Privilege escalation

A component of the HarmonyOS has a Improper Privilege Management vulnerability. Local attackers may exploit this vulnerability to bypass user restrictions...

CVE-2021-22376

Technical details about CVE-2021-22376 are not publicly available in the provided documents. Monitor for updates from the sources to learn affected products, versions, impact, and fixes.

CVE-2021-22376

A component of the HarmonyOS has a Improper Privilege Management vulnerability. Local attackers may exploit this vulnerability to bypass user restrictions...

Microsoft Edge’s vulnerability, related to privilege management errors, allows a hacker to escalate their privileges.

The vulnerability of Microsoft Edge is related to privilege management errors. Exploiting this vulnerability can allow a remote attacker to enhance their privileges...

Exploit for CVE-2021-1675

CVE-2021-1675 / CVE-2021-34527 Impacket implementation of the...

Exploit for CVE-2021-1675

CVE-20...

The vulnerability of the Spring Framework software, caused by privilege management errors, allows a hacker to read and rewrite any files they desire.

The vulnerability of the Spring Framework software is caused by privilege management errors. Exploiting this vulnerability allows an attacker to read and rewrite any files at will...

The vulnerability of IBM DB2 database management systems, including IBM DB2 Connect, stems from privilege management errors, allowing attackers to overwrite arbitrary files.

The vulnerability of IBM DB2 database management systems and IBM DB2 Connect is related to privilege management errors. Exploiting this vulnerability can allow a malicious actor to re-record arbitrary files remotely...

Improper Privilege Management in HashiCorp Nomad

HashiCorp Nomad and Nomad Enterprise up to 0.12.9 exec and java task drivers can access processes associated with other tasks on the same node. Fixed in 0.12.10, and 1.0.3...

GHSA-35QP-XQ9F-2RJX Improper Privilege Management in HashiCorp Nomad

HashiCorp Nomad and Nomad Enterprise up to 0.12.9 exec and java task drivers can access processes associated with other tasks on the same node. Fixed in 0.12.10, and 1.0.3...

The vulnerability in the run-x-session script of the LDM package for the Debian GNU/Linux operating system allows a hacker to elevate their privileges to the level of the superuser.

The vulnerability in the run-x-session script of the LDM package for the Debian GNU/Linux operating system is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to elevate their privileges to a superuser level...

The vulnerability of the OpenSSH cryptographic protection mechanism, related to privilege management errors, allows attackers to compromise the integrity of the protected information.

The vulnerability of the OpenSSH cryptographic protection mechanism is related to privilege management errors. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...

Synology Download Station CGI Privilege Management Vulnerability

Synology Download Station is a download management tool for Synology. A privilege management vulnerability exists in the Synology Download Station CGI component, which can be exploited by a remote attacker to submit a special request that can be used to execute arbitrary code in the application...

CVE-2021-34810

Improper privilege management vulnerability in cgi component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to execute arbitrary code via unspecified vectors...

CVE-2021-34810

CVE-2021-34810 : A privilege-management vulnerability exists in the CGI component of Synology Download Station prior to version 3.8.16-3566. Remote authenticated users can execute arbitrary code via unspecified vectors. Affected software: Synology Download Station (on DSM). Impact is high/critica...

CVE-2021-34810

Improper privilege management vulnerability in cgi component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to execute arbitrary code via unspecified vectors...

McAfee Agent 5.x prior to 5.7.3 Multiple Vulnerabilities (SB10362)

The version of McAfee Agent, formerly McAfee ePolicy Orchestrator ePO Agent, installed on the remote host is 5.x prior to 5.7.3. It is, therefore, affected by the following vulnerabilities: - An improper privilege management vulnerability exists due to a local user having the ability to edit the...

CVE-2021-34810

Improper privilege management vulnerability in cgi component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to execute arbitrary code via unspecified vectors...

Schneider Electric Enerlin'X Com 'X 510

1. EXECUTIVE SUMMARY CVSS v3 8.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Schneider Electric Equipment: Enerlin'X Com’X 510 Vulnerability: Improper Privilege Management 2. RISK EVALUATION Successful exploitation of this vulnerability could allow elevation of privileges, which...

The vulnerability of the Windows HTML Platform component of the Windows operating system allows attackers to circumvent existing security restrictions.

The vulnerability of the Windows HTML Platform component of the Windows operating system is related to privilege management errors. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...