EulerOS 2.0 SP8 : net-snmp (EulerOS-SA-2020-2155)

According to the versions of the net-snmp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Net-SNMP through 5.7.3 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary...

EulerOS 2.0 SP3 : net-snmp (EulerOS-SA-2020-2056)

According to the versions of the net-snmp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Net-SNMP through 5.7.3 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary...

The vulnerability of the Intel Innovation Engine implementation, related to insecure privilege management, allows attackers to escalate their privileges.

The vulnerability of the Intel Innovation Engine implementation is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the PCIe function in the microprogramming software of Intel FPGA Programmable Acceleration Card N3000 allows a hacker to enhance their privileges.

The vulnerability of the PCIe function in the microprogramming software of Intel FPGA Programmable Acceleration Card N3000 is related to insecure management of privileges. Exploiting this vulnerability could allow attackers to enhance their privileges...

The vulnerability of VMware Fusion’s hypervisor, related to privilege management errors, allows a perpetrator to elevate their privileges.

The vulnerability of VMware Fusion relates to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges...

GitLab Authentication Vulnerability

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An authentication vulnerability was discovered in GitLab...

The vulnerability of the Cisco IOS XR command-line interface allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Cisco IOS XR operating system’s command-line interface is related to privilege management errors. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the Cisco IOS XR command-line interface allows a attacker to compromise the integrity and accessibility of protected information.

The vulnerability of the Cisco IOS XR operating system’s command-line interface is related to privilege management errors. Exploiting this vulnerability can allow an attacker to compromise the integrity and accessibility of protected information...

PT-2020-4020 · Microsoft · Windows +1

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insecure privilege management in the WinINet API component of the Windows operating system. Exploitation of this issue could allow a remote attacker to elevate their...

The vulnerability of the Microsoft .NET Framework software platform, related to insecure management of privileges, allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft .NET Framework software platform is related to insecure management of privileges. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

CVE-2020-7523

Improper Privilege Management vulnerability exists in Schneider Electric Modbus Serial Driver see security notification for versions which could cause local privilege escalation when the Modbus Serial Driver service is invoked. The driver does not properly assign, modify, track, or check privileg...

CVE-2020-7523

Improper Privilege Management vulnerability exists in Schneider Electric Modbus Serial Driver see security notification for versions which could cause local privilege escalation when the Modbus Serial Driver service is invoked. The driver does not properly assign, modify, track, or check privileg...

CVE-2020-7523

Improper Privilege Management vulnerability exists in Schneider Electric Modbus Serial Driver see security notification for versions which could cause local privilege escalation when the Modbus Serial Driver service is invoked. The driver does not properly assign, modify, track, or check privileg...

CVE-2020-7523

Improper Privilege Management vulnerability exists in Schneider Electric Modbus Serial Driver see security notification for versions which could cause local privilege escalation when the Modbus Serial Driver service is invoked. The driver does not properly assign, modify, track, or check privileg...

CVE-2020-7523

Schneider Electric Modbus Serial Driver contains an improper privilege management vulnerability that could enable local privilege escalation when the Modbus Serial Driver service is invoked. The driver reportedly does not properly assign, modify, track, or check privileges for an actor, creating ...

CVE-2020-15862

A flaw was found in Net-SNMP through version 5.73, where an Improper Privilege Management issue occurs due to SNMP WRITE access to the EXTEND MIB allows running arbitrary commands as root. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

Security Advisory - Information Leak Vulnerability in Huawei Smartphone

There is an information vulnerability in Huawei smartphones. A function in a module can be called without verifying the caller's access. Attackers with user access can exploit this vulnerability to obtain some information. This can lead to information leak. Vulnerability ID: HWPSIRT-2019-12141 Th...

CVE-2019-11847

An improper privilege management vulnerabitlity exists in ALEOS before 4.11.0, 4.9.4 and 4.4.9. An authenticated user can escalate to root via the command shell...

Design/Logic Flaw

An improper privilege management vulnerabitlity exists in ALEOS before 4.11.0, 4.9.4 and 4.4.9. An authenticated user can escalate to root via the command shell...

CVE-2019-11847

CVE-2019-11847 describes a privilege management flaw in ALEOS prior to 4.11.0, 4.9.4, and 4.4.9. An authenticated user can escalate to root via the command shell due to mismanagement of privileges. Affected product context refers to ALEOS (embedded M2M/IDE environment). The available sources stat...