The vulnerability of the cgi_api.php component in the network storage software from Western Digital’s MyCloud NAS allows a perpetrator to execute arbitrary code.

The vulnerability of the cgiapi.php component in the Western Digital MyCloud NAS network storage software is related to insecure privilege management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Schneider Electric EcoStruxure Operator Terminal Expert runtime (Vijeo XD)

1. EXECUTIVE SUMMARY CVSS v3 7.4 Vendor: Schneider Electric Equipment: EcoStruxure Operator Terminal Expert Vulnerability: Improper Privilege Management 2. RISK EVALUATION Successful exploitation of this vulnerability may allow unauthorized command execution by a local user of the Windows...

The vulnerability of the Intel HID event filter driver installer allows a hacker to increase their privileges.

The vulnerability of the Intel HID event filter driver installer is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the DCH-compatible Thunderbolt driver, related to privilege management errors, allows a hacker to elevate their privileges.

The vulnerability of the DCH-compatible Thunderbolt driver is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Huawei FusionCompute 权限许可和访问控制问题漏洞

FusionCompute is Huawei's self-developed computing virtualization software. An elevation of privilege vulnerability exists in FusionCompute 6.3.0, 6.3.1, 6.5.0, 6.5.1, 8.0.0. The vulnerability stems from improper privilege management. An attacker with normal privileges could exploit the...

The vulnerability of the Windows Error Reporting error reporting service on Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Error Reporting registration service on Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Windows Remote Access service in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Remote Access service in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Win32k component in Windows operating systems, which allows attackers to increase their privileges

The vulnerability of the Win32k component in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Important: Red Hat Security Advisory: net-snmp security and bug fix update

An update for net-snmp is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

The vulnerability of the Azure Sphere operating system, related to privilege management errors, allows a perpetrator to escalate their privileges.

The vulnerability of the Azure Sphere operating system is related to privilege management errors. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

The vulnerability of the print queue dispatcher in the Windows operating system allows a hacker to increase their privileges.

The vulnerability of the print driver in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to increase their privileges...

RHEL 8 : net-snmp (RHSA-2020:5201)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:5201 advisory. The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol SNMP, including an SNMP library, an extensible...

Scientific Linux Security Update : net-snmp on SL6.x i686/x86_64 (2020:5129)

The remote Scientific Linux 6 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2020:5129-1 advisory. - net-snmp: Improper Privilege Management in EXTEND MIB may lead to privileged commands execution CVE-2020-15862 Note that Nessus has not tested for this...

The vulnerability of Microsoft Windows operating systems, related to insecure management of privileges, allows attackers to escalate their privileges.

The vulnerability of Microsoft Windows operating systems is related to the insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Azure Sphere operating system, related to privilege management errors, allows a perpetrator to escalate their privileges.

The vulnerability of the Azure Sphere operating system is related to privilege management errors. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

The vulnerability of the Intel High Definition Audio technology lies in privilege management errors, which allow attackers to elevate their privileges.

The vulnerability of the Intel High Definition Audio technology is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Azure Sphere operating system, related to privilege management errors, allows a perpetrator to escalate their privileges.

The vulnerability of the Azure Sphere operating system is related to privilege management errors. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

Privilege escalation

A CWE-269 Improper Privilege Management vulnerability exists in EcoStruxureª Operator Terminal Expert runtime Vijeo XD that could cause privilege escalation on the workstation when interacting directly with a driver installed by the runtime software of EcoStruxureª Operator Terminal Expert...

CVE-2020-12495

Endress+Hauser Ecograph T Neutral/Private Label RSG35, ORSG35 with Firmware version prior to V2.0.0 is prone to improper privilege management. The affected device has a web-based user interface with a role-based access system. Users with different roles have different write and read privileges. T...

Design/Logic Flaw

Endress+Hauser Ecograph T Neutral/Private Label RSG35, ORSG35 with Firmware version prior to V2.0.0 is prone to improper privilege management. The affected device has a web-based user interface with a role-based access system. Users with different roles have different write and read privileges. T...