4477 matches found
CVE-2020-11640
AdvaBuild uses a command queue to launch certain operations. An attacker who gains access to the command queue can use it to launch an attack by running any executable on the AdvaBuild node. The executables that can be run are not limited to AdvaBuild specific executables. Improper Privilege...
CVE-2024-1575
The improper privilege management vulnerability in the Zyxel WBE660S firmware version 6.70ACGG.3 and earlier versions could allow an authenticated user to escalate privileges and download the configuration files on a vulnerable device...
CVE-2024-1575
The improper privilege management vulnerability in the Zyxel WBE660S firmware version 6.70ACGG.3 and earlier versions could allow an authenticated user to escalate privileges and download the configuration files on a vulnerable device...
CVE-2024-1575
The improper privilege management vulnerability in the Zyxel WBE660S firmware version 6.70ACGG.3 and earlier versions could allow an authenticated user to escalate privileges and download the configuration files on a vulnerable device...
CVE-2024-1575
CVE-2024-1575 affects Zyxel WBE660S, specifically firmware 6.70(ACGG.3) and earlier. The issue is improper privilege management that can let an authenticated user escalate privileges and download configuration files from the device (impacting confidentiality). Reported attack vector is network wi...
The vulnerability of the SINEMA Remote Connect VPN service lies in the insecure management of privileges, allowing a malicious actor to create a user with administrator privileges.
The vulnerability of the SINEMA Remote Connect VPN service relates to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to create a user with administrator privileges...
Zyxel WBE660S 安全漏洞
The Zyxel WBE660S is a wireless access point from China Hopkins Zyxel. A security vulnerability exists in the Zyxel WBE660S that stems from an incorrect privilege management vulnerability that could allow an authenticated user to elevate privileges and download configuration files on vulnerable...
The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to insecure privilege management, allows attackers to escalate their privileges.
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
The vulnerability of the Brokering File System (BFS) of the Windows operating system, which allows a hacker to increase their privileges
The vulnerability of the Brokering File System BFS in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to increase their privileges...
Apache StreamPark 安全漏洞
Apache StreamPark is the United States Apache Apache Foundation of a streaming media application development framework. A privilege management error vulnerability exists in Apache StreamPark versions 1.0.0 through 2.1.4 and earlier, which can be exploited by an attacker to manually issue a reques...
CVE-2024-6908
Improper privilege management in Yugabyte Platform allows authenticated admin users to escalate privileges to SuperAdmin via a crafted PUT HTTP request, potentially leading to unauthorized access to sensitive system functions and data...
CVE-2024-6908 Admin Can Escalate Privileges to SuperAdmin Using Manual PUT Request
Improper privilege management in Yugabyte Platform allows authenticated admin users to escalate privileges to SuperAdmin via a crafted PUT HTTP request, potentially leading to unauthorized access to sensitive system functions and data...
CVE-2024-6908 Admin Can Escalate Privileges to SuperAdmin Using Manual PUT Request
Improper privilege management in Yugabyte Platform allows authenticated admin users to escalate privileges to SuperAdmin via a crafted PUT HTTP request, potentially leading to unauthorized access to sensitive system functions and data...
CVE-2024-6908
The CVE-2024-6908 entry concerns Yugabyte Platform, where improper privilege management allows an authenticated admin to escalate to SuperAdmin via a crafted PUT request, potentially granting access to sensitive functions and data. The described impact is unauthorized access to sensitive system c...
CVE-2024-6908 Admin Can Escalate Privileges to SuperAdmin Using Manual PUT Request
Improper privilege management in Yugabyte Platform allows authenticated admin users to escalate privileges to SuperAdmin via a crafted PUT HTTP request, potentially leading to unauthorized access to sensitive system functions and data...
PT-2024-12867 · Philips · Philips Vue Pacs
Name of the Vulnerable Software and Affected Versions: Philips Vue PACS affected versions not specified Description: The issue is related to improper assignment, modification, tracking, or checking of actor privileges, resulting in an unintended sphere of control for that actor. Recommendations: ...
PT-2024-7912 · Sprecher Automation · Sprecon-E
Name of the Vulnerable Software and Affected Versions: Sprecher Automation SPRECON-E versions prior to 8.71j Description: The issue is related to improper privilege management, allowing a remote attacker with low privileges to save unauthorized protection assignments. This can be achieved through...
CVE-2024-5566
An improper privilege management vulnerability allowed users to migrate private repositories without having appropriate scopes defined on the related Personal Access Token. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.14 and was fixed in version 3.13.1, 3.12.6,...