Lucene search
+L

4534 matches found

BDU FSTEC
BDU FSTEC
added 2021/03/30 12:00 a.m.11 views

The vulnerability of the wp-includes/class-wp-xmlrpc-server.php component of the WordPress content management system, related to a lack of privilege management mechanisms, allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the wp-includes/class-wp-xmlrpc-server.php component of the WordPress content management system is related to the lack of a mechanism for managing privileges. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity,...

9.8CVSS7.7AI score0.05077EPSS
SaveExploits0References7Affected Software3
Zero Day Initiative
Zero Day Initiative
added 2021/03/15 12:00 a.m.69 views

Adobe Creative Cloud Improper Privilege Management Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Adobe Creative Cloud on Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

7.8CVSS4.2AI score0.02467EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:00 a.m.10 views

The vulnerability of industrial remote access systems mymbCONNECT24 and mb CONNECT24, related to insecure management of privileges, allows attackers to expose sensitive information or cause service failures.

The vulnerability of industrial remote access systems mymbCONNECT24 and mb CONNECT24 is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to disclose protected information or cause service failures...

7.5CVSS6.6AI score0.01015EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:00 a.m.9 views

The vulnerability of industrial remote access systems mymbCONNECT24 and mb CONNECT24, related to insecure management of privileges, allows a hacker to terminate web2go sessions in a account that he does not have access to.

The vulnerability of industrial remote access systems mymbCONNECT24 and mb CONNECT24 is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to terminate web2go sessions in a user’s account that they have no access to...

6.8CVSS7.3AI score0.00831EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:00 a.m.13 views

The vulnerability of the Intel PROSet/Wireless WiFi networking utility is related to privilege management errors, allowing a hacker to elevate their privileges.

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool is related to privilege management errors. Exploiting this vulnerability can allow attackers to enhance their privileges...

6.7CVSS7.2AI score0.00395EPSS
SaveExploits0References3Affected Software1
OpenVAS
OpenVAS
added 2021/03/12 12:00 a.m.21 views

Huawei EulerOS: Security Advisory for net-snmp (EulerOS-SA-2021-1660)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.9AI score0.00459EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/03/11 12:00 a.m.8 views

The vulnerability of the McAfee Endpoint Security software lies in its insecure management of privileges, allowing attackers to circumvent existing security restrictions.

The vulnerability of the McAfee Endpoint Security security software is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to circumvent existing security restrictions using a specially crafted file...

6.6CVSS7.2AI score0.0025EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/03/11 12:00 a.m.37 views

EulerOS Virtualization 2.9.0 : net-snmp (EulerOS-SA-2021-1660)

According to the versions of the net-snmp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Net-SNMP through 5.7.3 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to ru...

7.8CVSS7.1AI score0.00459EPSS
SaveExploits0References3
GithubExploit
GithubExploit
added 2021/03/09 2:13 a.m.165 views

Exploit for Out-of-bounds Write in Microsoft

CVE-2021-1732-Exploit CVE-2021...

7.8CVSS8.4AI score0.78376EPSS
SaveExploits21
Positive Technologies
Positive Technologies
added 2021/03/09 12:00 a.m.5 views

PT-2021-2412 · Microsoft · Windows Container Execution Agent +1

Name of the Vulnerable Software and Affected Versions: Windows Container Execution Agent affected versions not specified Description: The issue is related to insecure privilege management in the Windows Container Execution Agent service. It allows an attacker to elevate their privileges...

7.8CVSS7.5AI score0.00858EPSS
SaveExploits2References10
Positive Technologies
Positive Technologies
added 2021/03/09 12:00 a.m.4 views

PT-2021-2335 · Microsoft · Windows Virtual Registry Provider +1

Name of the Vulnerable Software and Affected Versions: Windows Virtual Registry Provider affected versions not specified Description: The issue is related to insecure privilege management in the Virtual Registry Provider component of the Windows operating system. Exploitation of this issue may...

8.4CVSS7.9AI score0.00711EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2021/03/09 12:00 a.m.5 views

PT-2021-2421

Name of the Vulnerable Software and Affected Versions: Windows Storage Spaces Controller affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Storage Spaces Controller driver for Windows operating systems. This vulnerability is...

7.8CVSS7.1AI score0.00693EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2021/03/09 12:00 a.m.4 views

PT-2021-2370 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to insecure privilege management in the Windows Installer component of the Windows operating system. Exploitation of this issue may allow an attacker to eleva...

7.8CVSS6.5AI score0.01158EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2021/03/09 12:00 a.m.4 views

PT-2021-2338

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to insecure privilege management in the DirectX component of the Windows operating system. It allows an attacker to elevate their privileges. Recommendations At the momen...

7.8CVSS7AI score0.00804EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2021/03/09 12:00 a.m.3 views

PT-2021-2334 · Microsoft · Windows User Profile Service +1

Name of the Vulnerable Software and Affected Versions: Windows User Profile Service affected versions not specified Description: The issue is related to insecure privilege management in the Windows User Profile Service. Exploitation of this issue can allow an attacker to elevate their privileges...

7.8CVSS6.6AI score0.01139EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2021/03/09 12:00 a.m.6 views

PT-2021-2361 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Update Service, which is caused by insecure privilege management. This vulnerability can be exploited to allow...

7.1CVSS6.6AI score0.01147EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2021/03/09 12:00 a.m.6 views

PT-2021-2360 · Microsoft · Windows Projected File System +1

Name of the Vulnerable Software and Affected Versions: Windows Projected File System affected versions not specified Description: The issue is related to insecure privilege management in the Windows Projected File System component, allowing an attacker to elevate their privileges. This can impact...

7.8CVSS7.3AI score0.00693EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2021/03/09 12:00 a.m.10 views

PT-2021-2353

Name of the Vulnerable Software and Affected Versions Windows App-V Overlay Filter affected versions not specified Description The issue is related to insecure privilege management in the Windows App-V Overlay Filter component. It allows attackers to elevate their privileges, potentially affectin...

7.8CVSS7.1AI score0.00668EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2021/03/09 12:00 a.m.6 views

PT-2021-2339

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to an elevation-of-privilege vulnerability in the Windows Update Stack Setup, which is caused by insecure privilege management. This vulnerability can be exploited to all...

7.8CVSS7AI score0.00924EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2021/03/09 12:00 a.m.5 views

PT-2021-2413 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to insecure privilege management in the Windows Print Spooler component of Windows operating systems. Exploitation of this issue may allow an attacker to...

7.8CVSS7.8AI score0.00846EPSS
SaveExploits0References6
Rows per page
Query Builder