4520 matches found
PT-2022-13114 · Loguru +1 · Loguru +1
Name of the Vulnerable Software and Affected Versions: Conda loguru versions prior to 0.5.3 Description: The issue concerns the insertion of sensitive information into log files and improper privilege management in Conda loguru. Recommendations: For versions prior to 0.5.3, update to version 0.5....
The vulnerability of the McAfee Agent antivirus software, related to privilege management errors, allows a hacker to elevate their privileges.
The vulnerability of the McAfee Agent antivirus software is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges using a specially created openssl.cnf file...
loguru 日志信息泄露漏洞
loguru is a Python library. It is used for logging. A log information disclosure vulnerability exists in versions prior to loguru 0.5.3, which stems from improper loguru privilege management...
Improper Privilege Management in liukuo362573/yishaadmin
Description Hi there, there is another improper privilege management in /admin/OrganizationManage/Position/GetFormJson Proof of Concept 1. Access the link http://106.14.124.170:80/admin/OrganizationManage/Position/GetFormJson?id=16508640061130139 2. See that the page return with position data...
Improper Privilege Management in liukuo362573/yishaadmin
Description Hi there yishaadmin maintainer team, I would like to report an improper privilege management in yishaadmin source code. The link /admin/ToolManage/Server/GetServerJson requires no authentication and accessible for everyone, which returns server info like RAM, CPU usage. Proof of Conce...
GHSA-4RQ4-32RV-6WP6 Improper Privilege Management in shelljs
shelljs is vulnerable to Improper Privilege Management...
Improper Privilege Management in shelljs
shelljs is vulnerable to Improper Privilege Management...
Improper Privilege Management in heroiclabs/nakama
Description A predefined View Only user has access to the User Management function at the :7351//users endpoint. By default this is a predefined system administrator function, and no other users should be able to access this function. Proof of Concept - Create a View-only user with the...
The vulnerability of Xen cross-platform hypervisors relates to insecure management of privileges, allowing attackers to access confidential data and cause service failures.
The vulnerability of the cross-platform Xen hypervisor is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to access confidential data and also cause service failures...
The vulnerability of Xen hypervisors on x86 Intel systems, related to the lack of a mechanism for managing privileges, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of Xen hypervisors on x86 Intel systems is related to the lack of a mechanism for managing privileges. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause service failures...
The vulnerability of the `ntfsattr_setup_flag` function in the NTFS file system driver for the FUSE NTFS-3G module involves insecure privilege management. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the ntfsattrsetupflag function in the NTFS file system driver for the FUSE NTFS-3G module is related to insecure privilege management. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...
shelljs Access Control Error Vulnerability
shelljs is a portable Windows/Linux/OS X implementation of Unix shell commands based on the Node.js API. A security vulnerability exists in shelljs that stems from improper privilege management and can be exploited by an attacker to gain unauthorized access...
PT-2022-1974 · Microsoft · Windows Nt Os Kernel +1
Name of the Vulnerable Software and Affected Versions: Windows NT OS Kernel affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows NT OS Kernel, which is caused by unsafe privilege management. This vulnerability can be exploited...
Improper Privilege Management in shelljs
Impact Output from the synchronous version of shell.exec may be visible to other users on the same system. You may be affected if you execute shell.exec in multi-user Mac, Linux, or WSL environments, or if you execute shell.exec as the root user. Other shelljs functions including the asynchronous...
openSUSE 15 Security Update : net-snmp (openSUSE-SU-2022:0050-1)
The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:0050-1 advisory. - setkey in agent/helpers/tablecontainer.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an authenticated...
The vulnerability of the Windows Media Center component of the Windows operating system, which allows a hacker to gain elevated privileges
The vulnerability of the NTFS file system in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to increase their privileges...
Improper Privilege Management in delgan/loguru
BUG ======== unprivileged user can see log file and sensitive information disclosed SUMMURY ============ loguru create log file to store the log . Log may contain many sentsitive information like username,password,token,key etc .\ So, this log file should not accessed by other user .\ But when...
CVE-2022-0144
shelljs is vulnerable to Improper Privilege Management...
