The vulnerability of the InstallService service in the Windows operating system allows a perpetrator to escalate their privileges.

The vulnerability of the InstallService service in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to enhance their privileges...

The vulnerability of the Windows operating system’s kernel, related to insecure management of privileges, allows attackers to bypass security mechanisms.

The vulnerability of the Windows operating system’s kernel is related to the insecure management of privileges. Exploiting this vulnerability can allow an attacker to bypass security mechanisms...

The vulnerability of the Windows operating system’s kernel, related to insecure management of privileges, allows attackers to elevate their own privileges.

The vulnerability of the Windows operating system’s kernel is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Exploit for CVE-2021-1675

C PrintNightmare CVE-2021-1675 You'll need a DLL to use Sh...

Improper Privilege Management in openemr/openemr

Description A predefined Front desk receptionist have access to the Audit Log Tamper Report function. By default this is a predefined system administrator function, and no other users should be able to access this function. Proof of Concept Log in with a Front desk receptionist user Simply open t...

WS-2021-0631

Improper Privilege Management in openemr/openemr...

McAfee Agent < 5.7.4 Multiple Vulnerabilities (SB10369)

The version of McAfee Agent, formerly McAfee ePolicy Orchestrator ePO Agent, installed on the remote host is prior to 5.7.4. It is, therefore, affected by the following vulnerabilities: - Improper access control vulnerability in the repair process for McAfee Agent for Windows prior to 5.7.4 could...

The vulnerability of the clean.php file in the Nagios XI monitoring tool allows a hacker to increase their privileges.

The vulnerability of the clean.php file used by Nagios XI is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to increase their privileges...

CVE-2021-31836

Improper privilege management vulnerability in maconfig for McAfee Agent for Windows prior to 5.7.4 allows a local user to gain access to sensitive information. The utility was able to be run from any location on the file system and by a low privileged user...

CVE-2021-31836

Improper privilege management vulnerability in maconfig for McAfee Agent for Windows prior to 5.7.4 allows a local user to gain access to sensitive information. The utility was able to be run from any location on the file system and by a low privileged user...

CVE-2021-31836 Improper Privilege Management in MA for Windows

Improper privilege management vulnerability in maconfig for McAfee Agent for Windows prior to 5.7.4 allows a local user to gain access to sensitive information. The utility was able to be run from any location on the file system and by a low privileged user...

CVE-2021-31836

CVE-2021-31836: Improper privilege management in the maconfig utility of McAfee Agent for Windows (pre-5.7.4) allows local, low-privilege users to access sensitive information. Affected software is McAfee Agent for Windows; the issue arises from running maconfig from any location on the file syst...

CVE-2021-31847 Improper privilege management in repair process of MA for Windows

Improper access control vulnerability in the repair process for McAfee Agent for Windows prior to 5.7.4 could allow a local attacker to perform a DLL preloading attack using unsigned DLLs. This would result in elevation of privileges and the ability to execute arbitrary code as the system user,...

CVE-2021-31836: Improper Privilege Management

Improper privilege management vulnerability in maconfig for McAfee Agent for Windows prior to 5.7.4 allows a local user to gain access to sensitive information. The utility was able to be run from any location on the file system and by a low privileged user...

PT-2021-4311 · Vmware · Vcenter Server Appliance +1

Name of the Vulnerable Software and Affected Versions: vCenter Server Appliance affected versions not specified Description: The vCenter Server contains multiple local privilege escalation issues due to improper permissions of files and directories. An authenticated local user with...

The vulnerability of the system administration utility is related to insecure management of privileges, which allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the system administration utility is related to an error during the normalization of umask. Exploiting this vulnerability can allow a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures...

AcuityBrands nLight ECLYPSE 安全漏洞

The AcuityBrands NLight Eclypse Necy is a system controller from AcuityBrands, Inc. It is used to connect nLight lighting networks to IP networks. A security vulnerability exists in the AcuityBrands nLight ECLYPSE that stems from a lack of security measures such as authentication, access control,...

Siemens Industrial Edge Management License Bypass Vulnerability

An authorization bypass vulnerability exists in Siemens Industrial Edge Management, a Siemens platform for hosting applications from various vendors on a computing platform close to the shop floor. Lack of effective privilege management for changing passwords. The vulnerability allows an attacker...

PT-2021-6969 · Microsoft · Windows Bind Filter Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Bind Filter Driver affected versions not specified Description: The issue is related to insecure privilege management in the Windows Bind Filter Driver, which can be exploited to elevate privileges. This could allow an attacker to...

PT-2021-6975 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to insecure privilege management in the Windows Print Spooler. It allows an attacker to elevate their privileges, potentially affecting the system. No...