CyberPower PowerPanel Business Edition 安全漏洞

Cyber Power Systems CyberPower PowerPanel Business Edition is a suite of power management software from Cyber Power Systems, USA. The software automates the shutdown of physical and virtual infrastructures and monitors and manages CyberPower UPS systems and network-connected PDUs Power Distributi...

CVE-2023-25133 Improper privilege management vulnerability in CyberPower PowerPanel Business

Improper privilege management vulnerability in default.cmd file in PowerPanel Business Local/Remote for Windows v4.8.6 and earlier, PowerPanel Business Management for Windows v4.8.6 and earlier, PowerPanel Business Local/Remote for Linux 32bit v4.8.6 and earlier, PowerPanel Business Local/Remote...

Google Android elevation of privilege vulnerability (CNVD-2023-55377)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability that originates from improper privilege management in the SecureNfcEnabler.java and SecureNfcPreferenceController.java components, which can be exploited b...

Google Android elevation of privilege vulnerability (CNVD-2023-55366)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that stems from improper privilege management in the onNullBinding of the CallScreeningServiceHelper.java component, which can be exploited by an attacker ...

Improper Privilege Management in microweber

Microweber prior to 1.3.4 has an Improper Privilege Management vulnerability...

GHSA-R6XQ-XCXC-FGHX Improper Privilege Management in microweber

Microweber prior to 1.3.4 has an Improper Privilege Management vulnerability...

CVE-2023-2240

Improper Privilege Management in GitHub repository microweber/microweber prior to 1.3.4...

Input validation

Improper Privilege Management in GitHub repository microweber/microweber prior to 1.3.4...

Microweber 安全漏洞

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images and more. A security vulnerability exists in Microweber versions prior to 1.3.4, which stems from...

CVE-2023-2240 Improper Privilege Management in microweber/microweber

Improper Privilege Management in GitHub repository microweber/microweber prior to 1.3.4...

CVE-2023-2240 Improper Privilege Management in microweber/microweber

Improper Privilege Management in GitHub repository microweber/microweber prior to 1.3.4...

CVE-2023-2240

CVE-2023-2240 affects Microweber/microweber prior to version 1.3.4. The root cause is improper privilege management, leading to high-severity impact across confidentiality, integrity, and availability (per CVSS 3.1/3.0 data: HIGH). No exploit details are provided in the supplied documents. The vu...

CVE-2023-2240 Improper Privilege Management in microweber/microweber

Improper Privilege Management in GitHub repository microweber/microweber prior to 1.3.4...

PT-2023-18483 · Unknown · Microweber

Name of the Vulnerable Software and Affected Versions: microweber versions prior to 1.3.4 Description: The issue concerns Improper Privilege Management in the microweber repository. No information is provided about the estimated number of potentially affected devices worldwide or real-world...

Schneider Electric EcoStruxure Control Expert Denial of Service Vulnerability

Schneider Electric EcoStruxure Control Expert is a suite of programming software for Schneider Electric logic controller products from Schneider Electric, France. A denial of service vulnerability exists in Schneider Electric EcoStruxure Control Expert V15.1 and prior versions, which stems from...

Improper Privilege Management

spark-core is vulnerable to Improper Privilege Management . The vulnerability exists because the library does not properly disallow arbitrary custom classpaths with the proxy user in cluster mode, which allows an attacker to provide malicious configuration-related classes in the classpath...

The vulnerability of the MinIO object storage server, related to insecure management of privileges, allows an attacker to disable access to the root account’s credentials.

The vulnerability of the MinIO object storage server relates to a user with administrator privileges in the console. This user can potentially create another user that matches the root access credentials. Once this user is successfully created, the root account’s credentials will no longer functi...

CVE-2023-22645

An Improper Privilege Management vulnerability in SUSE kubewarden allows attackers to read arbitrary secrets if they get access to the ServiceAccount kubewarden-controller This issue affects: SUSE kubewarden kubewarden-controller versions prior to 1.6.0...

CVE-2023-22645

An Improper Privilege Management vulnerability in SUSE kubewarden allows attackers to read arbitrary secrets if they get access to the ServiceAccount kubewarden-controller This issue affects: SUSE kubewarden kubewarden-controller versions prior to 1.6.0...

PT-2023-18601 · Suse · Kubewarden-Controller

Name of the Vulnerable Software and Affected Versions: SUSE kubewarden kubewarden-controller versions prior to 1.6.0 Description: An Improper Privilege Management issue allows attackers to read arbitrary secrets if they gain access to the ServiceAccount kubewarden-controller. Recommendations: For...