CVE-2022-37025

An improper privilege management vulnerability in McAfee Security Scan Plus MSS+ before 4.1.262.1 could allow a local user to modify a configuration file and perform a LOLBin Living off the land attack. This could result in the user gaining elevated permissions and being able to execute arbitrary...

The vulnerability of the Mac OS operating system, related to insecure management of privileges, allows attackers to elevate their own privileges.

The vulnerability of the Mac OS is related to the insecure management of privileges. Exploiting this vulnerability allows a remote attacker to enhance their privileges...

McAfee Security Scan Plus 安全漏洞

McAfee Security Scan Plus MSS+ is a tool from McAfee, Inc. that protects computers from spyware and viruses. A security vulnerability exists in versions of McAfee Security Scan Plus MSS+ prior to 4.1.262.1, which stems from a faulty privilege management that could allow a local user to modify...

Exploit for Improper Privilege Management in Wfs Heaven_Burns_Red

EvilWfshbr CVE-2022-42046https://vulners.com/cve/CVE-2022-...

The vulnerability of the monitoring tool for VMware vRealize Operations, related to insecure management of privileges, allows a perpetrator to escalate their privileges.

The vulnerability of the monitoring tool for VMware vRealize Operations is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

The vulnerability of the Unified Write Filter (UWF) in the Windows operating system allows a hacker to increase their privileges.

The vulnerability of the Unified Write Filter UWF in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Unified Write Filter (UWF) in the Windows operating system allows a hacker to increase their privileges.

The vulnerability of the Unified Write Filter UWF in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

CVE-2022-29959

Emerson OpenBSI through 2022-04-29 mishandles credential storage. It is an engineering environment for the ControlWave and Bristol Babcock line of RTUs. This environment provides access control functionality through user authentication and privilege management. The credentials for various users a...

CVE-2022-29959

Emerson OpenBSI through 2022-04-29 mishandles credential storage. It is an engineering environment for the ControlWave and Bristol Babcock line of RTUs. This environment provides access control functionality through user authentication and privilege management. The credentials for various users a...

Authentication flaw

Emerson OpenBSI through 2022-04-29 mishandles credential storage. It is an engineering environment for the ControlWave and Bristol Babcock line of RTUs. This environment provides access control functionality through user authentication and privilege management. The credentials for various users a...

CVE-2022-29959

Summary of CVE-2022-29959 : OpenBSI (Emerson OpenBSI) stores credentials insecurely in SecUsers.ini, enabling potential credential disclosure to an attacker with local access. Multiple sources (NVD, Red Hat, PRION, CVE listings, and CISA advisory) describe the issue as insecure credential storage...

CVE-2022-29959

Emerson OpenBSI through 2022-04-29 mishandles credential storage. It is an engineering environment for the ControlWave and Bristol Babcock line of RTUs. This environment provides access control functionality through user authentication and privilege management. The credentials for various users a...

OpenEMR 安全漏洞

OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A security vulnerability exists in OpenEMR versions prior to 7.0.0.1 that stems fr...

PT-2022-18375 · Openemr · Openemr

Name of the Vulnerable Software and Affected Versions: openemr versions prior to 7.0.0.1 Description: The issue concerns Missing Authorization and Improper Privilege Management in the GitHub repository openemr/openemr. Recommendations: For versions prior to 7.0.0.1, update to version 7.0.0.1 or...

PT-2022-4203 · Microsoft · Windows +2

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Storage Spaces Direct affected versions not specified Description: The issue is related to an elevation of privilege vulnerability. It is associated with unsafe privilege management in the Unified Write...

PT-2022-4231 · Vmware · Vmware Vrealize Operations

Name of the Vulnerable Software and Affected Versions: VMware vRealize Operations affected versions not specified Description: The issue is related to insecure privilege management in VMware vRealize Operations, allowing a malicious actor with administrative network access to escalate privileges ...

The vulnerability of the D-Bus configuration file of the NVIDIA GPU Display Driver allows a attacker to trigger a service failure or execute arbitrary code.

The vulnerability of the D-Bus configuration file of the NVIDIA GPU Display Driver is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...

CVE-2022-36833

Improper Privilege Management vulnerability in Game Optimizing Service prior to versions 3.3.04.0 in Android 10, and 3.5.04.8 in Android 11 and above allows local attacker to execute hidden function for developer by changing package name...

CVE-2022-36833

Improper Privilege Management vulnerability in Game Optimizing Service prior to versions 3.3.04.0 in Android 10, and 3.5.04.8 in Android 11 and above allows local attacker to execute hidden function for developer by changing package name...

CVE-2022-36833

Improper Privilege Management vulnerability in Game Optimizing Service prior to versions 3.3.04.0 in Android 10, and 3.5.04.8 in Android 11 and above allows local attacker to execute hidden function for developer by changing package name...