below version 8.71j allows a remote attacker with low privileges to save unauthorized protection assignments. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

6.5CVSS5.5AI score0.0044EPSS
SaveExploits0References2
OSV
OSV
added 2024/08/12 1:38 p.m.9 views

CVE-2024-6758

Improper Privilege Management in Sprecher Automation SPRECON-E below version 8.71j allows a remote attacker with low privileges to save unauthorized protection assignments...

6.5CVSS5.8AI score0.0044EPSS
SaveExploits0References1
NVD
NVD
added 2024/08/12 1:38 p.m.24 views

CVE-2024-6758

Improper Privilege Management in Sprecher Automation SPRECON-E below version 8.71j allows a remote attacker with low privileges to save unauthorized protection assignments...

6.5CVSS0.0044EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/08/12 10:20 a.m.16 views

CVE-2024-6758 Improper Privilege Management vulnerability in Sprecher Automation SPRECON-E

Improper Privilege Management in Sprecher Automation SPRECON-E below version 8.71j allows a remote attacker with low privileges to save unauthorized protection assignments...

6.5CVSS7AI score0.0044EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/08/12 10:20 a.m.36 views

CVE-2024-6758 Improper Privilege Management vulnerability in Sprecher Automation SPRECON-E

Improper Privilege Management in Sprecher Automation SPRECON-E below version 8.71j allows a remote attacker with low privileges to save unauthorized protection assignments...

6.5CVSS0.0044EPSS
SaveExploits0References1
CVE
CVE
added 2024/08/12 10:20 a.m.66 views

CVE-2024-6758

CVE-2024-6758 affects Sprecher Automation SPRECON-E prior to version 8.71j. The root cause is improper privilege management, enabling a remote attacker with low privileges to save unauthorized protection assignments or modify configuration via crafted HTTP(S) requests. Affected product is the SPR...

6.5CVSS6.5AI score0.0044EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder