Lucene search
+L

6815 matches found

GithubExploit
GithubExploit
•added 2022/08/30 5:31 p.m.•22 views

Exploit for Improper Privilege Management in Openwebanalytics Open_Web_Analytics

CVE-2022-24637 Exploit for the Unauthenticated RCE in Open...

9.8CVSS7.2AI score0.99055EPSS
SaveExploits15
BDU FSTEC
BDU FSTEC
•added 2022/08/26 12:00 a.m.•16 views

The vulnerability of the OctoPrint 3D-printer controller relates to the unsafe management of privileges, allowing a malicious actor to change the account password without knowing the current password.

The vulnerability of the OctoPrint 3D-printer controller is related to insecure management of privileges. Exploiting this vulnerability allows a hacker to change the account password without knowing the current password...

5.3CVSS6.2AI score0.00347EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/08/22 12:00 a.m.•17 views

The vulnerability of the Kerberos protocol for Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Kerberos protocol for Windows operating systems is related to privilege management errors. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

9CVSS7.4AI score0.11306EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2022/08/20 12:00 a.m.•41 views

Improper Privilege Management in com.xuxueli:xxl-job

XXL-JOB all versions as of 11 July 2022 are vulnerable to Insecure Permissions resulting in the ability to execute admin function with low Privilege account...

8.8CVSS8.6AI score0.01507EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2022/08/20 12:00 a.m.•73 views

GHSA-7QQ9-9G2W-56F9 Improper Privilege Management in com.xuxueli:xxl-job

XXL-JOB all versions as of 11 July 2022 are vulnerable to Insecure Permissions resulting in the ability to execute admin function with low Privilege account...

8.8CVSS8.8AI score0.01507EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2022/08/20 12:00 a.m.•1 views

PT-2022-4444

Name of the Vulnerable Software and Affected Versions OctoPrint versions prior to 1.8.3 Description The issue is related to unverified password change in OctoPrint, which is associated with insecure privilege management. This allows an attacker to change a user's account password without knowing...

7.8CVSS0.00347EPSS
SaveExploits1References12
Positive Technologies
Positive Technologies
•added 2022/08/19 12:00 a.m.•26 views

PT-2022-4288 · Huawei · Huawei Jad-Al50

Name of the Vulnerable Software and Affected Versions: Huawei JAD-AL50 version 102.0.0.225C00E220R3P4 Description: A permission bypass issue in Huawei's cross-device task management could allow an attacker to access certain resources on the attacked devices. This is related to insecure privilege...

5.5CVSS5.3AI score0.00163EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/19 12:00 a.m.•12 views

CVE-2022-1901: Improper Privilege Management

In affected versions of Octopus Deploy it is possible to unmask sensitive variables by using variable preview...

5.3CVSS5.9AI score0.00547EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/19 12:00 a.m.•6 views

CVE-2022-36157: Improper Privilege Management

XXL-JOB all versions as of 11 July 2022 are vulnerable to Insecure Permissions resulting in the ability to execute admin function with low Privilege account...

8.8CVSS8AI score0.01507EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2022/08/19 12:00 a.m.•18 views

The vulnerability of Huawei JAD-AL50 mobile phone’s microprogramming software, related to insecure privilege management, allows a perpetrator to disclose protected information.

The vulnerability of Huawei JAD-AL50 mobile phone’s microprogramming software is related to insecure management of privileges. Exploiting this vulnerability could allow a hacker to disclose protected information...

4CVSS5.5AI score0.00163EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2022/08/19 12:00 a.m.•16 views

The vulnerability of the driver of the Windows Cloud Files mini-filter on the Windows operating system allows a hacker to escalate their privileges.

The vulnerability of the Windows Cloud Files mini-filter driver in the Windows operating system is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges within the system...

7.3CVSS7.3AI score0.00776EPSS
SaveExploits0References2
NVD
NVD
•added 2022/08/18 1:15 p.m.•48 views

CVE-2022-37025

An improper privilege management vulnerability in McAfee Security Scan Plus MSS+ before 4.1.262.1 could allow a local user to modify a configuration file and perform a LOLBin Living off the land attack. This could result in the user gaining elevated permissions and being able to execute arbitrary...

7.8CVSS0.00213EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2022/08/18 12:23 p.m.•57 views

CVE-2022-37025

An improper privilege management vulnerability in McAfee Security Scan Plus MSS+ before 4.1.262.1 could allow a local user to modify a configuration file and perform a LOLBin Living off the land attack. This could result in the user gaining elevated permissions and being able to execute arbitrary...

8AI score0.00213EPSS
SaveExploits0References3
CVE
CVE
•added 2022/08/18 12:23 p.m.•101 views

CVE-2022-37025

CVE-2022-37025 affects McAfee Security Scan Plus (MSS+) prior to 4.1.262.1. The vulnerability is described as improper privilege management that could let a local user modify a configuration file and perform a LOLBin (Living off the Land) attack, enabling elevated permissions and potential arbitr...

7.8CVSS7.7AI score0.00213EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
•added 2022/08/18 12:00 a.m.•19 views

McAfee Security Scan Plus 安全漏洞

McAfee Security Scan Plus MSS+ is a tool from McAfee, Inc. that protects computers from spyware and viruses. A security vulnerability exists in versions of McAfee Security Scan Plus MSS+ prior to 4.1.262.1, which stems from a faulty privilege management that could allow a local user to modify...

7.8CVSS7.8AI score0.00213EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/18 12:00 a.m.•11 views

CVE-2022-37025: Improper Privilege Management

An improper privilege management vulnerability in McAfee Security Scan Plus MSS+ before 4.1.262.1 could allow a local user to modify a configuration file and perform a LOLBin Living off the land attack. This could result in the user gaining elevated permissions and being able to execute arbitrary...

7.8CVSS7.8AI score0.00213EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2022/08/18 12:00 a.m.•14 views

The vulnerability of the Mac OS operating system, related to insecure management of privileges, allows attackers to elevate their own privileges.

The vulnerability of the Mac OS is related to the insecure management of privileges. Exploiting this vulnerability allows a remote attacker to enhance their privileges...

10CVSS7.2AI score0.00777EPSS
SaveExploits0References3Affected Software1
GithubExploit
GithubExploit
•added 2022/08/17 4:45 p.m.•661 views

Exploit for Improper Privilege Management in Wfs Heaven_Burns_Red

EvilWfshbr CVE-2022-42046https://vulners.com/cve/CVE-2022-...

7.8CVSS7.5AI score0.0048EPSS
SaveExploits2
BDU FSTEC
BDU FSTEC
•added 2022/08/17 12:00 a.m.•16 views

The vulnerability of the Unified Write Filter (UWF) in the Windows operating system allows a hacker to increase their privileges.

The vulnerability of the Unified Write Filter UWF in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

6.8CVSS7.3AI score0.00467EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2022/08/17 12:00 a.m.•20 views

The vulnerability of the monitoring tool for VMware vRealize Operations, related to insecure management of privileges, allows a perpetrator to escalate their privileges.

The vulnerability of the monitoring tool for VMware vRealize Operations is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

9CVSS7.4AI score0.00649EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder