CVE-2022-24637: Improper Privilege Management

Open Web Analytics OWA before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, which can be used to gain admin privileges by leveraging cache hashes. This occurs because files generated with '...

CVE-2022-24072: Improper Privilege Management

The devtools API in Whale browser before 3.12.129.18 allowed extension developers to inject arbitrary JavaScript into the extension store web page via devtools.inspectedWindow, leading to extensions downloading and uploading when users open the developer tool...

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the insecure management of privileges, allowing attackers to escalate their privileges.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the Windows Recovery Environment Agent component on Microsoft Windows operating systems allows a perpetrator to escalate their privileges.

The vulnerability of the Windows Recovery Environment Agent component in Microsoft Windows systems is related to the insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Cluster Port Driver operating system driver for Microsoft Windows allows a hacker to gain increased privileges within the system.

The vulnerability of the Cluster Port Driver driver for the Microsoft Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges within the system...

The vulnerability of the Windows Remote Access service in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Remote Access service in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the NTFS file system of the Windows operating system, which allows a perpetrator to increase their privileges

The vulnerability of the NTFS file system in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to increase their privileges...

Cisco Nexus Dashboard Fabric Controller Improper Privilege Management Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Cisco Nexus Dashboard Fabric Controller. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

CVE-2022-20051: Improper Privilege Management

In ims service, there is a possible unexpected application behavior due to incorrect privilege assignment. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06219127; Issue ID: ALPS06219127...

CVE-2022-24931: Improper Privilege Management

Improper access control vulnerability in dynamic receiver in ApkInstaller prior to SMR MAR-2022 Release allows unauthorized attackers to execute arbitrary activity without a proper permission...

Siemens SINUMERIK MC

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Siemens Equipment: SINUMERIK MC Vulnerability: Improper Privilege Management 2. RISK EVALUATION Successful exploitation of this vulnerability could allow local attackers to escalate privileges to root. 3. TECHNICAL DETAILS...

PT-2022-1975 · Microsoft · Windows Fax/Scan Service +1

Name of the Vulnerable Software and Affected Versions: Windows Fax and Scan Service affected versions not specified Description: The issue is related to insecure privilege management in the Windows Fax and Scan Service, which can be exploited to elevate privileges. This allows an attacker to affe...

CVE-2022-25311: Improper Privilege Management

A vulnerability has been identified in SINEC NMS All versions = V1.0.3 V2.0, SINEC NMS All versions V1.0.3, SINEMA Server V14 All versions. The affected software do not properly check privileges between users during the same web browser session, creating an unintended sphere of control. This coul...

Exploit for Improper Privilege Management in Linux Linux_Kernel

CVE-2022-25636 This is my exploit for CVE-2022-25636. I te...

CVE-2022-0441: Improper Privilege Management

The MasterStudy LMS WordPress plugin before 2.7.6 does to validate some parameters given when registering a new account, allowing unauthenticated users to register as an admin...

The vulnerability of NETGEAR R6900P, R7000, R7000P, and RS400 router’s built-in software lies in the insecure management of privileges, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of NETGEAR R6900P, R7000, R7000P, and RS400 router’s built-in software is related to insecure privilege management. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the Microsoft Jet Red Database Engine (MS Jet (Red)) and the Access Connectivity Engine on Microsoft Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Microsoft Jet Red Database Engine MS Jet Red and the Access Connectivity Engine on Microsoft Windows operating systems is related to insecure privilege management. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the NTFS file system in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the NTFS file system in Windows operating systems is related to the insecure management of privileges. Exploiting this vulnerability can allow an attacker to increase their privileges...

VulnCheck KEV: CVE-2016-8562

A vulnerability has been identified in SIMATIC CP 1543-1 All versions V2.0.28, SIPLUS NET CP 1543-1 All versions V2.0.28. Under special conditions it was possible to write SNMP variables on port 161/udp which should be read-only and should only be configured with TIA-Portal. A write to these...

CVE-2022-25089: Improper Privilege Management

Printix Secure Cloud Print Management through 1.3.1106.0 incorrectly uses Privileged APIs to modify values in HKEYLOCALMACHINE via UITasks.PersistentRegistryData...