PT-2022-7263 · Lenovo · Lenovo Tablet

Name of the Vulnerable Software and Affected Versions: Lenovo tablet software affected versions not specified Description: The issue is related to insecure privilege management in the software. It may allow an attacker to elevate their privileges. Additionally, there is a problem with an incorrec...

CVE-2022-26676: Improper Privilege Management

aEnrich a+HRD has inadequate privilege restrictions, an unauthenticated remote attacker can use the API function to upload and execute malicious scripts to control the system or disrupt service...

The vulnerability of the Remote Access Connection Manager (RASMan) service in the Microsoft Windows operating system allows a hacker to increase their privileges.

The vulnerability of the Remote Access Connection Manager RASMan service in the Microsoft Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the user profile service in the Microsoft Windows operating system allows a hacker to escalate their privileges.

The vulnerability of the user profile service in the Microsoft Windows operating system is related to errors in privilege management. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the XENMAPSPACE_grant_table function in Xen hypervisors allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the XENMAPSPACEgranttable function in Xen hypervisors is related to insecure management of privileges. Exploiting this vulnerability allows attackers to access confidential data, compromise its integrity, and cause service interruptions...

Enforced Owner Can Extract Funds From The Contract

Lines of code Vulnerability details Impact During the code review, It has been observed that access control mechanisms are checked with the following line. LibDiamond.enforceIsContractOwner; The withdraw gaves abilitiy to contract owner extract all funds are sent to contract. This poses...

CVE-2003-5001 ISS BlackICE PC Protection Cross Site Scripting Detection privileges management

A vulnerability was found in ISS BlackICE PC Protection and classified as critical. Affected by this issue is the component Cross Site Scripting Detection. The manipulation as part of POST/PUT/DELETE/OPTIONS Request leads to privilege escalation. The attack may be launched remotely. The exploit h...

Moderate: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.3.8 security and container updates

Red Hat Advanced Cluster Management for Kubernetes 2.3.8 General Availability release images, which provide security and container updates. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a...

The vulnerability of the basic Windows DWM library in Microsoft Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the basic Windows DWM library in Microsoft Windows is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Microsoft Windows operating system’s kernel, which allows a hacker to increase their privileges

The vulnerability of the Microsoft Windows operating system’s kernel is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Microsoft Security Support Provider Interface (SSPI) in the Microsoft Windows operating system allows attackers to escalate their privileges.

The vulnerability of the Microsoft Security Support Provider Interface SSPI in the Microsoft Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the CD-ROM driver of the Microsoft Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Microsoft Windows operating system’s CD-ROM driver is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability in the fax sending and scanning services of the Microsoft Windows operating system allows a hacker to escalate their privileges.

The vulnerability of the Microsoft Windows operating system’s fax and scanning services is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

Razer Synapse 3.6.x DLL Hijacking

Advisory ID: SYSS-2021-058 Product: Razer Synapse Manufacturer: Razer Inc. Affected Versions: Versions prior to 3.7.0228.022817 Tested Versions: 3.6.0920.091710, 3.6.1010.101113, 3.6.1018.101823, 3.6.1130.111217, 3.6.1201.111814, 3.7.0131.011810 Vulnerability Type: Improper Privilege Management...

PT-2022-2046 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Windows User Profile Service. This vulnerability is caused by errors in privilege management. Exploitation of this iss...

VulnCheck KEV: CVE-2019-1385

A privilege escalation vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files...

Improper Privilege Management in Open Web Analytics

Open Web Analytics OWA before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, which can be used to gain admin privileges by leveraging cache hashes. This occurs because files generated with '?php instead of the intended "?php sequence aren't handled by the PH...

The vulnerability of the Fast FAT File System Driver for the Microsoft Windows operating system allows a hacker to gain increased privileges.

The vulnerability of the Fast FAT File System Driver for the Microsoft Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Advanced Local Procedure Call (ALPC) handler in the Microsoft Windows operating system allows a hacker to increase their privileges.

The vulnerability of the Advanced Local Procedure Call ALPC in the Microsoft Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Windows Digital Media Receiver component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows Digital Media Receiver component of the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...