PT-2023-28105 · Unknown · Pandora Fms

Name of the Vulnerable Software and Affected Versions: Pandora FMS versions 700 through 773 Description: The issue is related to Improper Privilege Management, allowing unauthorized users to escalate privileges and read sensitive files as if they were root. This enables an attacker to access...

PT-2023-28103 · Unknown · Pandora Fms

Name of the Vulnerable Software and Affected Versions: Pandora FMS versions 700 through 773 Description: The issue is related to improper privilege management, which can lead to privilege escalation. A bad privilege assignment could cause a Denial of Service DOS attack, affecting the availability...

PT-2023-28104 · Unknown · Pandora Fms

Name of the Vulnerable Software and Affected Versions: Pandora FMS versions 700 through 773 Description: The issue is related to Improper Privilege Management, allowing a user to escalate permissions on the system shell. This enables Privilege Escalation. Recommendations: For Pandora FMS versions...

Artica Pandora FMS Security Vulnerability

Artica Pandora FMS is a monitoring system from the Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. A security vulnerability exists in Artica Pandora FMS versions 700 through 773, which stems from improper management of...

Artica Pandora FMS Security Vulnerability

Artica Pandora FMS is a monitoring system from the Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. A security vulnerability exists in Artica Pandora FMS versions 700 to 773, which arises from improper system privilege...

CVE-2023-3379 WAGO: Improper Privilege Management in web-based management

Wago web-based management of multiple products has a vulnerability which allows an local authenticated attacker to change the passwords of other non-admin users and thus to escalate non-root privileges...

PT-2023-7175 · Wago · Wago Touch Panel 600 +2

Name of the Vulnerable Software and Affected Versions: WAGO PFC100/PFC200 versions affected versions not specified WAGO Edge Controller versions affected versions not specified WAGO Touch Panel 600 versions affected versions not specified Description: The issue is related to errors in privilege...

WebsiteGuide Security Breach

WebsiteGuide is a web site navigation system. A security vulnerability exists in WebsiteGuide version v.0.2, which stems from improper privilege management. An attacker can exploit the vulnerability to gain escalated privileges via a specially crafted jwt...

The vulnerability of the Zoom Rooms video conferencing service for macOS allows a intruder to escalate their privileges.

The vulnerability of the Zoom Rooms video conferencing service for macOS is related to errors in privilege management. Exploiting this vulnerability could allow an attacker to increase their privileges...

The vulnerability of the cap_net service in the FreeBSD operating system allows a hacker to modify the list of allowed domain names.

The vulnerability of the capnet service in the FreeBSD operating system is related to errors in privilege management. Exploiting this vulnerability could allow a malicious actor to modify the list of allowed domain names...

CVE-2023-6119

An Improper Privilege Management vulnerability in Trellix GetSusp prior to version 5.0.0.27 allows a local, low privilege attacker to gain access to files that usually require a higher privilege level. This is caused by GetSusp not correctly protecting a directory that it creates during execution...

CVE-2023-6119

CVE-2023-6119 describes an Improper Privilege Management in Trellix GetSusp prior to 5.0.0.27. A local, low-privilege attacker can access files that normally require higher privileges because GetSusp does not correctly protect a directory it creates, allowing takeover of file handles. The flaw ex...

CVE-2023-6119

An Improper Privilege Management vulnerability in Trellix GetSusp prior to version 5.0.0.27 allows a local, low privilege attacker to gain access to files that usually require a higher privilege level. This is caused by GetSusp not correctly protecting a directory that it creates during execution...

CVE-2023-43591

Improper privilege management in Zoom Rooms for macOS before version 5.16.0 may allow an authenticated user to conduct an escalation of privilege via local access...

Input validation

Improper privilege management in Zoom Rooms for macOS before version 5.16.0 may allow an authenticated user to conduct an escalation of privilege via local access...

The vulnerability of the Kanban function in the GLPI system for scheduling, incident management, and inventory tracking allows a malicious individual to gain unauthorized access to any user’s account.

The vulnerability of the Kanban function in systems for requests, incidents, and inventory management of computer equipment in GLPI is related to insecure privilege management. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to the account of any user...

The vulnerability of the Oslo.privsep component in the cloud computing platform Openstack, related to insecure management of privileges, allows a perpetrator to escalate their privileges.

The vulnerability of the Oslo.privsep component in the OpenStack cloud service platform is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

CVE-2023-43591

The CVE-2023-43591 entry concerns Zoom Rooms for macOS prior to 5.16.0 with improper privilege management that may allow an authenticated user to escalate privileges via local access. Connected sources confirm affected product and version (Zoom Rooms for macOS

CVE-2023-6099

A vulnerability classified as critical has been found in Shenzhen Youkate Industrial Facial Love Cloud Payment System up to 1.0.55.0.0.1. This affects an unknown part of the file /SystemMng.ashx of the component Account Handler. The manipulation of the argument operatorRole with the input 00 lead...

Design/Logic Flaw

A vulnerability classified as critical has been found in Shenzhen Youkate Industrial Facial Love Cloud Payment System up to 1.0.55.0.0.1. This affects an unknown part of the file /SystemMng.ashx of the component Account Handler. The manipulation of the argument operatorRole with the input 00 lead...