The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to gain increased privileges.

The vulnerability of the Hyper-V hardware virtualization technology in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Windows UI Immersive Server API component of the Windows operating system allows attackers to escalate their privileges.

The vulnerability of the Windows UI Immersive Server API component of the operating system is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Windows Event Tracing service allows a perpetrator to enhance their privileges within the system.

The vulnerability of the Windows Event Tracing service is related to insecure privilege management. Exploiting this vulnerability can allow an attacker to enhance their privileges within the system...

The vulnerability of the basic Windows DWM library in the Windows operating system allows attackers to escalate their privileges.

The vulnerability of the Windows DWM base library in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Storage component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Storage component in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability in the user-mode driver of the Driver Framework Reflector Driver for Windows operating systems allows a hacker to escalate their privileges.

The vulnerability of the user-mode driver in the Driver Framework Reflector Driver for Windows operating systems is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Windows AppContracts API Server component of the Windows operating system, related to insecure management of privileges, allows a perpetrator to escalate their privileges.

The vulnerability of the Windows AppContracts API Server component of the operating system is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to enhance their privileges...

The vulnerability of Human Interface Devices in the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of Human Interface Devices in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

Improper Privilege Management in Apache Hadoop

In Apache Hadoop 3.2.0 to 3.2.1, 3.0.0-alpha1 to 3.1.3, and 2.0.0-alpha to 2.10.0, WebHDFS client might send SPNEGO authorization header to remote URL without proper verification...

GHSA-F8VC-WFC8-HXQH Improper Privilege Management in Apache Hadoop

In Apache Hadoop 3.2.0 to 3.2.1, 3.0.0-alpha1 to 3.1.3, and 2.0.0-alpha to 2.10.0, WebHDFS client might send SPNEGO authorization header to remote URL without proper verification...

CVE-2021-3813

Improper Privilege Management in GitHub repository chatwoot/chatwoot prior to v2.2...

CVE-2021-3813

Improper Privilege Management in GitHub repository chatwoot/chatwoot prior to v2.2...

CVE-2021-3813

Improper Privilege Management in GitHub repository chatwoot/chatwoot prior to v2.2...

Input validation

Improper Privilege Management in GitHub repository chatwoot/chatwoot prior to v2.2...

CVE-2021-3813 Improper Privilege Management in chatwoot/chatwoot

Improper Privilege Management in GitHub repository chatwoot/chatwoot prior to v2.2...

CVE-2021-3813

CVE-2021-3813 affects the chatwoot/chatwoot project prior to v2.2, arising from an improper privilege management flaw. The issue enables a non-collaborator user to reveal inbox details by enumerating inbox IDs via crafted requests (PoC shows header/cookie reuse and inbox_id exploitation). Impact ...

PT-2022-10693 · Chatwoot · Chatwoot

Name of the Vulnerable Software and Affected Versions: chatwoot/chatwoot versions prior to 2.2 Description: The issue concerns improper privilege management. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents...

AlmaLinux 8 : net-snmp (ALSA-2020:5480)

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2020:5480 advisory. - Net-SNMP through 5.7.3 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary commands as root...

PT-2022-1690 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insecure privilege management in the Win32k component of Windows operating systems. It allows an attacker to elevate their privileges, potentially affecting the...

PT-2022-1719 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to insecure privilege management in the Windows Print Spooler. It allows an attacker to elevate their privileges, affecting the system. No information is...