The vulnerability of the Trend Micro OfficeScan antivirus protection, related to privilege management errors, allows a perpetrator to elevate their privileges or cause service interruptions.

The vulnerability of the Trend Micro OfficeScan antivirus protection lies in privilege management errors. Exploiting this vulnerability allows a remote attacker to increase their privileges or cause service interruptions...

The vulnerability of the Nagios Fusion software for visualizing IT infrastructure’s operational status lies in its insecure management of privileges, allowing attackers to escalate their privileges.

The vulnerability of the Nagios Fusion software for visualizing IT infrastructure’s operational status is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to increase their privileges by installing a malicious component containing PHP code...

PT-2021-3270

Name of the Vulnerable Software and Affected Versions Microsoft Enhanced Cryptographic Provider affected versions not specified Description The issue is related to insecure privilege management in the Microsoft Enhanced Cryptographic Provider, which can be exploited to elevate privileges. This...

PT-2021-3289 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in privilege management within the Windows operating system, specifically concerning the Group Policy Services. It allows an attacker to elevate their...

PT-2021-3288 · Microsoft · Intune Management Extension

Name of the Vulnerable Software and Affected Versions: Microsoft Intune Management Extension affected versions not specified Description: The issue is related to privilege management errors in the Intune management extension for Windows operating systems. Exploitation of this issue may allow a...

CVE-2021-31969: Improper Privilege Management

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability...

PT-2021-3304

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description The issue is related to errors in privilege management in the Windows Kernel, specifically affecting the ntoskrnl.exe file. This can allow an attacker to gain unauthorized access to...

PT-2021-3282 · Microsoft · Windows Mshtml Platform +1

Name of the Vulnerable Software and Affected Versions: Windows HTML Platforms affected versions not specified Description: The issue is related to errors in privilege management within the Windows HTML Platform component of the Windows operating system. This can allow a remote attacker to bypass...

PT-2021-3461

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description An issue exists in the Windows Print Spooler related to insecure privilege management. This flaw allows remote attackers to execute arbitrary code, escalate privileges, and impact t...

Johnson Controls Metasys

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Johnson Controls Equipment: Metasys Servers, Engines, and Tools Vulnerability: Improper Privilege Management 2. RISK EVALUATION Successful exploitation of this vulnerability could give an authenticated...

Improper Privilege Management in mailtrain-org/mailtrain

BUG Lower level user can revoke access from a campaign for admin . IMPACT Admin will not be able to access perticular campaign .\ This happen when lower level user added admin to a campaign and them removed him . STEP TO REPRODUCE 1. From admin account goto http://localhost:3000/users and add a...

CVE-2021-27657: Improper Privilege Management

Successful exploitation of this vulnerability could give an authenticated Metasys user an unintended level of access to the server file system, allowing them to access or modify system files by sending specifically crafted web messages to the Metasys system. This issue affects: Johnson Controls...

SUSE-SU-2021:1845-1 Security update for avahi

This update for avahi fixes the following issues: - CVE-2021-3468: avoid infinite loop by handling HUP event in clientwork bsc1184521. - CVE-2021-26720: drop privileges when invoking avahi-daemon-check-dns.sh bsc1180827 - Update avahi-daemon-check-dns.sh from Debian. Our previous version relied o...

PT-2021-3468 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to insecure privilege management in the browser, which can be exploited by a remote attacker to elevate their privileges. Recommendations: At the...

The vulnerability of the Exim message transfer agent, related to privilege management errors, allows a hacker to delete any files in the system at will.

The vulnerability of the Exim message transfer agent is related to privilege management errors. Exploiting this vulnerability could allow an attacker to delete arbitrary files from the system...

The vulnerability of the Exim message transfer agent, related to privilege management errors, allows a hacker to elevate their privileges within the system.

The vulnerability of the Exim message transfer agent is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges within the system...

The vulnerability of the Exim message transfer agent, related to privilege management errors, allows a hacker to elevate their privileges within the system.

The vulnerability of the Exim message transfer agent is related to privilege management errors. Exploiting this vulnerability can allow an attacker to elevate privileges within the system by sending the file’s PID...

The vulnerability of the Titanium CNC system, related to privilege management errors, allows a hacker to elevate their privileges within the system and execute arbitrary code.

The vulnerability of the Titanium CNC system is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges within the system and execute arbitrary code...

MesaLabs AmegaView Improper Privilege Management Vulnerability

MesaLabs AmegaView is a continuous monitoring system CMS from MesaLabs USA. A security vulnerability exists in MesaLabs AmegaView 3.0 and earlier versions, which can be exploited by an attacker to elevate the privileges of the...

CVE-2013-4536: Improper Privilege Management

An user able to alter the savevm data either on the disk or over the wire during migration could use this flaw to to corrupt QEMU process memory on the destination host, which could potentially result in arbitrary code execution on the host with the privileges of the QEMU process...