The vulnerability of the McAfee Total Protection antivirus protection, related to insecure management of privileges, allows a hacker to delete the application.

The vulnerability of the McAfee Total Protection antivirus protection lies in the insecure management of privileges. Exploiting this vulnerability could allow a hacker to remove the application...

The vulnerability of the Graphics component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Graphics component of the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Windows Accounts Picture component of the Windows operating system allows attackers to increase their privileges.

The vulnerability of the Windows Accounts Picture component of the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Privilege Escalation

ezsystems/ezpublish-kernel and ezsystems/ezplatform-kernel is vulnerable to Privilege Escalation. The vulnerability exists due to Improper privilege management in the admin role which allows to attacker bypass the admin policy and assign any role to any user...

CVE-2023-21458

Improper privilege management vulnerability in PhoneStatusBarPolicy in System UI prior to SMR Mar-2023 Release 1 allows attacker to turn off Do not disturb via unprotected intent...

CVE-2023-21458

Improper privilege management vulnerability in PhoneStatusBarPolicy in System UI prior to SMR Mar-2023 Release 1 allows attacker to turn off Do not disturb via unprotected intent...

CVE-2023-21458

Improper privilege management vulnerability in PhoneStatusBarPolicy in System UI prior to SMR Mar-2023 Release 1 allows attacker to turn off Do not disturb via unprotected intent...

PT-2023-18226 · Systemui · Systemui

Name of the Vulnerable Software and Affected Versions: System UI versions prior to SMR Mar-2023 Release 1 Description: The issue is related to improper privilege management in PhoneStatusBarPolicy, allowing an attacker to turn off 'Do not disturb' via an unprotected intent. Recommendations: For...

CVE-2023-21458

CVE-2023-21458 involves an improper privilege management in Samsung System UI’s PhoneStatusBarPolicy. This vulnerability affects System UI versions prior to SMR Mar-2023 Release 1, where an attacker could turn off Do Not Disturb via an unprotected intent. The issue is base on local access with lo...

Security Bulletin: Security vulnerabilities have been identified in IBM DB2 used by IBM Security Verify Governance, Identity Manager software component

Summary Information about security vulnerabilities affecting IBM DB2 have been published in a security bulletin Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products| Versions ---|--- IBM Security Verify...

PT-2023-1775 · Microsoft · Windows Graphics +1

Name of the Vulnerable Software and Affected Versions: Windows Graphics Component affected versions not specified Description: The issue is related to insecure privilege management in the Windows Graphics Component. It allows an attacker to elevate their privileges. There is no information provid...

PT-2023-1766 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insecure privilege management in the Windows Accounts Picture component, allowing an attacker to elevate their privileges. This can affect the system. Recommendation...

CVE-2022-39953

A improper privilege management in Fortinet FortiNAC version 9.4.0 through 9.4.1, FortiNAC version 9.2.0 through 9.2.6, FortiNAC version 9.1.0 through 9.1.8, FortiNAC all versions 8.8, FortiNAC all versions 8.7, FortiNAC all versions 8.6, FortiNAC all versions 8.5, FortiNAC version 8.3.7 allows...

Input validation

A improper privilege management in Fortinet FortiNAC version 9.4.0 through 9.4.1, FortiNAC version 9.2.0 through 9.2.6, FortiNAC version 9.1.0 through 9.1.8, FortiNAC all versions 8.8, FortiNAC all versions 8.7, FortiNAC all versions 8.6, FortiNAC all versions 8.5, FortiNAC version 8.3.7 allows...

CVE-2022-39953

CVE-2022-39953 is an improper privilege management vulnerability in Fortinet FortiNAC. FortiNAC versions affected include 8.3.7, 8.5–8.8, 9.1.0–9.1.8, 9.2.0–9.2.6, and 9.4.0–9.4.1. The root cause is weak access control that can allow a low-privilege local user with shell access to execute arbitra...

Fortinet FortiNAC 安全漏洞

Fortinet FortiNAC is a set of network access control solutions from the U.S. company Fita Fortinet. The product is primarily used for network access control and IoT security. A security vulnerability exists in Fortinet FortiNAC that stems from improper privilege management...

FortiNAC - Multiple privilege escalation via sudo command

An improper privilege management vulnerability CWE-269 in FortiNAC may allow a low privilege local user with shell access to execute arbitrary commands as root...

PT-2023-9632 · Qemu · Qemu Guest Agent

Name of the Vulnerable Software and Affected Versions: QEMU Guest Agent affected versions not specified Description: A flaw was found in the QEMU Guest Agent service for Windows, allowing a local unprivileged user to manipulate the QEMU Guest Agent's Windows installer via repair custom actions to...

The Microsoft Intune Suite fuels cyber safety and IT efficiency

Today marks a significant shift in endpoint management and security. Were launching the Microsoft Intune Suite, which unifies mission-critical advanced endpoint management and security solutions into one simple bundle. The new Intune Suite can simplify our customers’ endpoint management experienc...

The Microsoft Intune Suite fuels cyber safety and IT efficiency

Today marks a significant shift in endpoint management and security. Were launching the Microsoft Intune Suite, which unifies mission-critical advanced endpoint management and security solutions into one simple bundle. The new Intune Suite can simplify our customers’ endpoint management experienc...