PYSEC-2022-14

Improper Privilege Management in Conda loguru prior to 0.5.3...

PT-2022-13114

Name of the Vulnerable Software and Affected Versions Conda loguru versions prior to 0.5.3 Description The issue concerns the insertion of sensitive information into log files and improper privilege management in Conda loguru. Recommendations For versions prior to 0.5.3, update to version 0.5.3 o...

loguru 日志信息泄露漏洞

loguru is a Python library. It is used for logging. A log information disclosure vulnerability exists in versions prior to loguru 0.5.3, which stems from improper loguru privilege management...

The vulnerability of the McAfee Agent antivirus software, related to privilege management errors, allows a hacker to elevate their privileges.

The vulnerability of the McAfee Agent antivirus software is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges using a specially created openssl.cnf file...

Improper Privilege Management in liukuo362573/yishaadmin

Description Hi there, there is another improper privilege management in /admin/OrganizationManage/Position/GetFormJson Proof of Concept 1. Access the link http://106.14.124.170:80/admin/OrganizationManage/Position/GetFormJson?id=16508640061130139 2. See that the page return with position data...

Improper Privilege Management in liukuo362573/yishaadmin

Description Hi there yishaadmin maintainer team, I would like to report an improper privilege management in yishaadmin source code. The link /admin/ToolManage/Server/GetServerJson requires no authentication and accessible for everyone, which returns server info like RAM, CPU usage. Proof of Conce...

Improper Privilege Management in shelljs

shelljs is vulnerable to Improper Privilege Management...

GHSA-4RQ4-32RV-6WP6 Improper Privilege Management in shelljs

shelljs is vulnerable to Improper Privilege Management...

Improper Privilege Management in heroiclabs/nakama

Description A predefined View Only user has access to the User Management function at the :7351//users endpoint. By default this is a predefined system administrator function, and no other users should be able to access this function. Proof of Concept - Create a View-only user with the...

The vulnerability of Xen hypervisors on x86 Intel systems, related to the lack of a mechanism for managing privileges, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of Xen hypervisors on x86 Intel systems is related to the lack of a mechanism for managing privileges. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause service failures...

The vulnerability of Xen cross-platform hypervisors relates to insecure management of privileges, allowing attackers to access confidential data and cause service failures.

The vulnerability of the cross-platform Xen hypervisor is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to access confidential data and also cause service failures...

CVE-2022-0090: Improper Privilege Management

An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. GitLab is configured in a way that it doesn't ignore replacement references with git sub-commands, allowing a malicious user to spoof the contents of their commits in...

The vulnerability of the `ntfsattr_setup_flag` function in the NTFS file system driver for the FUSE NTFS-3G module involves insecure privilege management. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ntfsattrsetupflag function in the NTFS file system driver for the FUSE NTFS-3G module is related to insecure privilege management. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

shelljs Access Control Error Vulnerability

shelljs is a portable Windows/Linux/OS X implementation of Unix shell commands based on the Node.js API. A security vulnerability exists in shelljs that stems from improper privilege management and can be exploited by an attacker to gain unauthorized access...

PT-2022-1974 · Microsoft · Windows Nt Os Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows NT OS Kernel affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows NT OS Kernel, which is caused by unsafe privilege management. This vulnerability can be exploited...

Improper Privilege Management in shelljs

Impact Output from the synchronous version of shell.exec may be visible to other users on the same system. You may be affected if you execute shell.exec in multi-user Mac, Linux, or WSL environments, or if you execute shell.exec as the root user. Other shelljs functions including the asynchronous...

CVE-2021-43860: Improper Privilege Management

Flatpak is a Linux application sandboxing and distribution framework. Prior to versions 1.12.3 and 1.10.6, Flatpak doesn't properly validate that the permissions displayed to the user for an app at install time match the actual permissions granted to the app at runtime, in the case that there's a...

CVE-2021-42562: Improper Privilege Management

An issue was discovered in CALDERA 2.8.1. It does not properly segregate user privileges, resulting in non-admin users having access to read and modify configuration or other components that should only be accessible by admin users...

The vulnerability of the Windows Media Center component of the Windows operating system, which allows a hacker to gain elevated privileges

The vulnerability of the NTFS file system in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to increase their privileges...

openSUSE 15 Security Update : net-snmp (openSUSE-SU-2022:0050-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:0050-1 advisory. - setkey in agent/helpers/tablecontainer.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an authenticated...