PT-2022-3832 · Oracle · Mysql Shell For Vs Code

Name of the Vulnerable Software and Affected Versions: MySQL Shell for VS Code versions 1.1.8 and prior Description: The issue is related to insecure privilege management in the MySQL Shell for VS Code component. It allows an attacker to gain read, modify, or delete access to data. The...

PT-2022-3963

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11 Description The issue is related to insecure privilege management in the Filesystem component of Oracle Solaris. It allows a low-privileged attacker with network access via SMB to compromise Oracle Solaris. Successful...

PT-2022-3833 · Oracle · Mysql Cluster

Name of the Vulnerable Software and Affected Versions: MySQL Cluster versions 7.4.36 and prior MySQL Cluster versions 7.5.26 and prior MySQL Cluster versions 7.6.22 and prior MySQL Cluster versions 8.0.29 and prior Description: The issue is related to insecure privilege management in the MySQL...

CVE-2022-26113: Improper Privilege Management

An execution with unnecessary privileges vulnerability CWE-250 in FortiClientWindows 7.0.0 through 7.0.3, 6.4.0 through 6.4.7, 6.2.0 through 6.2.9, 6.0.0 through 6.0.10 may allow a local attacker to perform an arbitrary file write on the system...

The vulnerability of the microprogramming software of the Acti9 PowerTag Link C communication module, related to insecure management of privileges, allows a violator to elevate their privileges.

The vulnerability of the microprogramming software of the Acti9 PowerTag Link C communication module is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2022-34754

A CWE-269: Improper Privilege Management vulnerability exists that could allow elevated functionality when guessing credentials. Affected Products: Acti9 PowerTag Link C A9XELC10-A V1.7.5 and prior, Acti9 PowerTag Link C A9XELC10-B V2.12.0 and prior...

CVE-2022-34754

CVE-2022-34754 involves CWE-269 improper privilege management in Schneider Electric Acti9 PowerTag Link C gateways (A9XELC10-A, V1.7.5 and prior; A9XELC10-B, V2.12.0 and prior). The vulnerability could allow elevated functionality when credentials are guessed. The CVSS details shown in the docume...

CVE-2022-34754: Improper Privilege Management

A CWE-269: Improper Privilege Management vulnerability exists that could allow elevated functionality when guessing credentials. Affected Products: Acti9 PowerTag Link C A9XELC10-A V1.7.5 and prior, Acti9 PowerTag Link C A9XELC10-B V2.12.0 and prior...

The vulnerability of the ASUS Control Center, which involves insecure management of privileges, allows a perpetrator to escalate their privileges or cause a partial service failure.

The vulnerability of the ASUS Control Center, a component of information technology management systems, is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to increase their privileges or cause partial service interruptions...

The vulnerability of the Metasys Application and Data Server (ADS), Metasys Extended Application and Data Server (ADX), and Metasys Open Application Server (OAS) lies in the insecure management of privileges, allowing attackers to elevate their privileges to the level of administrators.

The vulnerabilities of the Metasys Application and Data Server ADS, Metasys Extended Application and Data Server ADX, and Metasys Open Application Server OAS are related to insecure management of privileges. Exploiting these vulnerabilities can allow a malicious actor to elevate their privileges ...

The vulnerability of the SEPCOS Single Package software in the Secheron SEPCOS control and protection relay system allows a intruder to enhance their privileges.

The vulnerability of the SEPCOS Single Package control and protection relay software is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

The vulnerability of ZoneAlarm’s firewall driver allows attackers to increase their privileges.

The vulnerability of ZoneAlarm’s firewall driver is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2022-34754

A CWE-269: Improper Privilege Management vulnerability exists that could allow elevated functionality when guessing credentials. Affected Products: Acti9 PowerTag Link C A9XELC10-A V1.7.5 and prior, Acti9 PowerTag Link C A9XELC10-B V2.12.0 and prior...

PT-2022-3711 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in Windows Credential Guard, which is associated with insecure privilege management. This vulnerability can be exploited to...

HUAWEI HarmonyOS SystemUI module privilege management vulnerability

HUAWEI HarmonyOS is an operating system from China's Huawei HUAWEI. HUAWEI HarmonyOS version 2.0 contains an authorization issue vulnerability that stems from improper privilege management in the SystemUI module, which could be exploited by an attacker to cause device services to run in the...

Devolutions Server 安全漏洞

Devolutions Server is an application from Devolutions Canada. It provides a full-featured shared account and password management solution. A security vulnerability exists in Devolutions Server versions prior to 2022.2 that stems from incorrect privilege management. An attacker could exploit the...

Cybozu Garoon License Issue Vulnerability (CNVD-2022-69536)

Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. An authorization issue vulnerability exists in Cybozu Garoon. The vulnerability stems from improper privilege...

HUAWEI HarmonyOS 安全漏洞

HUAWEI HarmonyOS is an operating system from China's Huawei HUAWEI. HUAWEI HarmonyOS version 2.0 contains an authorization issue vulnerability that stems from improper privilege management in the SystemUI module, which could be exploited by an attacker to cause device services to run in the...

WS-2022-0236

Improper Privilege Management in outline/outline before 0.65.0, user can get document content even after removed...

Microsoft Edge browser’s vulnerability, related to insecure management of privileges, allows attackers to elevate their privileges.

The vulnerability of Microsoft Edge relates to the insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...