The vulnerability of the Windows Event Tracing service allows a perpetrator to enhance their privileges within the system.

The vulnerability of the Windows Event Tracing service is related to insecure privilege management. Exploiting this vulnerability can allow an attacker to enhance their privileges within the system...

The vulnerability of the Storage component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Storage component in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the basic Windows DWM library in the Windows operating system allows attackers to escalate their privileges.

The vulnerability of the Windows DWM base library in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the basic Windows DWM library in the Windows operating system allows attackers to escalate their privileges.

The vulnerability of the Windows DWM base library in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Improper Privilege Management in Apache Hadoop

In Apache Hadoop 3.2.0 to 3.2.1, 3.0.0-alpha1 to 3.1.3, and 2.0.0-alpha to 2.10.0, WebHDFS client might send SPNEGO authorization header to remote URL without proper verification...

GHSA-F8VC-WFC8-HXQH Improper Privilege Management in Apache Hadoop

In Apache Hadoop 3.2.0 to 3.2.1, 3.0.0-alpha1 to 3.1.3, and 2.0.0-alpha to 2.10.0, WebHDFS client might send SPNEGO authorization header to remote URL without proper verification...

CVE-2021-3813

Improper Privilege Management in GitHub repository chatwoot/chatwoot prior to v2.2...

CVE-2021-3813

Improper Privilege Management in GitHub repository chatwoot/chatwoot prior to v2.2...

CVE-2021-3813

Improper Privilege Management in GitHub repository chatwoot/chatwoot prior to v2.2...

Input validation

Improper Privilege Management in GitHub repository chatwoot/chatwoot prior to v2.2...

CVE-2021-3813

Improper Privilege Management in GitHub repository chatwoot/chatwoot prior to v2.2...

CVE-2021-3813 Improper Privilege Management in chatwoot/chatwoot

Improper Privilege Management in GitHub repository chatwoot/chatwoot prior to v2.2...

CVE-2021-3813

CVE-2021-3813 affects the chatwoot/chatwoot project prior to v2.2, arising from an improper privilege management flaw. The issue enables a non-collaborator user to reveal inbox details by enumerating inbox IDs via crafted requests (PoC shows header/cookie reuse and inbox_id exploitation). Impact ...

CVE-2021-3813: Improper Privilege Management

Improper Privilege Management in GitHub repository chatwoot/chatwoot prior to v2.2...

CVE-2021-37852: Improper Privilege Management

ESET products for Windows allows untrusted process to impersonate the client of a pipe, which can be leveraged by attacker to escalate privileges in the context of NT AUTHORITY\SYSTEM...

PT-2022-10693 · Chatwoot · Chatwoot

Name of the Vulnerable Software and Affected Versions: chatwoot/chatwoot versions prior to 2.2 Description: The issue concerns improper privilege management. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents...

AlmaLinux 8 : net-snmp (ALSA-2020:5480)

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2020:5480 advisory. - Net-SNMP through 5.7.3 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary commands as root...

PT-2022-1665 · Microsoft · Sql Server

Name of the Vulnerable Software and Affected Versions: SQL Server for Linux Containers affected versions not specified Description: The issue is related to insecure privilege management in Microsoft SQL Server for Linux. Exploitation of this issue may allow an attacker to elevate their privileges...

PT-2022-1690 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insecure privilege management in the Win32k component of Windows operating systems. It allows an attacker to elevate their privileges, potentially affecting the...

PT-2022-1708 · Microsoft · Dynamics Gp

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics GP affected versions not specified Description: The issue is related to insecure privilege management in Microsoft Dynamics GP, a software package for mid-size business accounting or enterprise resource planning. Exploitati...