Lucene search
+L

4520 matches found

BDU FSTEC
BDU FSTEC
added 2022/02/25 12:00 a.m.14 views

The vulnerability of the software package for accounting or resource planning of Microsoft Dynamics GP, related to insecure management of privileges, allows a perpetrator to escalate their privileges.

The vulnerability of the software package for accounting or resource planning in Microsoft Dynamics GP relates to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

8.5CVSS7.6AI score0.0255EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/02/25 12:00 a.m.10 views

The vulnerability of the software package for accounting or resource planning of Microsoft Dynamics GP, related to insecure management of privileges, allows a perpetrator to escalate their privileges.

The vulnerability of the software package for accounting or resource planning in Microsoft Dynamics GP relates to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

6.8CVSS6.9AI score0.03755EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/02/25 12:00 a.m.14 views

Microsoft Edge browser’s vulnerability, related to insecure management of privileges, allows attackers to elevate their privileges.

The vulnerability of Microsoft Edge browser is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

6.8CVSS6.9AI score0.01204EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/02/25 12:00 a.m.13 views

The vulnerability of the print spooler daemon on Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Windows Print Spooler in operating systems related to Windows printing is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.1CVSS7.2AI score0.00795EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/02/25 12:00 a.m.10 views

Microsoft Edge browser’s vulnerability, related to insecure management of privileges, allows attackers to elevate their privileges.

The vulnerability of Microsoft Edge relates to the insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

7.7CVSS7.3AI score0.0079EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/02/25 12:00 a.m.12 views

The vulnerability of the Win32k component in Windows operating systems, which allows attackers to increase their privileges

The vulnerability of the Win32k component in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

7.8CVSS7.6AI score0.03046EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/02/25 12:00 a.m.18 views

The vulnerability of the print spooler daemon on Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Windows Print Spooler in operating systems related to Windows printing is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.5AI score0.18464EPSS
SaveExploits4References4
CNNVD
CNNVD
added 2022/02/24 12:00 a.m.10 views

WatchGuard Firebox缓冲区错误漏洞

Watchguard WatchGuard Firebox is a Watchguard company that provides a comprehensive range of network security services, from traditional IPS and GAV, to website/application control and malicious software prevention. A security vulnerability exists in a number of WatchGuard products, which stems...

6.5CVSS6.6AI score0.00895EPSS
SaveExploits0References3
Fedora
Fedora
added 2022/02/20 1:10 a.m.27 views

[SECURITY] Fedora 35 Update: phpMyAdmin-5.1.3-1.fc35

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the Web. Currently it can create and drop databases, create/drop/alter tables, delete/edit/add fields, execute any SQL statement, manage keys on fields, manage privileges,export data into various formats and i...

8AI score
SaveExploits0
Huntr
Huntr
added 2022/02/17 5:42 a.m.23 views

Improper Privilege Management in rhizome-conifer/conifer

Description In admincontroller.py file, all APIs will perform user permission checks using adminview function to avoid access from low-level users. However, this does not apply to API /api/v1/admin/defaults. Anonymous users can change maxsize configuration which prevents other users from creating...

1.3AI score
SaveExploits0
Github Security Blog
Github Security Blog
added 2022/02/17 12:00 a.m.25 views

Improper Privilege Management in Snipe-IT

An unprivileged user of Snipe-IT prior to version 5.3.11 can create maintenance for an asset. Version 5.3.11 contains a patch for this issue...

8.8CVSS5.3AI score0.012EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2022/02/17 12:00 a.m.24 views

GHSA-J57W-3C39-GPP5 Improper Privilege Management in Snipe-IT

An unprivileged user of Snipe-IT prior to version 5.3.11 can create maintenance for an asset. Version 5.3.11 contains a patch for this issue...

8.8CVSS8.6AI score0.012EPSS
SaveExploits1References4
CNVD
CNVD
added 2022/02/17 12:00 a.m.43 views

snipe-it elevation of privilege vulnerability

Snipe-IT is an open source IT asset/license management system. snipe-it versions prior to 5.3.11 contain an elevation of privilege vulnerability that stems from improper privilege management in the software. An attacker could exploit the vulnerability to cause a non-privileged user to create...

8.8CVSS5.6AI score0.012EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/02/16 12:00 a.m.63 views

An unspecified vulnerability exists in snipe-it (CNVD-2022-18045)

Snipe-IT is an open source IT asset/license management system. security vulnerability exists in Packagist snipe/snipe-it versions prior to 5.3.9, which stems from improper privilege management. No details of the vulnerability are currently available...

6.5CVSS5AI score0.01054EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
added 2022/02/15 1:57 a.m.42 views

Improper Privilege Management and Execution with Unnecessary Privileges in Kata Containers

Kata Containers doesn't restrict containers from accessing the guest's root filesystem device. Malicious containers can exploit this to gain code execution on the guest and masquerade as the kata-agent. This issue affects Kata Containers 1.11 versions earlier than 1.11.1; Kata Containers 1.10...

6.3CVSS8AI score0.01139EPSS
SaveExploits0References9Affected Software2
OSV
OSV
added 2022/02/15 1:57 a.m.26 views

GHSA-6978-VG2J-CC9Q Improper Privilege Management and Execution with Unnecessary Privileges in Kata Containers

Kata Containers doesn't restrict containers from accessing the guest's root filesystem device. Malicious containers can exploit this to gain code execution on the guest and masquerade as the kata-agent. This issue affects Kata Containers 1.11 versions earlier than 1.11.1; Kata Containers 1.10...

9.8CVSS6.8AI score0.01139EPSS
SaveExploits0References9
OSV
OSV
added 2022/02/15 12:02 a.m.22 views

GHSA-V6VG-PXVV-G5CQ Improper Privilege Management in Snipe-IT

Snipe-IT prior to 5.3.9 is vulnerable to improper privilege management. A user who does not have access to the supplier module may view supplier content...

6.5CVSS6.3AI score0.01054EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2022/02/15 12:02 a.m.32 views

Improper Privilege Management in Snipe-IT

Snipe-IT prior to 5.3.9 is vulnerable to improper privilege management. A user who does not have access to the supplier module may view supplier content...

6.5CVSS4AI score0.01054EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2022/02/15 12:00 a.m.4 views

PT-2022-13297 · Snipe-It · Snipe-It

Name of the Vulnerable Software and Affected Versions: Snipe-IT versions prior to 5.3.11 Description: The issue concerns improper privilege management, allowing an unprivileged user to create maintenance for an asset. This can be exploited due to missing authorization in the software. Version...

8.8CVSS8.6AI score0.012EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2022/02/14 12:00 a.m.8 views

snipe-it 安全漏洞

Snipe-IT is an open source IT asset/license management system. security vulnerability exists in Packagist snipe/snipe-it versions prior to 5.3.9, which stems from improper privilege management. No details of the vulnerability are currently available...

6.5CVSS5.6AI score0.01054EPSS
SaveExploits1References3
Rows per page
Query Builder