CVE-2021-25513

An improper privilege management vulnerability in Apps Edge application prior to SMR Dec-2021 Release 1 allows unauthorized access to some device data on the lockscreen...

CVE-2021-25513

An improper privilege management vulnerability in Apps Edge application prior to SMR Dec-2021 Release 1 allows unauthorized access to some device data on the lockscreen...

CVE-2021-25513

CVE-2021-25513 affects the Apps Edge application prior to Samsung SMR Dec-2021 Release 1. The root cause is improper privilege management, enabling unauthorized access to certain lockscreen data. Impact is limited to exposure of device data on the lockscreen; CVSS scores (NVD 2.4/3.1, Low) reflec...

CVE-2021-25513

An improper privilege management vulnerability in Apps Edge application prior to SMR Dec-2021 Release 1 allows unauthorized access to some device data on the lockscreen...

Improper Privilege Management in devise_masquerade

The devisemasquerade gem before 1.3 allows certain attacks when a password's salt is unknown. An application that uses this gem to let administrators masquerade/impersonate users loses one layer of security protection compared to a situation where Devise without this extension is used. If the...

Huawei HarmonyOS Wearables permission management improper vulnerability

Huawei HarmonyOS Wearables, an electronic watch from Huawei of China Huawei, is vulnerable to an improper privilege management vulnerability in the Huawei HarmonyOS Wearables cellular module. An attacker could exploit this vulnerability to cause confidentiality to be compromised...

The vulnerability of the Desktop Bridge application converter in the Microsoft Windows operating system allows a hacker to elevate their privileges within the system.

The vulnerability of the Desktop Bridge application converter in the Microsoft Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to elevate their privileges within the system...

The vulnerability of the Active Directory Domain Services component for the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely.

The vulnerability of the Active Directory Domain Services component for the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

The vulnerability of the Windows operating system, related to insecure management of privileges, allows a perpetrator to elevate their privileges.

The vulnerability of the Windows operating system is related to the insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Remote Access Connection Manager (RASMan) service in the Microsoft Windows operating system allows a hacker to escalate their privileges within the system.

The vulnerability of the Remote Access Connection Manager RASMan service in the Microsoft Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to elevate their privileges within the system...

Improper Privilege Management in dotcms/core

Description Hello team, I found a SSTI that allow me to get Full Privilege Escalation system user 1. While editing a template we have total access to the User and UserModel classes via $user 2. One of the UserModel methods is called setUserId 3. If we call setUserId and pass "system" as parameter...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS Wearables, an electronic watch from Huawei of China Huawei, is vulnerable to an improper privilege management vulnerability in the Huawei HarmonyOS Wearables cellular module. An attacker could exploit this vulnerability to cause confidentiality to be compromised...

The vulnerability of the Windows operating system, related to insecure management of privileges, allows a perpetrator to elevate their privileges.

The vulnerability of the Active Directory Domain Services component in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

Kaspersky Password Manager Improper Privilege Management Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Kaspersky Password Manager. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

Improper Privilege Management in Concrete CMS

Privilege escalation from Editor to Admin using Groups in Concrete CMS versions 8.5.6 and below. If a group is granted "view" permissions on the bulkupdate page, then users in that group can escalate to being an administrator with a specially crafted curl. Fixed by adding a check for group...

GHSA-86FH-J58M-7PF5 Improper Privilege Management in Apache Ozone

In Apache Ozone versions prior to 1.2.0, Initially generated block tokens are persisted to the metadata database and can be retrieved with authenticated users with permission to the key. Authenticated users may use them even after access is revoked...

Improper Privilege Management in Apache Ozone

In Apache Ozone versions prior to 1.2.0, Initially generated block tokens are persisted to the metadata database and can be retrieved with authenticated users with permission to the key. Authenticated users may use them even after access is revoked...

The vulnerability of the NTFS file system of the Windows operating system, which allows a perpetrator to increase their privileges

The vulnerability of the NTFS file system in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of Event Tracing for Windows in the Microsoft Windows operating system allows a perpetrator to enhance their privileges within the system.

The vulnerability of Event Tracing for Windows in the Microsoft Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges within the system...

ZOHO ManageEngine Remote Access Plus Information Disclosure Vulnerability

ZOHO ManageEngine Remote Access Plus is a remote access solution from ZOHO, Inc. An information disclosure vulnerability exists in ZOHO ManageEngine Remote Access Plus Server prior to version 10.1.2132.6, which stems from a privilege management Improperly managed, the process will start as a...