4520 matches found
PT-2022-1681 · Microsoft · Dynamics Gp
Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics GP affected versions not specified Description: The issue is related to insecure privilege management in Microsoft Dynamics GP, which can be exploited by a remote attacker to elevate their privileges. Recommendations: At th...
PT-2022-1707 · Microsoft · Dynamics Gp
Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics GP affected versions not specified Description: The issue is related to insecure privilege management in Microsoft Dynamics GP, which can be exploited by a remote attacker to elevate their privileges. Recommendations: At th...
PT-2022-1708 · Microsoft · Dynamics Gp
Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics GP affected versions not specified Description: The issue is related to insecure privilege management in Microsoft Dynamics GP, a software package for mid-size business accounting or enterprise resource planning. Exploitati...
PT-2022-1665 · Microsoft · Sql Server
Name of the Vulnerable Software and Affected Versions: SQL Server for Linux Containers affected versions not specified Description: The issue is related to insecure privilege management in Microsoft SQL Server for Linux. Exploitation of this issue may allow an attacker to elevate their privileges...
PT-2022-1713 · Microsoft · Windows Print Spooler +1
Name of the Vulnerable Software and Affected Versions: Microsoft Windows Print Spooler affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Print Spooler. This vulnerability is associated with insecure privilege management,...
The vulnerability of the Open Enclave SDK, a software development tool, arises from the insecure management of privileges. This allows attackers to bypass system security restrictions and enhance their privileges.
The vulnerability of the Open Enclave SDK software development tools is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to bypass system security restrictions and enhance their privileges...
Siemens SIMATIC S7-1200 Improper Privilege Management (CVE-2016-2846)
Siemens SIMATIC S7-1200 CPU devices before 4.0 allow remote attackers to bypass a user program block protection mechanism via unspecified vectors. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 70300 C Tenable...
PT-2022-1977 · Microsoft · Windows Cd-Rom Driver +1
Name of the Vulnerable Software and Affected Versions: Windows CD-ROM Driver affected versions not specified Description: The issue is related to unsafe privilege management in the Windows CD-ROM Driver, which can be exploited to elevate privileges. This allows an attacker to affect the system...
PT-2022-1976 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the Microsoft Security Support Provider Interface SSPI in the Microsoft Windows operating system, which is associated with insecure privilege management. Exploitatio...
PT-2022-1700 · Microsoft · Edge
Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to insecure privilege management in the browser, which could allow an attacker to elevate their privileges. Recommendations: At the moment, there ...
PT-2022-1699 · Microsoft · Edge
Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based versions affected versions not specified Description: The issue is related to insecure privilege management in the browser. It allows a remote attacker to potentially elevate their privileges. Recommendations: At...
Improper Authorization in bytebase/bytebase
Description Hello bytebase team, there is an improper privilege management in bytebase source code. This allows a user to view another user inbox. Proof of Concept 1. Install bytebase, create new user user1and user2 2. Login as user1, go to this link /api/inbox?user=user-id and change user-id to ...
The vulnerability of the Win32k component in Windows operating systems arises from the insecure handling of privileges, allowing attackers to escalate their privileges.
The vulnerability of the Win32k component in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...
Improper Privilege Management in liangliangyy/djangoblog
Description Hi there, I would like to report an improper privilege management vulnerability in djangoblog source code. This would allow an attacker to create comment on behalf of anyone. Proof of Concept 1. Install a local instance of djangoblog, login as admin and create an article 2. Create a n...
GHSA-4JH2-3C85-Q67H Improper Privilege Management in apache-airflow
In Apache Airflow prior to 2.2.0. This CVE applies to a specific case where a User who has "cancreate" permissions on DAG Runs can create Dag Runs for dags that they don't have "edit" permissions for...
Improper Privilege Management in apache-airflow
In Apache Airflow prior to 2.2.0. This CVE applies to a specific case where a User who has "cancreate" permissions on DAG Runs can create Dag Runs for dags that they don't have "edit" permissions for...
Kron Single Connect 安全漏洞
Kron Single Connect is a comprehensive Privileged Access Management Pam software suite from Kron Turkey. It is designed to create a flexible, centrally managed and layered defense security architecture against insider threats. A security vulnerability exists in Kron Single Connect, which stems fr...
loguru logs sensitive information
Insertion of Sensitive Information into Log File in Conda loguru prior to 0.5.3...
