The vulnerability of the Unified Write Filter (UWF) in the Windows operating system allows a hacker to increase their privileges.

The vulnerability of the Unified Write Filter UWF in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

CVE-2022-29959

Emerson OpenBSI through 2022-04-29 mishandles credential storage. It is an engineering environment for the ControlWave and Bristol Babcock line of RTUs. This environment provides access control functionality through user authentication and privilege management. The credentials for various users a...

CVE-2022-29959

Emerson OpenBSI through 2022-04-29 mishandles credential storage. It is an engineering environment for the ControlWave and Bristol Babcock line of RTUs. This environment provides access control functionality through user authentication and privilege management. The credentials for various users a...

Authentication flaw

Emerson OpenBSI through 2022-04-29 mishandles credential storage. It is an engineering environment for the ControlWave and Bristol Babcock line of RTUs. This environment provides access control functionality through user authentication and privilege management. The credentials for various users a...

CVE-2022-29959

Emerson OpenBSI through 2022-04-29 mishandles credential storage. It is an engineering environment for the ControlWave and Bristol Babcock line of RTUs. This environment provides access control functionality through user authentication and privilege management. The credentials for various users a...

CVE-2022-29959

Summary of CVE-2022-29959 : OpenBSI (Emerson OpenBSI) stores credentials insecurely in SecUsers.ini, enabling potential credential disclosure to an attacker with local access. Multiple sources (NVD, Red Hat, PRION, CVE listings, and CISA advisory) describe the issue as insecure credential storage...

PT-2022-4231

Name of the Vulnerable Software and Affected Versions VMware vRealize Operations affected versions not specified Description The issue is related to insecure privilege management in VMware vRealize Operations, allowing a malicious actor with administrative network access to escalate privileges to...

PT-2022-4203 · Microsoft · Windows +2

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Storage Spaces Direct affected versions not specified Description: The issue is related to an elevation of privilege vulnerability. It is associated with unsafe privilege management in the Unified Write...

CVE-2022-20361: Improper Privilege Management

In btifdmauthcmplevt of btifdm.cc, there is a possible vulnerability in Cross-Transport Key Derivation due to Weakness in Bluetooth Standard. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

PT-2022-18375 · Openemr · Openemr

Name of the Vulnerable Software and Affected Versions: openemr versions prior to 7.0.0.1 Description: The issue concerns Missing Authorization and Improper Privilege Management in the GitHub repository openemr/openemr. Recommendations: For versions prior to 7.0.0.1, update to version 7.0.0.1 or...

OpenEMR 安全漏洞

OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A security vulnerability exists in OpenEMR versions prior to 7.0.0.1 that stems fr...

The vulnerability of the D-Bus configuration file of the NVIDIA GPU Display Driver allows a attacker to trigger a service failure or execute arbitrary code.

The vulnerability of the D-Bus configuration file of the NVIDIA GPU Display Driver is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...

CVE-2022-36833

Improper Privilege Management vulnerability in Game Optimizing Service prior to versions 3.3.04.0 in Android 10, and 3.5.04.8 in Android 11 and above allows local attacker to execute hidden function for developer by changing package name...

CVE-2022-36833

Improper Privilege Management vulnerability in Game Optimizing Service prior to versions 3.3.04.0 in Android 10, and 3.5.04.8 in Android 11 and above allows local attacker to execute hidden function for developer by changing package name...

CVE-2022-36833

Improper Privilege Management vulnerability in Game Optimizing Service prior to versions 3.3.04.0 in Android 10, and 3.5.04.8 in Android 11 and above allows local attacker to execute hidden function for developer by changing package name...

CVE-2022-36833

CVE-2022-36833 affects Samsung’s Game Optimizing Service (GOS) on Android 10 and 11+. The vulnerability stems from improper privilege management that allows a local attacker to execute a hidden function intended for developers by changing the package name. This is a local, privilege-related issue...

CVE-2022-36833: Improper Privilege Management

Improper Privilege Management vulnerability in Game Optimizing Service prior to versions 3.3.04.0 in Android 10, and 3.5.04.8 in Android 11 and above allows local attacker to execute hidden function for developer by changing package name...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from South Korea's Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices Game Optimizing Service version 3.5.04.8, which stems from an improper privilege management vulnerabilit...

PT-2022-23637 · Google · Android 11 +1

Name of the Vulnerable Software and Affected Versions: Game Optimizing Service versions prior to 3.3.04.0 in Android 10 Game Optimizing Service versions prior to 3.5.04.8 in Android 11 and above Description: The issue is related to improper privilege management, allowing a local attacker to execu...

CVE-2022-2498: Improper Privilege Management

An issue in pipeline subscriptions in GitLab EE affecting all versions from 12.8 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1 triggered new pipelines with the person who created the tag as the pipeline creator instead of the subscription's author...